Automatically Connecting Windows 11 Devices to a Hidden SSID Without Sharing the Password

🔒 Automatically Connecting Windows 11 Devices to a Hidden SSID Without Sharing the Password

It is possible to automatically connect Windows 11 devices to a hidden Wi-Fi network (hidden SSID) without sharing the Wi-Fi password with end users. The most secure method is using a WLAN profile XML file combined with a PowerShell script. Registry-based methods are not recommended or supported, as Windows does not store Wi-Fi passwords in plain text for security reasons.

📌 1. Creating the Wi-Fi Profile XML File

First, export the Wi-Fi profile from an administrator device that already knows the Wi-Fi password.

netsh wlan export profile name="SSID_NAME" key=clear folder="C:\Temp"
            

This command generates an XML file including the Wi-Fi settings. The structure will look similar to this:

<WLANProfile xmlns="http://www.microsoft.com/networking/WLAN/profile/v1">
  <name>SSID_NAME</name>
  <SSIDConfig>
    <SSID>
      <name>SSID_NAME</name>
    </SSID>
    <nonBroadcast>true</nonBroadcast>
  </SSIDConfig>
  <connectionType>ESS</connectionType>
  <connectionMode>manual</connectionMode>
  <MSM>
    <security>
      <authEncryption>
        <authentication>WPA2PSK</authentication>
        <encryption>AES</encryption>
        <useOneX>false</useOneX>
      </authEncryption>
      <sharedKey>
        <keyType>passPhrase</keyType>
        <protected>false</protected>
        <keyMaterial>SSID_PASSWORD</keyMaterial>
      </sharedKey>
    </security>
  </MSM>
</WLANProfile>
            

📌 2. Deploying the XML Profile to User Devices

End users can connect without ever seeing the password by running the following PowerShell script:

# Load Wi-Fi profile XML
$profilePath = "$PSScriptRoot\SSID_NAME.xml"
netsh wlan add profile filename="$profilePath" user=current

# Connect to the hidden SSID
netsh wlan connect name="SSID_NAME"
            

Save the script as a .ps1 file and users only need to run it to connect automatically.

📌 3. Additional Security and Deployment Tips

• Convert the script into a .bat or .exe file for easier execution.
• For enterprise environments, deploy the XML via Group Policy (GPO) for mass distribution.
• Ensure the XML profile is stored securely to prevent unauthorized access.

📝 Conclusion

By using XML Wi-Fi profiles and a simple PowerShell script, you can securely automate hidden SSID connections on Windows 11 devices without revealing the Wi-Fi password. This method is reliable, secure, and ideal for both IT-managed and user environments.