Mobile Hotspot Password: Find It, Change It, Secure It
Every modern phone can turn itself into a portable WiFi access point, usually called Personal Hotspot on iPhone and Mobile Hotspot on Android. The network it creates is a real WPA2 or WPA3 SSID with a real passphrase, saved on the phone, and revealable from Settings. This article covers exactly where that password lives on iPhone, the four biggest Android skins (Samsung One UI, Pixel stock Android, Xiaomi HyperOS, OnePlus OxygenOS), and Windows Mobile Hotspot. It also explains why the factory default is usually secure enough for an hour but not for a year, when to switch to WPA3, and how USB or Bluetooth tethering skip the problem entirely.
iPhone Personal Hotspot
On iOS the hotspot password is exposed in clear text inside the Personal Hotspot screen. No biometric check is required, so anyone with the unlocked phone can see it.
- 1
Open Settings on the iPhone Home Screen.
- 2
Tap Personal Hotspot. On older iOS or carriers that disabled it, tap Cellular, then Personal Hotspot.
- 3
The toggle Allow Others to Join must be on for the hotspot to broadcast at all.
- 4
Tap Wi-Fi Password. The current password is shown in plain text.
- 5
To change it, type a new one with at least 8 characters, then tap Done.
The SSID defaults to the iPhone's name (Settings, General, About, Name). Changing that name immediately changes the hotspot SSID, which invalidates the saved profile on every previously connected device. Maximize Compatibility is a toggle on iPhone 12 and later that forces the hotspot to 2.4 GHz for better range with older clients, at the cost of throughput.
The factory-generated hotspot password is 11 or 12 alphanumeric characters, which sounds random but historically followed a pattern of one dictionary word plus 3-4 digits (for example blurred4821). Older versions of iOS generated passwords that were brute-forced in under a minute by attackers with a GPU. Apple changed the generator in iOS 14+, but if you never changed yours on an upgraded phone, replace it now.
Android: Samsung (One UI)
Samsung calls it Mobile Hotspot. The configuration screen exposes both the password and the security mode.
- 1
Open Settings, tap Connections.
- 2
Tap Mobile Hotspot and Tethering.
- 3
Tap Mobile Hotspot (not the toggle on the right).
- 4
Tap Configure at the bottom.
- 5
Tap the eye icon next to the Password field. Authenticate with PIN, pattern, or fingerprint.
- 6
Edit the password and tap Save.
On Galaxy S21 and later the same screen offers a Band selector (2.4 GHz, 5 GHz, Auto) and a Security selector that supports WPA3-Personal, WPA3/WPA2-Personal (mixed), or WPA2-Personal. Mixed mode is the safe default: it lets newer laptops join via WPA3 while legacy gear still works.
Android: Google Pixel (stock Android)
Pixels run near-stock Android and use the shorter Google path.
- 1
Open Settings, tap Network and Internet.
- 2
Tap Hotspot and Tethering.
- 3
Tap Wi-Fi Hotspot.
- 4
Tap Hotspot Password to reveal it. Tap again to edit.
- 5
Tap Security to switch between WPA3, WPA2, or WPA3/WPA2 mixed.
Pixel 6 and later also offer an Auto-off toggle that kills the hotspot after a few minutes of no traffic. Turn it off if laptops keep disconnecting during long downloads.
Android: Xiaomi and Redmi (HyperOS / MIUI)
- 1
Open Settings, tap Portable Hotspot.
- 2
Tap Set up Portable Hotspot.
- 3
The Password field is hidden by default. Tap the eye icon to reveal it after biometric auth.
- 4
Change password and tap the checkmark to save.
- 5
Tap Security to choose between WPA2-Personal and WPA3-Personal.
HyperOS adds a Data Usage Limit that throttles or stops the hotspot once the configured amount of cellular data has been tethered. Useful on capped plans, surprising if you forget it exists and wonder why the connection is crawling.
Android: OnePlus (OxygenOS) and others
OnePlus, Oppo, Realme, Nothing, and most other OEMs inherit the AOSP layout but sometimes rename the menu:
- OnePlus: Settings, Wi-Fi and Network, Personal Hotspot, Personal Hotspot Settings.
- Oppo / Realme: Settings, Connection and Sharing, Personal Hotspot.
- Nothing: Settings, Network and Internet, Hotspot and Tethering, Wi-Fi Hotspot (same as Pixel).
- Huawei / Honor: Settings, Mobile Network, Personal Hotspot.
In every case the password field is revealed with a tap on the eye icon or a long-press, usually behind a biometric prompt.
Windows Mobile Hotspot
Windows 10 and 11 can share a wired or WiFi connection as a mobile hotspot of their own. This is useful in hotels or coworking spaces where only one device is allowed on the paid network.
- 1
Press Windows + I to open Settings.
- 2
Click Network and Internet in the sidebar.
- 3
Click Mobile Hotspot.
- 4
Click the Edit button under Network Properties.
- 5
Network Name and Network Password fields are visible. Change either and click Save.
- 6
Use the Band drop-down to pick 2.4 GHz (longer range) or 5 GHz (faster).
Windows Mobile Hotspot always runs WPA2-Personal with AES. There is no WPA3 toggle because the underlying Wi-Fi Direct stack does not yet support SAE. For most laptop-to-phone tethering this is fine, but if you need WPA3 use the phone's hotspot instead. Full Windows WiFi credential recovery is covered in the Windows 11 walkthrough.
Default password risks
Factory-generated hotspot passwords feel random but three real risks apply:
- Short length. 8-12 characters on a GPU cluster is not a meaningful barrier if the attacker captures a single handshake. If your phone is ever in a crowded place with a skilled attacker, the handshake is on tape.
- Pattern leakage. Several carrier-provided hotspots and older Android builds generate passwords from a wordlist of a few thousand entries plus trailing digits. Targeted wordlists for those generators exist. Change the default.
- Reuse across devices. People set the hotspot password once and reuse it across phone upgrades. Every old device a former roommate paired with remembers it in Keychain or Wi-Fi profiles and could reconnect to a phone with the same SSID indefinitely.
The fix is a 16+ character random passphrase generated in your password manager, pasted once into the hotspot settings, and revealed on-screen only when a guest needs to join. For why length beats complexity, see the WPA3 vs WPA2 deep dive.
Alternatives that skip the password entirely
If you only need to tether one device, USB and Bluetooth tethering are more secure than a WiFi hotspot because there is no over-the-air passphrase to capture.
| Method | Speed | Battery impact | Security |
|---|---|---|---|
| Wi-Fi Hotspot | High (100+ Mbps on 5 GHz) | High | WPA2 or WPA3 passphrase |
| USB Tethering | High (500+ Mbps on USB-C) | Negative (phone charges) | Physical cable; no passphrase |
| Bluetooth Tethering | Low (1-2 Mbps) | Very low | Bluetooth pairing PIN |
USB is the winner whenever a cable is available. Bluetooth is useful for long workdays when you only need to send email.
Troubleshooting
Hotspot toggle is grayed out on iPhone
Your carrier plan does not include tethering, or the APN profile is missing. Contact the carrier or reinstall the carrier configuration profile. On iOS the toggle also greys when airplane mode is on.
Android: the password I type will not save
WPA2 requires at least 8 characters. Shorter strings are silently rejected with no error. Use 12 or more to be safe.
Laptop joins but gets no internet
The phone has data, but the carrier is blocking tethered traffic at the APN. Some prepaid plans detect tethering by TTL and hard-block it. Workarounds include changing the TTL on the phone (root required) or using a carrier that officially allows tethering.
Hotspot keeps turning off after a minute
Auto-off is enabled. iPhone: keep the Personal Hotspot screen open while a device is connecting. Android: Settings, Hotspot and Tethering, disable the auto-off timer.
WPA3 hotspot rejects my old laptop
The laptop supports only WPA2. Switch the hotspot security to WPA2/WPA3 mixed mode, or use USB tethering.
SSID is hidden from the list on my laptop
Hidden SSID is a privacy feature, not a security one. Enable Broadcast SSID on the phone, or add the network manually on the laptop by typing the exact name.
Frequently asked questions
Can someone see my hotspot password from a previously connected laptop?
Yes. The same OS mechanisms that reveal home WiFi passwords work for hotspots: Windows netsh wlan show profile key=clear, macOS security find-generic-password -ga, Linux /etc/NetworkManager/system-connections. Treat any device that has joined your hotspot as if it permanently knows the password.
Is there a way to see what devices are on my hotspot?
Yes. iPhone: Personal Hotspot screen lists connected devices at the bottom. Android: Hotspot screen also lists them with option to block. Windows: Mobile Hotspot screen shows a count and device list.
Does using my phone as a hotspot count against my data plan?
Almost always yes. Most plans count tethered data against the same bucket as on-phone data. Some carriers apply a separate, smaller hotspot cap on unlimited plans; check your plan documentation.
Can I assign different passwords to different users?
Not on the phone side. The hotspot has one passphrase. If you need per-user access, use a mesh router with a guest SSID instead.
Does the iPhone Family Sharing group share hotspot credentials?
Family Sharing members can join your Personal Hotspot without entering the password if Instant Hotspot is enabled and they are signed into the same Family iCloud account on the connecting device.
Is my hotspot password encrypted in iCloud Keychain?
iCloud Keychain stores the hotspot password like any other WiFi password, synced between your Apple devices with end-to-end encryption. Apple cannot read it.
Looking for your home router WiFi, not hotspot?
See the router password walkthrough, or if only the handshake is available try the authorized recovery form.
Personal devices only
Every method on this page requires unlocked access to the device hosting the hotspot. Use only on phones and laptops you own.
Related reading
Same task for saved home WiFi: iPhone, Android, Windows 11, Mac Keychain. Background on WPA security: WPA3 vs WPA2.