Wi-Fi Mark: A Complete Guide to Setting Up and Using Your Router

Have you ever found yourself in a situation where guests ask for your Wi-Fi password, but you don't want to share your main security key? Or have you ever needed temporary internet access for a device that shouldn't be trusted with full network access? There's a solution— Wi-Fi Mark technology (sometimes called Wi-Fi QSS or Wi-Fi Protected Setup Mark). This tool allows you to create one-time or timestamp access tokens to your network without revealing the master password.

Wi-Fi Mark isn't a new feature, but it's become more popular in 2026 due to the rise of smart devices (IoT) and increased cyber threats. Unlike a traditional guest network, which requires separate SSID configuration, Wi-Fi Mark generates a unique QR code or PIN code, which can be given to a guest or used to connect smart lights, cameras, or other gadgets. The main advantage is controlled access with the ability to limit time, speed, or even traffic type.

In this article, we will analyze how Wi-Fi Mark works on popular routers (TP-Link, ASUS, Keenetic, Xiaomi), how to configure it for different scenarios (guest access, IoT devices, temporary internet for tenants), and we'll also cover hidden features and security measures. If you're an office network administrator or simply want better control over your home Wi-Fi, this guide is for you.

What is Wi-Fi Mark and how does it work?

Wi-Fi Mark is a protocol that simplifies connecting devices to a wireless network without entering a complex password. Instead, it uses:

• 🔹 QR code — scanned by a smartphone or tablet camera.
• 🔢 PIN code — a short numerical combination (usually 4–8 digits).
• 📱 NFC tag (less common) - for devices that support contactless communication.

The technology is based on the standard Wi-Fi Protected Setup (WPS), but lacks its key vulnerabilities. Unlike WPS, which is often disabled due to the risk of hacking, Wi-Fi Mark allows:

• 🕒 Install time of action tags (from 10 minutes to 30 days).
• 📊 Limit Internet speed for connected devices.
• 🚫 Block access to local resources (for example, to network folders or printers).

It's important to understand that Wi-Fi Mark doesn't replace your main network, but rather complements it. Devices connected via the tag have internet access but remain isolated from your personal data. This is especially important for smart homes, where cameras or sensors should not "see" your computer or smartphone.

Differences between Wi-Fi Mark, Guest Network, and WPS

Many people confuse Wi-Fi Mark with a guest network or WPS. Let's break down the key differences in the table:

When to use Wi-Fi Mark:

• 🏨 For temporary guests (friends, tenants, colleagues).
• 💡 To connect smart devices (lamps, sockets, sensors).
• 📱 For testing new gadgets before being added to the main network.

When is it best to choose a guest network:

• 🏢 For regular guests (for example, in the office).
• 🖥️ If you need to share access several devices simultaneously (Wi-Fi Mark is usually limited to 1-2 connections per tag.)

⚠️ Attention: Some routers (especially budget models) may refer to Wi-Fi Mark as "Quick Connect" or "QSS." Check your model's documentation—the features may vary.

Step-by-step setup of Wi-Fi Mark on routers of different brands

The settings interface varies depending on the router manufacturer. Let's look at the process for the most popular brands.

1. TP-Link (Archer, Deco, Omada)

On routers TP-Link the function is called "Wi-Fi Mark" or "QSS":

1. Open the router's web interface at 192.168.0.1 or 192.168.1.1.
2. Go to the section Advanced settings → Wireless mode → Wi-Fi Mark.
3. Activate the function and configure the settings:
   • 🕒 Time of action (for example, 24 hours).
   • 📶 Speed ​​Limit (for example, 10 Mbps).

Generate QR code or PIN code and save it (you can send it to the guest via messenger).

2. ASUS (RT-AX, ZenWiFi)

On routers ASUS the function is hidden in the menu "AiProtection" or Guest Network:

1. Go to 192.168.1.1 and log in.
2. Go to Wireless Network → Wi-Fi Mark (or AiProtection → Devices → Quick Connection).
3. Click Create a label and select options:
   • 🔒 Access type (Internet or Internet + local network).
   • ⏳ Validity period (from 1 hour to 7 days).

Download the QR code or copy the PIN.

3. Keenetic (Giga, Hero, Viva)

Keenetic uses the term Quick Connection:

1. Login to the interface at my.keenetic.net.
2. Go to Home Network → Quick Connection.
3. Set up:
   • 📍 SSID (you can leave the main one or create a new one).
   • 🕐 Life time tags.

Generate code and export it to file or print.

⚠️ Attention: On some models Keenetic Wi-Fi Mark only works when enabled. WPSIf the feature is not active, check the security settings in the section Wireless Network → Security.

4. Xiaomi (Mi Router, AIoT Router)

Routers Xiaomi integrate Wi-Fi Mark into the app Mi Wi-Fi:

1. Open the app and select your router.
2. Go to Settings → Wi-Fi → Quick Connect.
3. Click Create a label and select:
   • 📱 Device type (smartphone, IoT, PC).
   • ⏰ Duration (from 30 minutes to 1 week).

Share the QR code via WeChat, Telegram or save the image.

If you have a router of another brand (Zyxel, D-Link, Mercusys), look for functions named:

• 🔹 Quick Connect (D-Link).
• 🔹 EasyConnect (Zyxel).
• 🔹 Wi-Fi Protected Setup Mark (universal name).

How to connect to Wi-Fi via a tag (guest guide)

If you've received a QR code or PIN from Wi-Fi Mark, you can connect in a few steps. Let's look at the process for different devices.

📱 Smartphones (Android and iOS)

On Android:

1. Open camera and point at the QR code.
2. Click on the notification Connect to Wi-Fi.
3. Confirm the connection and the Internet will work automatically.

On iOS (iPhone/iPad):

1. Open the app "Camera".
2. Point to the QR code and wait for the banner to appear. "Join a Wi-Fi network".
3. Tap the banner and confirm the connection.

If instead of a QR code you have PIN code:

1. Go to Settings → Wi-Fi.
2. Select the network marked "QSS" or "Wi-Fi Mark".
3. Enter the PIN code in the appropriate field.

💻 Laptops and PCs (Windows, macOS, Linux)

On Windows 10/11:

1. Open Settings → Network and Internet → Wi-Fi.
2. Click Other connection methods.
3. Select Connecting using a WPS PIN and enter the code.

On macOS:

• 🍎 Open System Preferences → Network.
• Select the network with the icon "QSS".
• Enter the PIN manually (macOS does not support QR codes for Wi-Fi).

🧠 Smart devices (IoT)

To connect smart lamps (Xiaomi Yeelight, Philips Hue), sockets (TP-Link Tapo) or cameras (Ezviz, Hikvision):

1. Open your device's app (e.g. Mi Home or Tapo).
2. Select an option Connecting via QR code or "Wi-Fi Mark".
3. Scan the code or enter your PIN.

⚠️ Attention: Some IoT devices (especially older models) don't support Wi-Fi Mark. In this case, you'll have to use your main network or guest Wi-Fi.

What to do if the QR code does not scan?

Make sure the code is intact and has good contrast. Try using a different scanning app (e.g., "QR & Barcode Scanner" for Android). If the problem persists, request a new code from your network administrator—it may have expired.

Hidden Wi-Fi Mark Features: Limitations and Advanced Settings

Wi-Fi Mark goes beyond basic internet sharing. Let's explore the advanced features available on most modern routers.

1. Speed ​​and traffic limits

You can set limits for devices connected via a tag:

• 📉 Maximum speed (for example, 5 Mbps for guests).
• 📊 Traffic limit (for example, 1 GB per day).

For example, on ASUS This is configured in AiProtection → Devices → Quick Connection → Restrictions.

2. Blocking dangerous websites

Some routers (eg. TP-Link With HomeCare) allow:

• 🚫 Block access to social networks, torrents or adult content.
• ⏰ Install access schedule (for example, only from 9:00 to 18:00).

3. Connection logs

In the section System Tools → Logs (or Logs) you can see:

• 📅 Connection/disconnection time devices.
• 📱 MAC address devices (for identification).
• 📤 Volume of transferred data.

4. Automatic shutdown according to schedule

For example, on Keenetic You can configure:

• ⏰ Automatic disabling the label at night.
• 🔄 Reconnection only after confirmation by the administrator.

These features are especially useful for:

• 🏨 Hotels and hostels (traffic restrictions for guests).
• 🏢 Offices (access control for temporary employees).
• 🏠 Home networks (secure connection of smart devices).

Wi-Fi Mark Security: Risks and How to Avoid Them

Although Wi-Fi Mark is more secure than WPS, it's not without its vulnerabilities. Let's look at the main risks and how to protect yourself.

1. QR code or PIN leak

If the code falls into the wrong hands, outsiders will be able to connect to your network. How to prevent:

• 🔒 Generate code immediately before use.
• ⏳ Install minimum duration of action (for example, 1 hour).
• 🗑️ Delete codes after use (in the router settings).

2. Attacks through protocol vulnerabilities

Some older routers are vulnerable to:

• 🔓 Brute-force attacks to the PIN code (if it is too short).
• 🕳️ WPS exploits (if Wi-Fi Mark uses legacy mechanisms).

Solution:

• 🔄 Update router firmware to the latest version.
• 🛡️ Turn it off WPS, if it is not needed for Wi-Fi Mark.

3. Substitution of QR code

Attackers can create fake code that redirects to a phishing site. How to protect yourself:

• 🔍 Check it out QR code source (do not download codes from unverified sources).
• 📱 Use official applications for scanning (for example, Google Lens or the built-in iOS camera).

4. Unauthorized access to the local network

By default, Wi-Fi Mark isolates devices from the local network, but some settings can bypass this rule. Check:

• 🔒 The parameter must be enabled in the label settings Isolate from LAN (or AP Isolation).
• 🛑 Turn it off file and printer sharing for guest devices.

Additional security measures:

• 🔄 Change regularly password for the router control panel.
• 📡 Turn off Wi-Fi Markwhen it is not needed.
• 🛡️ Use VPN on a router for additional traffic protection.

⚠️ Attention: If your router is older than 2018, check if it supports modern security standards (WPA3). Otherwise, Wi-Fi Mark may be vulnerable to attacks like KRACK.

Common problems and their solutions

Even with Wi-Fi Mark configured correctly, errors can still occur. Let's look at the most common ones and how to fix them.

1. The device does not connect via QR code

Possible causes and solutions:

• 🕒 Expired code → Generate a new one.
• 📵 Weak Wi-Fi signal → Bring the device closer to the router.
• 🔄 Incompatible QR format → Try entering your PIN manually.

2. The label does not appear in the router settings

What to do:

• 🔧 Check it out, Is Wi-Fi Mark enabled? in the wireless network settings.
• 🔄 Update router firmware to the latest version.
• 📋 Make sure your model is supports this function (check the documentation).

3. Low internet speed for connected devices

How to fix:

• 📶 Check if it is installed artificial restriction in the label settings.
• 🔌 Restart your router (sometimes resetting the time limits helps).
• 📡 Change Wi-Fi channel to a less busy one (in the wireless network settings).

4. The device connects, but there is no internet access.

Possible reasons:

• 🌐 Problems with the provider → Check the main connection.
• 🔒 MAC address blocking → Add the device to the whitelist.
• 🛑 Parental control is activated → Check the settings in AiProtection or HomeCare.

If the problem is not resolved, try:

1. Reset the router to factory settings (button Reset).
2. Disable Wi-Fi Mark and use guest network.

How to reset a router without a reset button?

If the Reset button doesn't work, go to the router's web interface, find "System Tools" → "Factory Defaults," and perform a software reset. The router will reboot, and all settings (including Wi-Fi Mark) will be restored to their defaults.

FAQ: Answers to frequently asked questions about Wi-Fi Mark

❓ Can Wi-Fi Mark be used to keep devices connected at all times?

No, Wi-Fi Mark is for temporary accessFor a permanent connection (for example, for your smartphone or laptop), it's best to use the main network or guest Wi-Fi with a permanent password. Wi-Fi Marks usually have a time limit (maximum 30 days on most routers), after which they need to be regenerated.

❓ How many devices can be connected via one tag?

It depends on the router model. Usually, one tag allows you to connect 1-2 devicesFor mass connections (for example, at an event), it is better to use a guest network. On some routers (ASUS RT-AX88U, TP-Link Archer AX6000) can be created several active tags at the same time, but each will have its own limitations.

❓ Does Wi-Fi Mark work if WPS is disabled?

On most modern routers YesWi-Fi Mark and WPS are different protocols, although they are based on similar principles. However, on some older models (for example, TP-Link TL-WR841N) Wi-Fi Mark requires WPS to be enabled. Check the documentation for your model.

❓ Is it possible to track which websites devices connected via Wi-Fi Mark have visited?

Yes, if it is enabled on the router traffic log or third-party monitoring software is used (for example, OpenDNS, Pi-hole). However, by default, routers don't store browsing history—only the amount of data transferred and the connection time. Detailed analysis requires additional configuration.

❓ Do Wi-Fi Mark support mesh systems (e.g. TP-Link Deco or Google Nest Wi-Fi)?

Yes, but with some caveats. In mesh Wi-Fi systems, Mark usually only works on main router, and not on satellite devices. For example, in TP-Link Deco The label can only be generated through the main module. Google Nest Wi-Fi a similar function is called Guest Network and does not support QR codes. Before setting up, check the official documentation to determine the capabilities of your mesh system.