Why Use a Guest Network
- Guests get internet without your main Wi-Fi password — so you never have to change it later
- Guest devices are isolated from your computers, NAS, printers, and smart home hub
- If a guest's device is infected with malware, the infection can't spread to your network
- You can bandwidth-limit the guest network so visitors don't eat your streaming speed
- You can expire access with a scheduled shutoff after their visit ends
- Best place to put all your IoT / smart home devices — isolates them from your personal data
Generic Setup Steps (Any Router)
- Sign in to your router's admin page (see our Wi-Fi password guide for admin IPs)
- Navigate to Guest Network, Guest Access, or Guest Wi-Fi — usually under Wireless settings
- Toggle guest network On
- Pick a distinct SSID — e.g. "HomeName-Guest" so visitors know which one to join
- Set a password (or leave open with a captive portal — covered below)
- Enable AP Isolation or Access to Local Network: Disabled (this is what keeps guests away from your main LAN)
- Optional: set bandwidth limits and a schedule
- Save
Per-Router Instructions
| Router / ISP | Menu path |
|---|---|
| Netgear | Wireless Settings → Guest Network |
| TP-Link | Wireless → Guest Network (or Guest Network in left sidebar) |
| ASUS | General → Guest Network |
| Linksys | Wireless → Guest Access |
| Xfinity xFi | xFi app → See Network → Advanced → Xfinity WiFi Hotspot Network |
| Eero | Eero app → Settings → Guest Access |
| Google Nest Wifi | Google Home app → Wi-Fi → Settings → Guest Network (now called Point network) |
| Verizon Fios | Wireless Settings → Guest WiFi |
| AT&T BGW320 | Home Network → Wi-Fi → Guest WiFi |
Security Settings for Guest Networks
- WPA2-AES minimum — never use WEP or "Open" in 2026
- AP Isolation: On — prevents guest devices from discovering or connecting to each other or your main network
- Access to Local Network: Off — the key setting for keeping guests off your NAS, printer, smart speakers
- Internet only — this is the goal; no LAN, no router admin access
What About a Captive Portal?
Captive portals (the "Accept Terms" page you see on coffee shop Wi-Fi) are overkill for a home network. They're useful for Airbnb hosts or coworking spaces who want guests to see rules or landing pages. Most consumer routers don't support them natively; you'd need business hardware or a service like Plasma Cloud, Unifi, or NodeBB.
Bandwidth Limiting on the Guest Network
Some routers (ASUS, TP-Link Archer, Unifi, Netgear Nighthawk) let you cap guest bandwidth — e.g. 25 Mbps down / 10 Mbps up — so a visitor streaming 4K can't starve your work call. On routers without native QoS, you can still limit impact by:
- Putting the guest network on its own VLAN and rate-limiting that VLAN
- Using QoS rules that prioritize traffic from your main SSID
Should IoT Devices Go on the Guest Network?
Yes — this is one of the best security practices. Smart bulbs, plugs, speakers, TVs, cameras, and doorbells often run outdated software with known vulnerabilities. Putting them on the guest network (with AP isolation enabled) means a compromised smart plug can't scan or attack your laptop or phone on the main network.
The caveat: some smart home integrations (casting to Chromecast, finding an Alexa device, AirPlay to a HomePod) require the controlling device and the smart device to be on the same network. You may need to put those devices on your main network and keep the rest on guest.
Sharing Guest Wi-Fi Without Typing the Password
- QR code — generate one at qifi.org with your guest SSID and password; print or display on a fridge
- iOS share — if you have the guest password saved, any iPhone near a guest can share it via AirDrop-like prompt
- Android share — on Android 10+, saved networks can be shared via QR from Wi-Fi settings
Frequently Asked Questions
Does a guest network slow down my main Wi-Fi?
Only if guests are actively using it — both networks share the same physical radio and airtime. If you want to guarantee main-network speed, enable bandwidth limits on the guest SSID so it can't exceed a fixed portion of your total capacity.
Can guests on my guest network see my computer?
Only if AP isolation is disabled. With AP isolation on (or "Access to local network" disabled), guest devices can reach the internet but cannot reach or even see your main-network devices.
Should I put my IoT devices on the guest network?
Yes, in most cases. It isolates smart devices (which often run outdated software) from your personal computers and phones. The exception is devices that need to talk to a controller on your main network — Chromecast, AirPlay, Alexa groups — which may require being on the same network as their controller.