01 · Verify the source
Confirm the network name with staff and check for replaced or covered QR stickers.
CONNECT / CHECK / PROTECT
Illustrated Q&A for Windows, Mac, Android and iPhone/iPad: joining Wi-Fi, scanning QR codes, public-network risks and WPA2/WPA3 security modes.
01 / EVERYDAY DEVICES
Joining an existing network normally does not require a separate Wi-Fi app. Obtain the correct name and password; company networks may need an account, certificate or administrator configuration.
Windows 11: open the network/sound/battery area on the taskbar, then the Wi-Fi list. Windows 10: select the network icon.
Confirm the network name (SSID) with the venue, select Connect and enter its Wi-Fi password. Use automatic connection only for trusted, regularly used networks.
Check for Connected, then open a trusted website. Use the Public network profile in public places and avoid enabling file sharing.
On Windows 11 with the required camera and feature support, scan a Wi-Fi QR code in Camera’s barcode mode, then review and confirm the network in Settings. Otherwise, enter the password.
Select Wi-Fi in the menu bar, or open System Settings → Wi-Fi, and turn Wi-Fi on.
Choose the correct name, enter the password and select Join. Check Other Networks if it is not listed.
Confirm the connection and test a website. Turn off unnecessary sharing while away; disable auto-join or forget the network after use.
Use the Wi-Fi menu or Settings on a Mac. This guide does not assume every Mac can join by scanning with its built-in camera; ask the administrator for the network name and password.
Open Settings → Network & internet → Internet, or Connections → Wi-Fi on some manufacturers’ devices.
Turn on Wi-Fi, confirm the network name, enter its password and connect. Menu names vary by manufacturer and version.
Use the scanner icon, if available, for the venue’s Wi-Fi QR code. Share on a connected network can display a QR code and may require device authentication.
Camera recognition of Wi-Fi QR codes depends on the phone. Use the scanner in Wi-Fi settings or enter the password if needed; do not install an unknown app just to connect.
Open Settings → Wi-Fi, turn Wi-Fi on and wait for available networks.
Select the confirmed network name, enter its password and join. A checkmark beside the name indicates a connection.
Point Camera or Code Scanner at a trusted Wi-Fi QR code, tap the prompt and confirm the name before joining. Supported versions of Passwords can show a network QR code under Wi-Fi.
A scanned website link is different from Wi-Fi connection details. Check the address first; do not install profiles or root certificates, or provide an Apple Account password, at an unknown page’s request.
These are concept interfaces; versions, manufacturers and company policies can change the steps. This page does not inspect your device, scan networks or collect Wi-Fi passwords.
02 / SCAN WITH CARE
The illustrated symbol is not a scannable QR code.
Confirm the network name with staff and check for replaced or covered QR stickers.
A Wi-Fi name and a website address are different. Confirm the intended network before connecting.
Share only an authorised guest network. Treat a password-bearing QR image as a password; keep staff-network details private.
Google | Android Wi-Fi connections and sharing ↗ · Apple | Scan a QR code ↗ · Apple | Find and share Wi-Fi passwords ↗
03 / TRUST THE CONNECTION
Connecting does not automatically mean compromise. Impersonated hotspots, phishing pages, unencrypted traffic and device vulnerabilities increase risk. Update your device, disable unnecessary sharing and heed certificate warnings; disconnect and use cellular data if unsure.
Similar names do not prove ownership. Ask staff and avoid unidentified networks.
HTTPS encryption does not establish trust. Check spelling, fake sign-in pages and certificate warnings.
Install system and browser security updates; disable unnecessary file sharing.
Stop and verify requests for banking passwords, codes or certificate installation on unfamiliar portals.
Forget a temporary network and verify it again when needed.
Prefer a trusted connection for sensitive work. A VPN adds protection but cannot make a phishing page safe.
04 / AUTHENTICATION & ENCRYPTION
WPA2/WPA3 are security and authentication modes; AES and TKIP refer to encryption. Personal typically uses a shared password; Enterprise uses an authentication service.
HTTPS protection extends to the correct website. A Wi-Fi password or portal does not replace HTTPS or prove VLAN/guest isolation.
SAE authentication improves resistance to offline password guessing and requires protected management frames.
Both the access point and client must support it; some older devices cannot join. Strong passwords and firmware updates still matter.
Compatible devices use WPA3; older ones can use WPA2 (AES), allowing a gradual upgrade.
Clients connecting through WPA2 do not gain all WPA3 protections. Test the actual devices.
Widely supported and straightforward to configure; an option when WPA3 is unavailable.
Weak passwords are more exposed to offline guessing; rotate a leaked shared password. Choose AES and avoid TKIP.
802.1X enables user or device authentication and individual revocation; EAP-TLS can use certificates.
Requires an authentication service and certificate management. Verify the server identity against administrator-provided details; do not blindly trust an unfamiliar certificate.
Compatible devices encrypt traffic to the AP without a shared password, adding protection over traditional open Wi-Fi.
Does not authenticate the hotspot, prove it belongs to the venue or replace HTTPS and guest isolation. Device support is required.
Joining needs no password, but traditional open mode has no Wi-Fi-layer encryption.
Unencrypted traffic can be exposed; HTTPS still protects content sent to the correct site. Prefer a trusted network or cellular data for sensitive work.
May retain compatibility with very old equipment; that is not a security benefit.
Known weaknesses make these unsuitable for new deployments. Upgrade or replace equipment instead of weakening the whole network.
Q&A / KEEP IT SIMPLE
Not necessarily. Wi-Fi connects your device to an access point; a guest portal, DHCP, DNS, uplink or internet issue can still block access. Confirm the name and sign-in requirements, then test a trusted site.
No. A Wi-Fi QR code supplies network details; a sticker can be replaced or contain a phishing link. Confirm the name with the venue and read the prompt. If it contains a password, someone with the image may read and use that password.
Connecting does not automatically mean compromise. Impersonated hotspots, phishing pages, unencrypted traffic and device vulnerabilities increase risk. Update your device, disable unnecessary sharing and heed certificate warnings; disconnect and use cellular data if unsure.
No. HTTPS protects traffic to that website, but phishing sites can use it too. A trusted VPN protects traffic to its service; it cannot stop you giving credentials to a fake site, installing malware or encountering every device vulnerability.
Confirm the portal belongs to the venue and review how data is used. Connecting normally should not require banking or email passwords or one-time login codes. Stop and ask the administrator before an unfamiliar page’s request to install an app, profile or certificate.
GUEST describes a purpose or network name; a VLAN separates logical network segments. Another SSID alone does not provide isolation: firewall/access rules, client isolation where needed and testing also matter.
It does not delete photos or files; it removes saved connection details, so joining again normally requires the password. Forget a temporary network after use or disable auto-join.
Reviewed: 12 October 2026 (Hong Kong time). Follow your device version and administrator’s instructions; sources do not endorse WiFi-HK’s services.