Create a Wi-Fi QR code without sharing through a server
A Wi-Fi QR code packages the network name, security type, password, and hidden-network flag into the format recognized by many phone camera apps. Guests can scan and review a join prompt instead of typing a long passphrase. This is useful at homes, studios, waiting rooms, holiday rentals, events, and support desks where the same credentials would otherwise be copied repeatedly. Tool Swim builds the payload locally in your browser; the network name and password are not sent away for QR rendering.
Select WPA for modern WPA2 or WPA3 personal networks unless your device documentation requires something else. WEP is retained only for compatibility with old equipment and should not be chosen for a new network. Choose no password only when the access point is intentionally open. The hidden switch tells compatible scanners that the SSID is not broadcast; hiding a network name is not a meaningful security control.
Enter the exact network identity
The SSID is case-sensitive and may contain spaces or punctuation. Copy it exactly from the router or a device already connected to the intended access point. The generator escapes separators such as semicolons, commas, colons, quotation marks, and backslashes so they remain part of the value instead of breaking the Wi-Fi payload. A visually similar name can still identify a different access point, so check every character before printing.
Passwords are also case-sensitive. Avoid copying a trailing space from a password manager, and remember that changing the router password makes every previously printed static code obsolete. If credentials rotate frequently, print a code that points to a managed guest-access page instead. For a long-lived card, create an isolated guest network with client separation and access limits rather than exposing the password for the network that holds personal or business devices.
Understand compatibility limits
The WIFI text convention is widely implemented but is not an IETF standard, and behavior varies by camera, operating system, and enterprise Wi-Fi configuration. Simple personal networks have the broadest support. Captive portals may connect first and then open a sign-in page. Enterprise networks that require usernames, certificates, anonymous identities, or domain validation need managed onboarding instructions and should not be reduced to a shared-password code.
Some desktop QR readers display the raw payload instead of joining, and older phones may ignore hidden or no-password flags. That is why the printed card should show the guest network name and a short help instruction. Do not print the password in human-readable text unless the physical setting already permits anyone nearby to receive it.
Make the symbol easy to scan
Wi-Fi passwords can be long, which raises QR density. Start with medium correction and a four-module margin. Increase the exported size when the preview contains many tiny modules; do not compensate by shrinking the quiet zone. Use a very dark foreground on a plain light background, and keep glossy reflections, wood grain, fabric texture, and illustrations away from the symbol.
SVG is the best choice for signs and welcome cards because it stays sharp when the layout is resized. PNG is convenient for documents and messaging, but export it at a resolution comfortably above the final placement. Never stretch only one dimension. If a print vendor rasterizes the SVG, inspect their proof at 100 percent and scan the production sample.
Handle credentials as secrets
Local generation prevents the credentials from being uploaded during creation, but the downloaded QR image contains the password in decodable form. Anyone who can photograph the card can recover and share it. Place the card only where intended guests can see it, remove old copies when credentials change, and avoid posting it in public listing photos or social media. A high error-correction setting does not encrypt the contents.
For offices, schools, clinics, and other managed environments, involve the network administrator. A guest VLAN, bandwidth policy, expiration schedule, and incident process are more important than the convenience of the code itself. Never use a shared Wi-Fi QR code to bypass device enrollment, certificate checks, acceptable-use acknowledgement, or other controls required by organizational policy.
Test where guests will actually scan
Print at final size and scan with multiple camera apps before distributing copies. Confirm that the join prompt names the intended SSID and does not silently select a similarly named network. Test at the reception desk, room entrance, or rental property where lighting and distance match real use. Then disable mobile data temporarily and verify that the joined device can reach the internet or captive portal.
Repeat the test after router replacement, firmware changes, or any credential update. Mark the source artwork with a revision date so staff know which card is current. Keep a plain-text connection method available for accessibility and for devices without camera joining. Destroy retired cards rather than leaving outdated credentials in drawers, welcome binders, or online PDFs.
