A new smartphone or laptop requests a network security key, although older gadgets connect automatically, which indicates a forgotten Wi-Fi password, which the Android operating system stores in memory by default to simplify re-authorization.
However, the location of these entries directly depends on the version of the installed firmware. Starting Android 10, Google has introduced a convenient feature for viewing saved networks directly in the settings interface, making the process elementary. For older versions of the system, searching for a key turns into a more complex procedure, requiring either the presence root accessor the use of specialized software.
In this article we will analyze in detail all possible ways to retrieve saved access keys. You will learn how to find them through the standard menu, how to take advantage of the features Google Account and what risks are associated with obtaining superuser rights for this purpose.
Viewing passwords in Android 10 and later without Root
Starting with the tenth version of the mobile operating system, Google engineers have added a native ability to view security keys for saved access points. This decision was dictated by reasons of convenience, since previously users had to look for workarounds. Now all the necessary information is available in a couple of clicks if your device is running the latest software.
To view, you need to go to the section Settings and select the item Network and Internet or Connections, depending on the manufacturer's shell. Next, go to menu Wi-Fi and find the desired network in the list of saved ones. By clicking on the gear icon next to the name of the network, you will see a button Share or icon QR code.
When you press this button, the system will ask you to confirm your identity through a fingerprint, face scan or entering a screen unlock PIN code. This is an important measure securitythat prevents unauthorized access to confidential data by unauthorized persons. After successful authentication, a QR code will appear on the screen for guests to connect.
⚠️ Attention: On some smartphones with custom skins (for example, older versions of MIUI or EMUI), the password text may be hidden under the QR code. In this case, take a screenshot of the screen and open it in any QR code reader application or Google Lens to see the text string with the key.
Below the QR code image, the password itself is often (but not always) displayed in text form. If the text is not immediately visible, use the screenshot function. The system generates a code within which the connection string is encrypted, including the access key itself. This is the most reliable method for modern devices.
If there is no password text under the QR code, simply point the camera of another phone at this code. The notification will display the name of the network and the opportunity to connect, and in some scanners a text key will immediately be displayed.
Using synchronization through Google Account
The Google ecosystem offers another powerful tool for managing network settings - cloud synchronization. If the option to backup Wi-Fi settings is enabled on your device, then all saved passwords are automatically downloaded to your device. Google Account. This allows you not only to restore settings on a new phone, but also to view them through the web interface or third-party password managers.
To check for saved data, follow the path Settings → Google → Autofill → Autofill from Google. In this section, select Passwords. This will display a list of all saved accounts and keys synced to the cloud. Find the name of your wireless network in the list.
By clicking on the desired list item, the system will again ask for biometric confirmation or a lock code. After this, you will be able to see the hidden password by clicking on the corresponding eye icon. This method is especially convenient because it does not require being in the Wi-Fi coverage area; data can be accessed from any device where you are logged into your account.
It is worth noting that synchronization does not work for all networks. Some corporate networks with security certificates or networks that you connected to only once and immediately disabled the save option may not be included in the cloud storage. In such cases, you should only rely on local data storage on the device.
Searching for passwords on older versions of Android (up to version 10)
Owners of devices running on Android 9 Pie and earlier versions face security restrictions. In these versions of the OS, network configuration files are protected from being read by regular applications and by non-elevated users. Direct browsing through the settings is not possible, since the functionality is simply absent in the interface.
The only way to access the configuration file on such devices is the presence root access. Without superuser rights, the system will not allow a third-party file manager to read the system directory where the keys are stored. Obtaining root access comes with risks: it may void the warranty and make the device vulnerable to malware.
If you have already obtained root access, you will need a file manager with support for system partitions, for example Root Explorer or RE Manager. Follow the path /data/misc/wifi/. This folder contains a file wpa_supplicant.confthat contains the entire connection history.
⚠️ Attention: Editing or deleting system files in the folder /data/misc/wifi/ without the proper knowledge can lead to a complete loss of network settings and the inability to connect to Wi-Fi until the device is reset. Work with read-only files.
Open the file wpa_supplicant.conf with the built-in text editor. You will see a list of blocks, each of which corresponds to a saved network. Find the block with the desired ssid (network name). The line psk="your_password" will contain the searched key in clear text.
What if the file is empty?
If the wpa_supplicant.conf file is empty or does not contain the necessary networks, your manufacturer may be using a non-standard storage path or encryption. Try to find a file with a similar name in the same directory or check /data/wifi/
Third-party applications for key recovery
In the store Google Play there are many utilities that promise to show forgotten passwords. However, it is important to understand how they work. Non-rooted apps on modern versions of Android cannot read the system file directly. They use workarounds such as backing up settings or emulating an access point.
Applications marked "No Root" often work on the principle of generating a QR code based on an already active connection. They do not “crack” the password, but rather take it from an active communication session and visualize it for transmission to another device. Examples of such utilities are various Wi-Fi managers that use standard system APIs.
For devices with root access, there are more powerful tools, such as WiFi Password Recovery. These apps automatically scan the system file wpa_supplicant.conf and display a list of networks in a convenient table form with a copy button. This saves time manually searching for strings in a text editor.
⚠️ Attention: Be extremely careful when installing applications from unverified sources that require root access. Attackers can disguise malware as useful utilities to steal your real passwords and account data.
Before installing any such software, carefully study the permissions it requests. If a simple password viewer requires access to contacts, microphone, or sending SMS, this is a clear sign of fraud. Use only applications with a high rating and a large number of reviews from real users.
Analysis of the wpa_supplicant.conf configuration file
For those who prefer a technical approach and want to understand the data storage structure, let's take a closer look at the configuration file format. This file is a standard for Linux-like systems on which Android is built. It stores authentication parameters for each known network.
The file structure is a sequence of blocks network. Each block begins with an opening curly brace and contains a set of parameters. The key fields are ssid (network ID) and psk (Pre-Shared Key, that is, the password itself).
Below is a table showing the typical contents of the configuration file and the meaning of each parameter:
| Parameter | Description | Example value |
|---|---|---|
ssid |
Wireless network name (SSID) | "Home_WiFi" |
psk |
Security key (password) | "SuperSecret123" |
key_mgmt |
Key management method | WPA-PSK |
priority |
Network connection priority | 5 |
id_str |
Line identifier (optional) | "home" |
Please note that the field psk may contain not the password itself, but its hash (PMK), if the network was connected using certain security methods or if the password was generated via WPS. In this case, it is almost impossible to recover the original text password from the hash without brute force.
The wpa_supplicant.conf file is the main storage of Wi-Fi credentials in the Android kernel, but access to it is strictly regulated by kernel access rights.
The file may also contain parameters proto (security protocol, for example, RSN) and pairwise (encryption algorithm). This data is important for diagnosing connection problems, but for the average user looking for a password, it is for reference only.
Security measures and expert recommendations
Storing passwords in clear text on the device creates certain risks. If your phone falls into the hands of an attacker and they are able to bypass the screen lock or gain root access, all your saved networks will be vulnerable. This is especially true for corporate networks or networks with sensitive data.
It is recommended to periodically audit saved networks. Remove from your phone's memory those access points that you no longer use (cafes, airports, guests). This will reduce the attack surface and speed up the process of searching for the desired network in the list.
- 🔒 Use complex passwords containing letters, numbers and special characters so that even if they are leaked, they will be difficult to guess.
- 📱 Turn on the application blocking function for settings and password managers, if your Android shell supports it.
- ☁️ Regularly check the list of saved passwords in your Google Account and delete outdated entries.
- ⚙️ Turn off automatic connections to open networks to avoid accidentally transmitting data through unsecured channels.
Remember that the security of your home network begins with a strong password on your router. Do not use standard combinations like "12345678" or "admin", which are easy to hack even without access to your phone. Changing the password on your router will require updating the settings on all your devices, but it is a critical security measure.
☑️ Checking Wi-Fi security
In conclusion, it is worth saying that modern versions of Android have made managing network access much more transparent and secure for the average user. However, understanding how the system stores this data “under the hood” allows you to better control your digital hygiene and protect personal information from unauthorized access.
Is it possible to view the password if the phone is not connected to this network?
Yes, if the network is saved in the device's memory. In Android 10+, you can select any saved network in the list, even if it's not currently active, and tap Share. For older versions with root access, the configuration file stores all passwords ever entered.
Is it safe to gain root access just to view the password?
No, this is not advisable. Obtaining root access will void the warranty, reduce the overall security of the system and may lead to device failure ("bricking"). It is better to use the QR code method on another device or reset the password on the router.
Where are passwords stored on Android tablets?
The storage principle is identical to smartphones. The path to the file /data/misc/wifi/wpa_supplicant.conf and the settings interface in new versions of Android work the same on phones and tablets.
What to do if the QR code cannot be scanned?
Make sure the screen has no cracks in the code area and the brightness is set to maximum. Try taking a screenshot, enlarging it and scanning it from the image. Also check if the colors in the accessibility settings are inverted.