Where Android stores your WiFi passwords

Android keeps the passwords for networks you've connected to before in a file called WifiConfigStore.xml, which lives in your phone's system settings. You can see the list of saved networks through Settings, but Android does not show you the actual password in plain text through the normal settings menu — that's a deliberate security choice. To read the password itself, you need either to export the file from your phone, use a third-party app that reads system files, or connect a computer to your phone and pull the data directly.

The method you choose depends on whether you have a computer handy, whether your phone is rooted (modified to allow deeper system access), and how comfortable you are with technical steps. Most people find the easiest route is to use a file manager app that can read system directories, or to ask the person who set up the network in the first place.

Key Takeaways

  • Android stores WiFi passwords in a system file, but the Settings app does not display them — you must use a file manager or third-party tool to see the actual password.
  • If your phone is rooted, you can use apps like WiFi Password Show or similar tools to read the password directly from the system file.
  • Without rooting, you can use a file manager app with system file access to navigate to /data/misc/wifi/ and open WifiConfigStore.xml in a text editor to find the password in plain text.
  • If you cannot remember a saved password, the fastest option is often to forget the network in Settings and ask the network owner for the password again.
  • Rooting your phone to access system files carries security risks, as it removes protections that normally prevent apps from accessing sensitive data.

Using a file manager app without rooting your phone

The simplest method that does not require rooting is to use a file manager app that can read system directories. Apps like ES File Explorer, Solid Explorer, or MiXplorer can navigate to the folder where Android stores WiFi data. Open your file manager, look for a menu option to show hidden files or system files (often called "Show hidden files" or "Root explorer"), then navigate to the path /data/misc/wifi/.

Inside that folder, look for a file named WifiConfigStore.xml or sometimes wpa_supplicant.conf. Open it with a text editor — most file managers have a built-in text viewer. Search the file for the name of your network (called the SSID). Next to the network name, you will see a line that says psk= followed by a string of characters. That string is your password, though it may be encrypted depending on your Android version. If it looks like random characters rather than your actual password, your phone has encrypted it and you will need to use a rooted method instead.

Using a rooted phone and a dedicated app

If your phone is rooted, you can use apps designed specifically to read WiFi passwords. WiFi Password Show and WiFi Password Recovery are two common options available on Google Play. These apps request root permission, then read the WifiConfigStore.xml file directly and display your saved passwords in a list. The process is straightforward: install the app, grant root access when prompted, and the app will show all your saved networks and their passwords in plain text.

Rooting your phone does carry real security trade-offs. Once rooted, any app you install can potentially access system files and sensitive data without asking permission. If you root your phone only to retrieve a WiFi password, consider unrooting it afterward, or at minimum be very careful about which apps you install while rooted.

Connecting your phone to a computer

Another option is to plug your phone into a computer via USB and use Android Debug Bridge (ADB), a command-line tool that comes with Android's developer kit. Enable Developer Options on your phone (Settings > About Phone > tap Build Number seven times), then turn on USB Debugging. Connect your phone to your computer, open a command prompt or terminal, and run the command adb pull /data/misc/wifi/WifiConfigStore.xml. This copies the file to your computer, where you can open it in any text editor and search for your network name and password.

This method requires some comfort with command-line tools and takes longer than using an app, but it does not require rooting your phone and gives you direct access to the original file. If you have never used ADB before, the setup takes 10 to 15 minutes the first time.

Resetting a forgotten password without finding the old one

If you cannot remember a saved password and none of these methods work, the simplest path forward is to forget the network and reconnect. Go to Settings > WiFi, find the network name, tap and hold it (or tap the gear icon next to it), and select "Forget". Then reconnect to the network and enter the password fresh. If you do not know the password, you will need to ask whoever set up the network, or if it is your own home network, check your router's label or log into the router's admin panel from another device.

For work or public networks, contact the network administrator or IT support. For home networks, the password is usually printed on a sticker on the bottom or back of your router.

Why Android hides WiFi passwords by default

Android does not display saved passwords in the Settings app because anyone with physical access to your phone could otherwise see every password you have ever entered. By hiding them in a system file that requires either rooting or technical tools to access, Android makes it harder for someone who borrows your phone to steal your passwords. The trade-off is that you cannot easily retrieve your own password if you forget it.

This is the same reason most operating systems hide passwords behind asterisks or dots when you type them — the security benefit of preventing shoulder-surfing outweighs the inconvenience of not being able to see what you typed.

Security considerations when retrieving passwords

If you use a file manager app to read WifiConfigStore.xml, be aware that the app now has access to all your saved passwords. Use only file managers from developers you trust, and check the app's permissions before installing. Similarly, if you root your phone, every app you install afterward can potentially read that same file. Rooting is useful for power users, but it removes the permission system that normally prevents apps from accessing sensitive data.

If you retrieve your password and then share it with someone else, remember that anyone with the password can connect to your network. If you later want to prevent that person from connecting, you will need to change the password on the router itself, not just on your phone.

Frequently Asked Questions

Can I see a saved WiFi password without rooting my phone?

Yes. Use a file manager app that supports system file access, navigate to /data/misc/wifi/, and open WifiConfigStore.xml in a text editor. Search for your network name to find the password. This works on most Android phones without rooting, though some manufacturers restrict access to system files.

What if the password in the file looks like gibberish?

Your phone has encrypted the password, which happens on newer Android versions. You will need to either root your phone to decrypt it, or use ADB from a computer to pull the file and decrypt it with additional tools. The simplest option is usually to forget the network and ask the network owner for the password again.

Is it safe to use WiFi password apps from Google Play?

Apps that read WiFi passwords require root access and can then access other sensitive system data. Use only apps from developers with good reviews and a clear privacy policy. After retrieving your password, consider unrooting your phone or at minimum reviewing which apps have root permission.

Can I see passwords for networks I am not currently connected to?

Yes. The WifiConfigStore.xml file contains all networks your phone has ever connected to, not just the current one. You can search the file for any network name and find its password, as long as your phone has connected to it before.

What should I do if someone else used my phone to connect to my WiFi?

If you are concerned about unauthorized access, change the password on your router itself. Changing the password on your phone's saved network does not change the actual network password — it only updates what your phone tries to use when connecting. Log into your router's admin panel (usually 192.168.1.1 or 192.168.0.1 in a browser) and change the WiFi password there.