WPA, WPA2, WPA3: which to pick.
When generating a WiFi QR code, you need to tell the QR which security type your network uses. Most of the time the answer is WPA2, and most QR generators (including this one) treat WPA, WPA2, and WPA3 as the same setting under the hood. Here is what the choice actually means.
Quick answer for most people
Pick WPA / WPA2 / WPA3 in our security selector. This is the right choice for over 95% of home and business networks built since 2006. The QR code uses the same encoding for all three, and your phone will negotiate the actual security level when it joins.
If your network is genuinely open (no password, like some cafes and libraries), pick Open. If your router is from before 2003 and only supports WEP, replace your router.
What each one actually means
A short tour for the curious:
WPA (2003)
The original WPA shipped as a stopgap when WEP was broken. It improved security but had its own weaknesses and is now considered legacy. If your router only supports plain WPA, it is at least twenty years old and should be replaced for performance reasons alone.
WPA2 (2004)
WPA2 has been the standard for two decades and is what runs on virtually every home and business router shipped in the last fifteen years. It uses AES encryption and is still considered safe for normal home use in 2026. Most routers labelled "WPA2-Personal" or just "WPA2" are running this.
WPA3 (2018)
WPA3 is the newer standard, mandatory for routers certified after 2020. It improves the handshake process (making offline password-cracking attacks harder) and adds individualised encryption for open networks. Most modern routers default to a "WPA2/WPA3 Mixed" mode that lets older devices join via WPA2 while newer ones use WPA3.
Open / nopass
Networks with no password (the way most coffee shops and airport lounges have historically run their public wifi). The QR uses a special "nopass" type. Useful for any free-access network where the QR is just sharing the SSID and saving people from typing it.
WEP (do not use)
WEP was the original wifi security from 1997 and was broken by 2001. Any network still running WEP can be cracked by an automated tool in minutes. If your router only supports WEP, replace it. We support encoding WEP in the QR for completeness, but you should not be using it in 2026.
What about Enterprise vs Personal?
WPA2-Enterprise and WPA3-Enterprise use a separate username-and-certificate flow (typical of corporate wifi) that does not work with simple QR-code joining. If your network is on Enterprise authentication, a WiFi QR poster is not the right tool. Stick with the IT-managed onboarding.
For everyone else: WPA2-Personal and WPA3-Personal are what you want. Both are encoded the same way in the QR.
What to pick on prettywifi
Two options cover almost everyone:
- WPA / WPA2 / WPA3 — the default, correct for any home or business network with a password.
- Open — for guest or public networks with no password.
Common questions.
- My router says "WPA2/WPA3 Mixed", what do I pick?
- Pick WPA / WPA2 / WPA3 (the default). The QR will encode the credentials and your phone will negotiate the right security level when it joins.
- Is WPA2 still safe in 2026?
- Yes for normal home use. WPA2 with a strong, unique password (12+ characters, not a dictionary word) is still considered safe. WPA3 is better but not strictly necessary for most homes.
- Should I upgrade my router to one that supports WPA3?
- If your router was made in the last few years it probably already supports WPA3. If it is older than 2018 and you want the upgrade, look for routers labelled "WPA3" or "WiFi 6" (which requires WPA3).
- Why does WPA3 not have its own QR option?
- The WIFI: QR format treats WPA, WPA2, and WPA3 as the same value under the hood. The phone reads "WPA" and uses whichever protocol your router actually negotiates.