How to connect to Wi-Fi using the command line

Managing wireless networks through the Windows graphical interface seems simple and straightforward until system crashes or automation is required. In situations where the Explorer graphical interface freezes, drivers behave erratically, or remote administration is required, the Windows graphical interface comes to the rescue. command lineThis powerful tool allows you to bypass standard menus and interact directly with the operating system's network stack.

Using the console to connect to Wi-Fi Gives the administrator complete control over connection parameters often hidden in standard settings. You can force disconnects from networks with poor signal strength, save profiles for quick deployment to other PCs, or diagnose problems at the packet level. You'll need permissions to use this feature. administrator and a basic understanding of command syntax.

In this article, we'll cover in detail the process of searching for networks, creating security profiles, and connecting to an access point using text commands only. We'll also cover connection diagnostic and optimization methods that aren't available through the standard task menu. This knowledge is indispensable for system administrators and advanced users who value efficiency.

Launch the console with administrator rights

The first step to any network configuration manipulation is gaining the necessary privileges. Simply launching the command line will not allow configuration changes. network adapters or save new security profiles. You must run the command prompt interface (CMD) or PowerShell as administrator. This is a critical step, as without it, subsequent commands will return an access error.

There are several ways to open the elevated console. The fastest is to press a key combination. Win + X and select "Windows Terminal (Admin)" or "Command Prompt (Admin)". Alternatively, you can enter cmd In the Start menu search, right-click on the result and select "Run as administrator."

⚠️ Caution: Make sure you're launching the command prompt, not just a text editor or browser. Working with system commands requires caution, although Wi-Fi control commands generally don't pose a risk of data corruption if entered correctly.

Once the window opens, you'll see a black background with a blinking cursor. This is where you'll enter all further code. The interface may vary depending on your Windows version, but the utility's functionality is the same. netsh has remained unchanged for many years. Now that access has been gained, we can move on to analyzing the surrounding airwaves.

Analysis of available wireless networks

Before connecting to a specific access point, you need to make sure your wireless adapter is active and can see the network. A built-in utility is used to scan the air. netshIt allows you to get a list of all available SSIDs (network names), their encryption type, and signal strength. This is especially useful when the desired network is hidden or does not appear in the list due to a temporary driver error.

To perform a scan, enter the following command:

netsh wlan show networks

The result will be a list of networks sorted by signal strength. You'll see the network name, security type (e.g., WPA2-Personal), and signal strength as a percentage. If the list is empty, check whether the Wi-Fi module itself is enabled. In some cases, you may need to force-enable the radio interface with the command netsh wlan set radiostate state=enabled.

It's important to pay attention to the security type, as it determines the method for creating a connection profile. Modern networks use WPA2 or WPA3, while older ones may use WEP, which is extremely insecure. Knowing the exact network name (SSID) is necessary for the next step—creating a configuration file.

Why is the network not showing up in the list?

If your network isn't showing up during scanning, it may be operating in the 5 GHz band, but your adapter only supports 2.4 GHz. This could also be due to a hidden SSID or a signal that's too weak, which the utility considers below the display threshold.

Creating an XML connection profile

Unlike the graphical interface, where you simply enter a password into a pop-up window, the command line requires you to first create a profile. A profile is an XML file containing the network name, encryption type, and security key. This may seem complex, but this approach provides flexibility and the ability to deploy settings in bulk.

To create a profile, use the command netsh wlan add profileThe command syntax requires the path to an XML file. However, creating this file manually is time-consuming, so a faster way is to generate it on the fly or use a template. Below is an example command for creating a profile with a public key (if the network is passwordless) or a private key.

For password-protected networks (WPA2-Personal), the easiest way to create a profile is to specify the key directly. The command looks like this:

netsh wlan add profile filename="C:\wifi_profile.xml" user=current

But to avoid creating the file manually, you can use the simplified method of directly entering parameters if your version of Windows supports the syntax extension, or create a minimal XML file in Notepad. File contents profile.xml should look something like this:

<?xml version="1.0"?>
<WLANProfile xmlns="http://www.microsoft.com/network/WLAN/1">
<name>MyHomeWiFi</name>
<SSIDConfig>
<SSID>
<name>MyHomeWiFi</name>
</SSID>
</SSIDConfig>
<connectionType>ESS</connectionType>
<connectionMode>manual</connectionMode>
<MSM>
<security>
<authEncryption>
<authentication>WPA2PSK</authentication>
<encryption>AES</encryption>
<useOneX>false</useOneX>
</authEncryption>
<sharedKey>
<keyType>passPhrase</keyType>
<protected>false</protected>
<keyMaterial>YOUR_PASSWORD</keyMaterial>
</sharedKey>
</security>
</MSM>
</WLANProfile>

⚠️ Attention: In the field keyMaterial The password is written in cleartext. After using the file to connect, it is strongly recommended to delete it from the disk or securely protect it, as anyone who gains access to the file will be able to read your Wi-Fi password.

After saving the XML file to the root of the C drive (for simplicity of path), run the profile addition command specified above. The system will confirm successful addition with the message "Profile added successfully." The operating system is now aware of the existence of this network and its login credentials.

Connecting to the network and managing the connection

Once the profile is created and loaded into the system, you can initiate a connection. This is done with a single, concise command that associates the interface name (usually "Wireless" or "Wi-Fi") with the name of the created profile. If the interface name contains spaces, it must be enclosed in quotation marks.

The connection command looks like this:

netsh wlan connect name="Your_Profile_Name" interface="Wi-Fi"

If you don't know the exact interface name, enter netsh wlan show interfacesThe system will respond with a table with technical details of the adapter's current status. The list will include the name, status (connected/disconnected), SSID, and security type. Make sure you use the exact name listed in the "Name" column.

Disconnect commands are also available for managing active connections. For example, to disconnect from the current access point, use:

netsh wlan disconnect interface="Wi-Fi"

This feature is useful when testing connection recovery speeds or when switching between the 2.4GHz and 5GHz frequency bands if you have separate configurations for each.

Diagnostics and viewing saved passwords

One of the most frequently used command line features for the average user is the ability to view saved passwords. Windows hides password characters in the graphical interface by default, but you can display them in plain text through the console. This is helpful if you've forgotten the password for a network your computer previously connected to.

First, you need to display a list of all saved profiles:

netsh wlan show profiles

Then, knowing the name of the desired profile, request its detailed configuration with the security key. The command looks like this:

netsh wlan show profile name="Profile_Name" key=clear

In the command output, find the "Security settings" section. The "Key Content" line will contain the password you're looking for. If the password is blank or a message about no key is displayed, the profile doesn't contain a saved password (for example, a smart card or corporate authentication is used).

It is also useful to use the command for diagnostics netsh wlan show wlanreportIt generates a detailed HTML report of all Wi-Fi-related events for the last three days. The report is saved to the path C:\ProgramData\Microsoft\Windows\WlanReport\wlan-report-latest.htmlIt can be used to find reasons for connection interruptions, authentication errors, and signal quality over time.

Deleting profiles and resetting settings

Over time, the system accumulates network profiles that are no longer used, or the settings can become corrupted, causing connection conflicts. The command line allows you to quickly clear this list. Deleting a profile is useful if you've changed the router password, but Windows continues to try to connect with the old settings, or if the profile is corrupted.

To delete a specific profile, use the command:

netsh wlan delete profile name="Profile_Name"

If you need to delete all saved profiles at once (for example, when preparing a computer for transfer to another user), you can use a loop in PowerShell or delete them one by one. There's also a command to reset autoswitching settings (automatic switching to higher-priority networks):

netsh wlan set autoconnect config=disable

This will prevent automatic connections to known networks without your knowledge, improving security in public places. After clearing the profiles, it is recommended to restart your computer or reconnect the network adapter through Device Manager for the changes to take effect.

⚠️ Note: Interfaces and command names may vary slightly depending on your Windows version (10, 11) and the locale (Russian/English). If the command fails, check that the profile names are spelled correctly, taking into account the case of the letters.

Frequently Asked Questions (FAQ)

Is it possible to connect to Wi-Fi without entering a password if it is hidden?

Yes, if you know the exact network name (SSID) and encryption type. When creating an XML profile manually, specify the exact network name in the tag. <name> And <SSID>, as well as the correct authentication type. However, without knowing the password (security key), connecting to a secure network is impossible, either through the command line or through the interface.

What to do if netsh command is not found?

Utility netsh is a system command and is present in all modern versions of Windows. If the system reports that the command cannot be found, system files may be corrupted or the path may have changed. Try running the command sfc /scannow to restore the integrity of the system or specify the full path to the executable file, although this is usually not necessary.

How do I find the MAC address of my Wi-Fi adapter using the console?

Enter the command netsh wlan show interfacesAt the top of the output, in the "Physical address" line, you will see the MAC address of your wireless adapter in the format XX-XX-XX-XX-XX-XX.

Do these commands work in PowerShell?

Yes, PowerShell is fully compatible with commands. netshYou can enter them directly into the PowerShell window without having to switch to the classic CMD command prompt. The syntax and parameters remain identical.

Secret command to reset the TCP/IP stack

If Wi-Fi issues persist, try running the command netsh int ip reset and then restarting your computer. This will reset the TCP/IP protocol settings to factory defaults.