Guest WiFi without giving away your house

When you tell a visitor the WiFi password, you're not just giving them internet. You're putting their device inside your network, alongside your files, your printer and everything else.

What actually goes wrong

Rarely anything dramatic. The realistic problems are mundane:

• A visitor's device is carrying something it picked up elsewhere, and now it's inside your network rather than outside it.
• Your main password spreads. Contractors, babysitters, house guests, their kids. Six months later you have no idea who has it.
• Someone's phone starts a huge backup and everything slows down.
• A guest can see — and potentially reach — your network drive, your cameras, your printer.

None of these ruin your life. All are avoidable for free.

Guests don't need their own network

The instinct is to add a dedicated guest network. Often that's unnecessary, and there's a cost to it: every additional network name consumes airtime on every access point, and past about four you start degrading performance for everyone.

Better: guests join the network you already run for children. It has exactly the right properties — internet access only, no route to your files or work devices, no visibility of the rest of the house. In most households that password is the one being handed out anyway.

The key setting is client isolation: devices on that network can't see each other either. Your visitor's laptop can't reach your child's tablet, and two visitors can't reach each other. It's a lane to the internet and nothing else.

Make it easy to hand out

Use a QR code. Phones scan it and join — no typing, no spelling out characters. Print one, put it on the fridge or by the front desk. Any competent system can generate one.

Pick a password people can actually read aloud. Three unrelated words beat random characters for something you'll say out loud regularly, and remains far stronger than a short "complex" password.

Change it when you want to. The point of a separate guest password is that rotating it costs you nothing — no reconnecting every device in the house.

If you have customers on site

A shop, studio, salon or office with public WiFi should treat it more carefully:

• Never share with payment systems. Card readers and point-of-sale belong on their own isolated network. Not negotiable.
• Consider a bandwidth cap so one visitor streaming can't slow your operations.
• Post the terms if you're going to. A simple splash screen is fine; check with your attorney about what's appropriate for your business.
• Keep staff separate from customers. Staff need access to things customers shouldn't reach.

What not to bother with

Hiding the network name. Doesn't improve security meaningfully — hidden networks are trivially discovered — and it makes connecting more annoying for everyone.

Filtering by device address. Sounds rigorous, is easily bypassed, and creates constant work every time someone new visits.

Changing the password constantly. If the guest network is properly isolated, frequent rotation buys you very little and irritates people. Isolation is the control that matters.