Windows Guide

How to Find Your WiFi Password on Windows 11 — What Works Without Admin Rights, and What Doesn't

If you're locked out of your WiFi network and don't have the admin password for your Windows 11 PC, this guide walks through what actually works without administrator rights — and what doesn't. It covers the built-in command-line tools, the Settings and Control Panel routes, PowerShell, and third-party tools that read the Wireless Profile Store. In practice the plaintext key is gated by a machine-wide permission that is granted to Administrators by default, so on many default Windows 11 installs a standard user gets 'Access is denied' or a 'Key Content' field that does not return the value. Important: these methods only work for WiFi networks your PC has already connected to at least once, and only on PCs, networks and equipment you own or are expressly authorized to administer. If you need the password for a network that has never been used on this machine, and you own the router, you'll need to access the router admin panel instead.

Method 1 — Command Prompt (netsh wlan show profile)

May work without admin — it depends on how the machine's plaintext-key permission is configured

Open Command Prompt by typing 'cmd' in the Start menu. Right-click and select 'Run as administrator' if you have those credentials on this machine and are authorized to use them — without elevation, netsh wlan show profile may still list saved profiles, but the key line is the part that is restricted.

Step 1: Type netsh wlan show profiles and press Enter. This lists every WiFi network the PC has ever connected to. Note the exact name (SSID) of your network.

Step 2: Type netsh wlan show profile name="YourNetworkName" key=clear, replacing YourNetworkName with the exact SSID from step 1. Use double quotes: cmd.exe does not treat single quotes as delimiters, so the single-quoted form is passed through verbatim and returns profile-not-found even when the SSID contains no spaces.

Step 3: Look for the line labeled 'Key Content' — this is your WiFi password in plain text.

If you get an 'Access is denied' error when trying key=clear, your user account doesn't have the plaintext-key permission on this machine. Try running as administrator, or use one of the methods below.

Does netsh wlan require admin?

Listing profiles is allowed to any user. Retrieving the key is a separate, machine-wide permission: WlanGetProfile with WLAN_PROFILE_GET_PLAINTEXT_KEY requires the wlan_secure_get_plaintext_key permission, and Microsoft documents that by default this is allowed only to members of the local Administrators group (plus a WLAN_READ_ACCESS ACE on the profile itself). An administrator changes it with WlanSetSecuritySettings — it is not granted by having created the profile. On a default Windows 11 install a standard user may therefore see 'Access is denied', or a 'Key Content' entry that does not return the value. Reporting varies between machines, so treat this as configuration-dependent rather than guaranteed.

Method 2 — PowerShell (parsing netsh output)

PowerShell offers an alternative way to run the same query and pull out just the line you want. Open PowerShell (type 'powershell' in Start).

Step 1: Run netsh wlan show profiles | Select-String ':' to list all saved WiFi networks. The cmdlet Get-NetConnectionProfile is often suggested for this, but it returns connection metadata only (SSID, interface, network category) and has no property containing the stored key.

Step 2: For each network, run (netsh wlan show profile name="YourNetworkName" key=clear) | Select-String 'Key Content' to extract just the password line.

PowerShell doesn't bypass the permission — it uses the same netsh engine underneath. A script that calls the wlanapi.dll interface directly hits the same wlan_secure_get_plaintext_key check unless it is running elevated.

Alternative: a PowerShell wrapper module calls the same API and formats the result — Install-Module wifiprofilemanagement, then Get-WiFiProfile -ProfileName <SSID> -ClearKey | select Password. It returns the key only when the underlying permission allows it, so it does not change the answer to the elevation question this section is about.

Method 3 — Windows 11 Settings, and the Control Panel route

Windows 11 added a built-in Settings path for this in 23H2, and it is the quickest way when it is available: Settings (Win + I) > Network & internet > Wi-Fi > Manage known networks > select the saved network > View next to 'View Wi-Fi security key'. On 24H2 and later the same entry is labeled 'Wi-Fi network password' with a Show button and QR-code sharing.

On 22H2 and earlier there is no such Settings entry, and the Control Panel route is the one that works: Settings (Win + I) > Network & internet > Advanced network settings > More network adapter options.

Step 1: In the Network Connections window, right-click your active WiFi adapter and select Status.

Step 2: Click Wireless Properties > Security tab > Check 'Show characters' next to Network security key.

Two limits to note. Opening Network Connections and viewing adapter status requires no elevation — the gate is the key reveal itself ('Show characters'), which prompts for elevation and can be restricted by IT policy on corporate-managed devices. And this adapter-status route reveals the key of the network the adapter is currently connected to, not an arbitrary saved profile; the 23H2+ Settings route is the one that can reveal a chosen saved network, subject to the same elevation check.

Settings GUI on managed PCs

If your Windows 11 PC is managed by an employer or school, group policy may hide the 'Show characters' checkbox or block the key reveal entirely. That device control is deliberate: ask your IT administrator for the key, or for permission to retrieve it, rather than routing around the policy. On hardware you do not own, circumventing that control is a matter for your organization and is not a workaround this guide can endorse.

Method 4 — Use a Saved WiFi Password Viewer (Third Party)

Several free third-party tools can read saved WiFi passwords on Windows 11 and present them in a GUI instead of the Command Prompt. They access the same Wireless Profile Store that netsh reads, so they do not change what the machine's permissions allow.

WirelessKeyView (NirSoft, v2.23): a portable executable (no installation needed) that displays the WEP/WPA/WPA2/WPA3 keys Windows has stored and can export them. Be aware of the elevation requirement before you download it: NirSoft's own page states 'You must login to windows with admin user', and since v1.13 the utility runs as admin automatically. It is not a route around the admin gate for a standard user. It is also the tool whose name is most often copied by download portals — get it from nirsoft.net only.

ManageWirelessNetworks (also NirSoft): the same author's wireless-profile manager, useful if you want to review and edit saved profiles as well as view keys. It carries the same elevation requirement.

Important: Download these tools only from the official developer website. Avoid third-party download sites that bundle adware or malware.

Method 5 — Check the Router Sticker or Admin Panel

If no Windows method works, the WiFi password is also recorded in the router's admin panel — but this route, and the factory reset below, are for a router you own or are expressly authorized to administer. Logging in to someone else's router with default credentials, or resetting a device you do not own, is unauthorized access to a computer system under statutes such as 18 U.S.C. §1030 and the UK Computer Misuse Act 1990 s.1, and a reset takes the whole network down while it runs.

Open a web browser and go to the router's address. Read the Default Gateway from ipconfig rather than guessing it — 192.168.1.1 and 192.168.0.1 are only the two most common defaults, while 192.168.8.1, 10.0.0.1, 192.168.1.254 and 192.168.0.254 are all in use, and some vendors use their own address. Log in with the admin username and password (check the sticker on your router). Under Wireless Settings or WiFi Settings, the current password (WPA key) is displayed in plain text or as a masked field you can reveal.

If the admin password is still the factory default, our default router password database lists the stock logins for each model — use it only on a router you own or are authorized to manage.

If you changed the admin password and forgot it, a factory reset restores factory defaults, so be clear about what it destroys before you do it: the current SSID and WiFi password, port forwards, static IP reservations, parental-control rules, and on an ISP-supplied gateway the ISP login itself — where a reset may cause the device to re-provision rather than come back matching the printed sticker. Hold the Reset button for 10-30 seconds, then log in with the credentials on the sticker.

Windows 11 WiFi password recovery flow (for PCs and networks you own or are authorized to administer)

1
Try netsh wlan show profile
Open CMD, run netsh wlan show profiles, then netsh wlan show profile name="SSID" key=clear (double quotes — cmd does not accept single quotes). Look for Key Content; a standard user may instead get Access is denied.
2
Try the Settings and Control Panel routes
On 23H2+: Settings > Network & internet > Wi-Fi > Manage known networks > select the network > View (24H2+: Show). On earlier builds: Settings > Network & internet > Advanced network settings > More network adapter options > adapter Status > Wireless Properties > Security > Show characters (currently connected network only).
3
Try a third-party viewer
WirelessKeyView or ManageWirelessNetworks (NirSoft) read the Wireless Profile Store — note that both require you to be logged in as an admin user.
4
Access router admin panel
Read the Default Gateway from ipconfig, log in with the admin credentials, and check Wireless Settings for the WPA key — only on a router you own or are authorized to administer.
5
Factory reset as last resort
Only on a router you own or are authorized to administer. A reset destroys the current SSID and WiFi password, port forwards, reservations and parental rules, and may re-provision an ISP gateway. Hold the Reset button for 10-30 seconds, then use the sticker credentials.

Frequently Asked Questions

Can I see a WiFi password on Windows 11 without admin rights?

It depends on the machine. Retrieving the plaintext key needs the wlan_secure_get_plaintext_key permission, which by default is granted only to the local Administrators group, and administrators can change it with WlanSetSecuritySettings. Who created the profile affects reading the profile, not reading its key. On some machines a standard user does get the key and on others the command returns 'Access is denied' or only indicates the key is Present.

Does netsh wlan show profile work in Windows 11?

Yes. The netsh wlan command set works identically on Windows 11 as it did on Windows 10. Both the show profiles and show profile key=clear commands are supported — use double quotes around the SSID.

Is WirelessKeyView safe to use?

WirelessKeyView by NirSoft is safe when downloaded from the official NirSoft website, but note that it requires you to be logged in as an admin user — it is not a way around the elevation gate. Some antivirus tools flag it as a false positive because it reads stored credentials, which is expected behavior for any tool that accesses the Windows credential store. The real risk is copycat download portals: get it from nirsoft.net only.

What if 'Key Content' is blank?

Three things produce this, and you can tell them apart from the same output. Your account may lack the plaintext-key permission, in which case the command usually also reports 'Access is denied'. The profile may use a different authentication method (e.g., WPA2-Enterprise with certificates) — check the Authentication field, because enterprise networks have no shared password to display. Or the network may be open with no security at all, in which case there is no key to show.

Can I recover a WiFi password for a network my PC has never connected to?

No. Windows only stores passwords for networks it has successfully connected to. If the PC has never joined the network and you own the router, read the key from the router admin panel instead — a saved-password tool on this PC has nothing to read.

Can't find the WiFi password another way?

If every device-side method failed, use the authorized recovery form for a file-specific assessment. The result depends on capture quality, password clues, and the candidate set that can be justified.

Open Recovery Tool