4 ms·
iOS Wi-Fi Profile Generator
- BobbyTables2 3y agoI applaud the author, but it’s also a clever “tell me your WiFi password website”!!!
- lakpan 3y agoYes but for what? Why should I install a profile instead of just scanning a QR?
- rcdemski 3y agoFor personal networks this doesn’t make sense but does seem like a fun project to build. The profiles are really most powerful for enterprise networks.
- lxgr 3y agoI was also wondering that. Some iOS configuration options are only available via profiles (and not the GUI), but I don’t see any of these on the site.
- xyst 3y agoIt’s overkill for personal networks, but as others mentioned if you manage a fleet of devices of various types (mobile vs desktop vs laptop). Then managing connections via profiles is the way to go. Push updated profile via MDM. End user should transparently receive the updated profile before logging into corp network. No reconfiguration required on the user end. Reduced or no calls to internal tech support. Personally, I just use the method you describe. Post a QR code for my guest network and be done with it.
- zerkten 3y agoYou can follow the GitHub link and see that the author works with Microsoft Intune (MDM) which confirms what you are writing here.
- 1letterunixname 3y agoThey're for automated deployment to many devices. In general, for personal use, QR codes for WiFi are more portable as they work on iOS, Android, etc. without any special magic or setup. If you have MDM, then great, use these. Otherwise, I have a QR code and plaintext on the back of many pantry door with WiFi deets.
- Avamander 3y agoIt would be nice if this generator also added options for WPA3 and (disabling) MAC randomisation. Plus generating a per-SSID encrypted DNS (DoH/DoT) configuration, those profiles are actually tedious to assemble.
- WirelessGigabit 3y agoSomething I discovered later on is that the MAC doesn't change for a saved SSID. It always uses the same. So there's a mapping that is like SSID -> MAC. They can get reset. But I stopped turning it off on my phone.
- iimblack 3y agoHmm I definitely see my family phones get new MAC addresses from time to time. Maybe the cadence at which they refresh is just irregular?
- WirelessGigabit 3y agoI believe an iOS update triggers it.
- iimblack 3y ago> Starting with iOS 14, iPadOS 14, and watchOS 7, your device improves privacy by using a different MAC address for each Wi-Fi network. This unique MAC address is your device's private Wi-Fi address, which it uses for that network only. In some cases, your device will change its private Wi-Fi address: If you erase all content and settings or reset network settings on the device, your device uses a different private address the next time it connects to that network. Starting with iOS 15, iPadOS 15, and watchOS 8, if your device hasn’t joined the network in 6 weeks, it uses a different private address the next time it connects to that network. And if you make your device forget the network, it will also forget the private address it used with that network, unless it has been less than 2 weeks since the last time it was made to forget that network. https://support.apple.com/en-us/102509 https://support.apple.com/en-us/102509
- captn3m0 3y agoAs another cool trick, you can host a mobileconfig file and use QR codes for fairly quick (10 taps on iOS or so) enrolment. I’ve used them for enrolling users to custom CardDAV/CalDAV servers and it is so cool - going from scanning a QR code to magically seeing new events and contacts showing up in the calendar and contact book.
- k8sToGo 3y agoFastmail does this
- jauntywundrkind 3y agoIs this a thing on any non-Apple systems too? Is it additive or does it overwrite, on clients you've seen? If you can just go places and add their caldav servers with events, that's a semi viable way to share calendars?
- captn3m0 3y agoiOS/MacOS, and Linux are great with this. Mobileconfig is an Apple-only MDM but it works on iOS and MacOS. There’s webcal:// protocol for CalDAV subscriptions that works on Apple and Linux Unfortunately the user story is bad on Android, where Google hates any standards. Edit: You can test out a recent project I did with webcal at https://captnemo.in/blr-habba/ https://captnemo.in/blr-habba/
- joeig 3y ago
- Kiala 3y ago<key>AutoJoin</key> <true/> <key>CaptiveBypass</key> <false/> <key>EncryptionType</key> <string>None</string> A whole bunch of key-value pairs at the same level? What kind of cursed XML is this?
- the_mitsuhiko 3y agohttps://en.wikipedia.org/wiki/Property_list https://en.wikipedia.org/wiki/Property_list
- ezfe 3y agoStandard plist format https://en.wikipedia.org/wiki/Property_list https://en.wikipedia.org/wiki/Property_list
- mobilio 3y agoAlso can be edited using plutil and defaults in command line.
- mock-possum 3y agoJeez yeah do not like this
- blashyrk 3y agoNow imagine that the workspace/project format for the defacto IDE for all Apple related stuff uses this exact same format, mixed with some random binary blobs and it keeps track of all project settings and file structure. Now imagine merging that in your VCS of choice whenever another team member makes any change to any of the aforementioned things. Good news! You don't have to imagine! You can live this fever dream yourself by using Xcode. How a company with that much money can unironically produce such dumpster fire garbage of a so-called IDE is beyond my comprehension.
- guhidalg 3y agoThis is one of the unexpected externalities of Apple’s walled garden. You may not deal with Xcode directly if you use Xamarin et al. then some poor soul somewhere has to sacrifice their first born every year when Xcode received an update. If Apple allowed other App Stores, they would have to make Xcode not suck.
- Antrikshy 3y agoWould be perfect with a brief explanation of what this is and how to use the generated profile. People who need profiles probably have better dedicated tools for the job. This website could be a nice educational resource for people who are unfamiliar but curious; it's just missing an explainer.
- tffhrdvv 3y agoUm did you even open the link? What is this for? Apple offers tools, such as Apple Configurator that allow you to create your own iOS Configuration Profiles. Apple Configurator is only availble for MacOS devices. This is useful if you do not have access to one but still need this. This site will help generate a configuration profile based on the network information you provide. Using this, you can import the profile into your mobile devices (via a method such as an MDM). You can see all of the modified output in the bottom as aqua text. All of this is run client-side, within the browser. Extra stuff: Apple MDM Configuration Profile Reference
- deleted 3y ago[deleted]
- Jolter 3y agoThe text explains “what”, but not “why”. Who needs a Configuration Profile?
- 3y ago
- maratc 3y agoIt would be great if there's a way to store the profile on an NFC tag. This way, I could tell my guests to tap the tag to connect to my home network.
- blutack 3y agoI use QR codes for this, they work for both android and iOS. This link explains how they are formatted: https://qifi.org https://qifi.org
- RKearney 3y agoNo escaping is done, so you can end up with a malformed profile if your SSID or PSK includes a < for instance.
- jasoneckert 3y agoCorrect me if I am wrong, but won't iOS profiles work identically on macOS? If so, the tab at the top should be called "iOS & macOS" to be consistent with the "Android & Windows" tab.
- MilaM 3y agoNeat. A tool like this but for VPN profiles would be nice. I had to manually create them to connect to my internet router. The number of available options is quite intimidating.
- notherhack 3y agoImazing Profile Editor works well to generate VPN profiles, and a lot of other profiles I don't use. Runs on Mac or Windows and it's free. No personal stake, just a satisfied user. https://imazing.com/profile-editor https://imazing.com/profile-editor
- rsync 3y agoSimilar: https://dns.notjakob.com/tool.html https://dns.notjakob.com/tool.html ... which allows you to create configuration profiles for system-wide DoH settings which are, currently, not settable in the GUI settings.