Sharing a WiFi password feels harmless, and for a friend in your living room it mostly is. But the password lets someone onto the same network as your laptops, printers, cameras and smart speakers, and the usual ways of sharing it (reading it aloud, taping it to the wall, texting it) leave copies you don't control.
The short answer
- Put visitors on a guest network with its own password, so your main password stays private.
- If they're in the room, share it from your phone or show a QR code. Nothing gets written down.
- If they're not, send a one-time link instead of texting the password.
- Change the guest password when the list of people who know it gets longer than you're comfortable with.
What a WiFi password actually gives someone
On a typical home or small-office network (WPA2 or WPA3 Personal), the password is the only thing standing between a device and your local network. Anyone who knows it can join, from any device, for as long as the password stays the same. Once connected, they're on the same network as everything else you own, unless the router keeps guests apart.
That's why the FTC's advice on securing a home Wi-Fi network recommends WPA3 or WPA2 encryption, a unique network password, and a separate guest network, so fewer people know your main password and visitors' devices can't reach the rest of your network.
Option 1: a guest network (do this first)
Most home routers can run a separate guest network with its own name and password. It's the single most useful step, because it changes what you're sharing:
- your main password stays with the people who live or work there;
- you can change the guest password at any time without reconnecting your own devices;
- many routers can stop guest devices from seeing each other or your main network. The setting is often called client isolation or AP isolation, and names vary by brand.
Pick a guest password that's easy to type and hard to guess
Guests often type the password on a TV, a games console or a laptop with an unfamiliar keyboard, which tempts people into short, simple passwords. A passphrase solves both problems: several random, unrelated words are long enough to resist guessing and easy to read out or type. CISA's guidance on strong passwords suggests a passphrase of 5 to 7 unrelated words, or at least 16 random characters. The password generator can make a passphrase for you.
Avoid anything guessable from the outside: the street name, the family name or the name of the network itself.
Option 2: share it in person, phone to phone
When the other person is standing next to you, let the phones do it.
- iPhone and iPad: when a nearby Apple device tries to join your network, your device can offer to share the password. Apple's instructions list the requirements: both devices need Wi-Fi and Bluetooth on, each person must be signed in to their Apple Account, each must have the other's Apple Account email or phone number in Contacts, and the devices need to be close together.
- Android: in Settings, open your saved network and choose Share. The phone shows a QR code the other person can scan (Android Help).
Either way, the password is never typed into a chat or written down.
Option 3: a WiFi QR code
Phone cameras recognise a standard WiFi QR format and offer to join the network when they scan it. Inside the code is a short line of text: WIFI:T:WPA;S:network-name;P:password;;, where T is the security type, S the network name and P the password. Special characters such as ;, ,, : and " in the name or password have to be escaped with a backslash (ZXing barcode contents). A generator does that for you; you can make one with the WiFi QR code generator.
One thing to understand before printing it: a QR code is the password, just encoded. Anyone who photographs it can read the password straight back out. That makes a printed code ideal for a guest network you're happy to share widely, such as a café, an office lobby or a holiday rental, and a poor idea for your main network. Print the network name and password as text beside the code too, for guests whose camera or device can't read it.
Option 4: when they're not in the room, a one-time link
Texting the password leaves it in both message histories, on every linked device and in backups, and possibly on a lock screen notification. A one-time link leaves a link in the chat instead, and the link stops working once it's opened.
With ProtectedShare's Secure Notes:
- Paste the network name and password into a new note.
- Keep burn after reading on, and choose an expiry of 1 hour or 1 day.
- Copy the link and send it in your usual app.
The note is encrypted in your browser with AES-256-GCM before upload, and the key sits after the # in the link, a part browsers don't send to the server (MDN). The first open deletes the note from the database. If your guest finds the link already used, someone else opened it first, which is your cue to change the guest password.
Which option fits which situation
| Situation | Best option | Why |
|---|---|---|
| A friend in your living room | Phone-to-phone sharing, or the QR code from your phone | Nothing is written down or sent |
| Holiday rental or Airbnb | Guest network with a printed QR code | Expect it to be photographed; change it between stays if you want |
| Café or office lobby | Guest network with a printed QR code | Deliberately shared widely, kept apart from your own devices |
| A contractor arriving next week | One-time link to the guest network password | Not left in a chat history, and it expires |
| New staff in an office | Each person's own WiFi login (WPA2 or WPA3 Enterprise), if your equipment supports it | Access can be removed person by person |
| A smart TV or other device | Type it in directly, or use a separate network for those devices | No need to share the password with anyone |
When not to use a link
- When the person is in the room. A QR code or phone sharing is quicker and leaves nothing behind.
- For office staff, a shared password is the wrong tool altogether. Business access points support WPA2 and WPA3 Enterprise, which gives each person their own login that can be revoked individually. If that's out of reach, keep staff on a different network from guests.
- When you're about to change the password anyway. Just share the new one in person.
After sharing: when to change the password
You don't need to change a WiFi password on a schedule for the sake of it. Change it when the group of people who know it changes in a way you care about:
- a tenant, housemate or employee moves out or leaves;
- a printed QR code or a photo of the password has been somewhere you don't control;
- you can no longer say who has it.
This is where a guest network pays off: changing the guest password only affects guests. Changing the main password means re-entering it on every device you own. And whenever you're in the router's settings, the FTC also recommends changing the router's default admin password and keeping its firmware up to date.
Sources
- FTC, How To Secure Your Home Wi-Fi Network
- CISA, Require Strong Passwords
- Apple Support, How to share your Wi-Fi password from your iPhone or iPad
- Android Help, Connect to Wi-Fi networks on your Android device
- ZXing, Barcode Contents: Wi-Fi network config
- MDN, URI fragment