How to Connect to a Hidden Wi-Fi Network in Windows 10 and 11

Prerequisites and Network Details You Need Before Starting​

Unlike standard wireless networks that advertise their name and supported encryption standards in public beacon frames, a hidden network requires you to supply the exact connection parameters beforehand. If a single parameter does not match the router or access point configuration, Windows will save the profile or attempt a connection and fail with a generic Can't connect to this network message without telling you which field is wrong.

Before proceeding, verify and record the following details from your wireless router's administration page or network administrator:

• Exact Network Name (SSID): Wireless network names are strictly case-sensitive and space-sensitive. Office_WiFi, office_wifi, and Office_WiFi (with a trailing space) are treated as three entirely different networks.
• Security Type and Authentication Method: If you connect via the taskbar flyout while in range, Windows can usually detect the security type after probing the SSID. If you pre-configure the profile in Settings or Control Panel, you must select the exact security mode configured on the router, such as WPA2-Personal AES, WPA3-Personal, WPA2/WPA3-Personal, or WPA2-Enterprise.
• Security Key (Password) or Enterprise Credentials: The passphrase is also case-sensitive. For enterprise 802.1X networks, you will need your domain username and password or an installed client certificate.
• Wireless Band Support (2.4 GHz, 5 GHz, or 6 GHz): Your PC's wireless adapter must support the radio band used by the hidden SSID. Additionally, Connecting to a 6 GHz (Wi-Fi 6E or Wi-Fi 7) network requires Windows 11, a 6 GHz-capable adapter, and WPA3 security.
• MAC Address Filtering Status: Many administrators who hide their SSID also enable MAC address filtering (an Access Control List) on the router. If MAC filtering is active on the router, you must either add your PC's physical Wi-Fi MAC address to the router's allowlist and disable Windows Random hardware addresses for that network, or temporarily disable MAC filtering during setup.

Privacy and Security Warning: When you enable Connect even if this network is not broadcasting on a saved profile, your Windows PC actively transmits directed probe requests containing that hidden SSID in plain text whenever Wi-Fi is turned on and your PC is not connected to a network—even when you are away from home or the office. Microsoft's Native Wi-Fi documentation and wireless standards bodies note that hiding an SSID does not encrypt wireless traffic and creates a tracking footprint wherever you travel. Only enable non-broadcast auto-connection for trusted networks you regularly use.

Method 1: Connect Directly from the Taskbar Wi-Fi List (In-Range Quick Method)​

Use this method when your PC is currently within radio range of the hidden wireless router. When Windows detects wireless beacon frames that have an empty SSID field, it groups them under a single Hidden Network entry at the bottom of the available networks list.

On Windows 11​

1. Select the Network, Sound, or Battery status icons group on the right side of the taskbar (or press Windows key + A) to open the Quick Settings panel.
2. Next to the Wi-Fi tile button, click the > (Manage Wi-Fi connections) arrow button. (Ensure the main Wi-Fi toggle is turned On.)
3. Scroll to the very bottom of the available networks list and click Hidden Network.
4. Check the Connect automatically box if you want Windows to reconnect to this network automatically whenever you are in range.
5. Click Connect.
6. In the Enter the name (SSID) for the network field, type the exact, case-sensitive SSID of the hidden network, then click Next.
7. Windows will send a directed probe request for that SSID. Once the router responds, Windows prompts for credentials: in the Enter the network security key field, type the Wi-Fi password. (Click the eye icon on the right side of the text box to verify your typing.)
8. Click Next.
9. If prompted whether to allow your PC to be discoverable by other PCs and devices on this network, choose Yes for a trusted home or work network (sets the profile to Private), or No for a public or shared environment (sets the profile to Public).

On Windows 10​

1. Click the Network (Wi-Fi globe or signal bars) icon in the system tray on the right side of the taskbar.
2. Scroll to the bottom of the Wi-Fi flyout menu and click Hidden Network.
3. Check the Connect automatically box if you want Windows to connect without prompting in the future, then click Connect.
4. Under Enter the name (SSID) for the network, type the exact, case-sensitive network name and click Next.
5. Under Enter the security key, type the wireless password and click Next.
6. Choose Yes (Private network) or No (Public network) when asked if you want to allow your PC to be discoverable on the network.

Expected Result: Within 5 to 15 seconds, the Hidden Network entry in the flyout changes to display your actual SSID with the status Connected, secured (or Connected, open if unencrypted). No system restart is required.

Method 2: Pre-Configure a Hidden Wi-Fi Profile in Windows Settings​

Use this method if the Hidden Network entry does not appear on the taskbar, if you are currently out of range and want to pre-configure the connection before arriving on site, or if the taskbar prompt fails to negotiate the correct WPA2/WPA3 security type automatically. This method explicitly writes the nonBroadcast flag into the Windows WLAN profile.

On Windows 11​

1. Press Windows key + I to open Settings.
2. In the left navigation pane, select Network & internet, then click Wi-Fi on the right.
3. Click Manage known networks.
4. Next to Add a new network, click the Add network button.
5. In the Add a new network dialog box, fill in each parameter carefully:
   • Network name: Type the exact, case-sensitive SSID.
   • Security type: Open the drop-down menu and select the exact authentication and encryption mode used by the router:
     • Open (no password required)
     • WPA2-Personal AES (most common for home and small business routers)
     • WPA3-Personal (modern routers configured for WPA3-only mode)
     • WPA2/WPA3-Personal (routers using transitional mixed mode)
     • WPA2-Enterprise AES or WPA3-Enterprise (corporate RADIUS/802.1X networks)
     • WEP (legacy networks only)
   • Security key: Type the exact wireless password.
6. Check Connect automatically if you want Windows to join this network on startup and wake.
7. Check Connect even if this network is not broadcasting. (This setting is mandatory for hidden networks; without it, Windows will wait for a public SSID broadcast that never arrives.)
8. Click Save.

On Windows 10​

1. Press Windows key + I to open Settings.
2. Click Network & Internet, then select Wi-Fi in the left sidebar.
3. Click Manage known networks in the right pane.
4. Click the + Add a new network button at the top of the list.
5. Configure the network settings in the pop-up panel:
   • Network name: Enter the exact, case-sensitive SSID.
   • Security type: Select your router's encryption standard from the drop-down menu (most commonly WPA2-Personal AES).
   • Security key: Enter the wireless password.
6. Check Connect automatically.
7. Check Connect even if this network is not broadcasting.
8. Click Save.

Expected Result: The network immediately appears in your Known networks list. If you are currently within range of the wireless router, Windows will probe for the SSID and connect automatically within 10 to 20 seconds.

Method 3: Configure or Fix a Hidden Profile via Control Panel or Command Prompt​

If you need to configure advanced 802.1X Enterprise PEAP/EAP settings, or if you have an existing Wi-Fi profile that stopped connecting after an administrator hid the router's SSID, you can use the classic Control Panel wizard or the built-in netsh wlan command-line utility.

Option A: Use the Control Panel Wireless Network Wizard​

1. Press Windows key + R, type control.exe /name Microsoft.NetworkAndSharingCenter, and press Enter to open the Network and Sharing Center.
2. Under the Change your networking settings section, click Set up a new connection or network.
3. Select Manually connect to a wireless network and click Next.
4. Enter the exact Network name, select the Security type (and Encryption type if applicable), and enter the Security key.
5. Check Start this connection automatically.
6. Check Connect even if the network is not broadcasting.
7. Click Next, and then click Close.

Option B: Enable Non-Broadcast Mode on an Existing Profile via Command Prompt​

When a router previously broadcast its SSID and is later changed to hidden mode, Windows retains the old wireless profile with nonBroadcast set to no. As a result, Windows refuses to auto-connect after a reboot. Instead of deleting and recreating the profile, you can update the flag directly in Command Prompt or PowerShell:

1. Right-click the Start button and select Terminal (Admin), PowerShell (Admin), or Command Prompt (Admin), then click Yes at the User Account Control prompt.
2. Run the following command to list all saved Wi-Fi profiles on your PC:
   netsh wlan show profiles
3. Inspect the current configuration of your target network (replace YourSSID with your exact network name):
   netsh wlan show profile name="YourSSID"
4. Look under the Connection settings section in the output for the Network broadcast line. If it reads Connect only if this network is broadcasting, enable hidden-network probing by running:
   netsh wlan set profileparameter name="YourSSID" nonBroadcast=yes connectionmode=auto
5. Force an immediate connection to the profile by running:
   netsh wlan connect name="YourSSID"

Expected Result: Command Prompt returns Profile "YourSSID" on interface "Wi-Fi" updated successfully. followed by Connection request was completed successfully.

Verification: Confirm the Connection and Non-Broadcast Flag​

Once connected, verify that Windows has valid IP connectivity and that the profile is properly configured to survive a system restart:

• Check Connection Status in Settings: Open Settings > Network & internet > Wi-Fi. The top of the window should show your SSID with the status Connected, secured. Click the network's properties to confirm that an IPv4 address and IPv4 DNS servers have been assigned (not a 169.254.x.x link-local address).
• Verify the Non-Broadcast Flag: Open Command Prompt or Terminal and run:
  netsh wlan show profile name="YourSSID"
  Under Connection settings, confirm these two lines match:
  • Connection mode : Connect automatically
  • Network broadcast : Connect even if this network is not broadcasting

Troubleshooting Common Hidden Wi-Fi Connection Failures​

Because hidden networks require exact parameter matching before authentication even begins, connection failures are usually caused by a profile mismatch or a wireless driver limitation.

Symptom 1: Windows Says "Can't connect to this network" Immediately​

If Windows fails after you enter the SSID and password, an older or corrupted profile with the same name is often blocking the new settings, or the security type selected in Settings does not match the router.

Fix and Rollback — Forget the Corrupt Profile and Recreate It:

1. Open Settings > Network & internet > Wi-Fi > Manage known networks.
2. Locate the network name in the list.
3. On Windows 11, click the Forget button next to the network name. On Windows 10, click the network name and click Forget.
   (Alternatively, run netsh wlan delete profile name="YourSSID" in Command Prompt.)
4. Recreate the profile using Method 2, paying strict attention to uppercase/lowercase letters in the SSID and checking whether your router uses WPA2-Personal AES, WPA3-Personal, or WPA2/WPA3-Personal. If an older Wi-Fi adapter fails to join a hidden WPA3 network, switch the router's security mode to WPA2-Personal (AES) or WPA2/WPA3 Transitional and update your wireless network adapter driver from Intel, Qualcomm, MediaTek, or Realtek.

Symptom 2: Hidden Network Disconnects and Will Not Reconnect After Reboot or Sleep​

This happens for one of three reasons: the profile's nonBroadcast flag is disabled, Windows power management is turning off the wireless adapter without sending directed probes upon wake, or the router uses a 5 GHz Dynamic Frequency Selection (DFS) radar channel where client devices are prohibited by regulatory rules from transmitting active probe requests until they hear a passive beacon from the access point.

Fix 1 — Verify the Profile Flag in Adapter Properties:

1. Press Windows key + R, type ncpa.cpl, and press Enter to open Network Connections.
2. Right-click your Wi-Fi adapter and select Status (you must be connected to the network to view this dialog).
3. Click the Wireless Properties button.
4. On the Connection tab, ensure both Connect automatically when this network is in range and Connect even if the network is not broadcasting its name (SSID) are checked, then click OK.

Fix 2 — Move the Router Off DFS Channels (5 GHz Band):

If your hidden network operates on the 5 GHz band and uses channels 52 through 144 (DFS channels), wireless regulatory rules prevent your Windows PC from actively transmitting directed SSID probe requests on those frequencies until it detects traffic. Log in to your wireless router and set the 5 GHz channel manually to a non-DFS channel—such as 36, 40, 44, or 48 (UNII-1) or 149, 153, 157, 161, or 165 (UNII-3).

Symptom 3: Connection Fails When MAC Address Filtering Is Enabled on the Router​

Windows 10 and Windows 11 include a privacy feature called Random hardware addresses that changes the Wi-Fi adapter's MAC address for different networks. If your hidden network router also enforces a MAC address allowlist, the router will reject the randomized MAC address.

Fix — Disable Random Hardware Addresses for the Hidden Network:

1. Open Settings > Network & internet > Wi-Fi.
2. Click Manage known networks, then click on your hidden network's name to open its properties.
3. Locate Random hardware addresses and set it to Off.
4. Reconnect to the network so your PC uses its permanent hardware MAC address.

Symptom 4: "Hidden Network" Does Not Appear at the Bottom of the Wi-Fi Flyout​

If other nearby networks appear in the taskbar Wi-Fi list, your wireless card is working, but it may not see the hidden access point due to an unsupported frequency band or channel:

• 2.4 GHz Channel 12/13: Many North American Wi-Fi adapters only scan channels 1 through 11 on the 2.4 GHz band. Set your router's 2.4 GHz channel to 1, 6, or 11.
• Band Mismatch: If the hidden SSID is broadcast exclusively on 5 GHz or 6 GHz and your PC has an older 2.4 GHz-only or Wi-Fi 5 adapter, the hardware cannot detect the signal. Enable 2.4 GHz/5 GHz dual-band broadcasting on the router or use Method 2 to force a manual profile creation.

Rollback: Safely Remove a Saved Hidden Network Profile​

If you only needed temporary access to a hidden network—or if you want to stop your PC from continuously broadcasting directed probe requests for that SSID when you leave the location—remove the profile completely:

1. Open Settings > Network & internet > Wi-Fi > Manage known networks.
2. Find the hidden SSID in the list and click Forget (or click the network and select Forget on Windows 10).
3. To confirm the profile and its saved credentials are completely removed from the system store, open Command Prompt and run netsh wlan show profiles. Verify that the SSID no longer appears under User profiles.