Where Does Android Store Saved Wi-Fi Passwords?
Android keeps saved Wi-Fi passwords in a root-only system file that moved in Android 12. Paths by version and access rules.
Last updated
Android stores saved Wi-Fi networks and their pre-shared keys in a system file no app or file manager can open without root. Older releases used WifiConfigStore.xml under /data/misc/wifi; Android 12 and later moved it under the Wi-Fi apex module at /data/misc/apexdata/com.android.wifi. Very old versions used wpa_supplicant.conf in the same area.
The version split matters only for forensics and custom ROM work; everyday users should never touch these files. Normal tasks have normal routes: QR sharing for one network, setup-time migration for all of them. Anything promising password recovery without root is selling something else. Rooted readers get the paths; everyone else gets the QR code.
Where Android Wi-Fi stores this, by platform
/data/misc/apexdata/com.android.wifi/WifiConfigStore.xml
Android 12 and later: WifiConfigStore.xml under the apexdata path. Older releases: same filename under /data/misc/wifi. Ancient versions: wpa_supplicant.conf. All require root to even list. For daily use, share via the QR code on the network settings page instead of touching files.
Frequently asked questions
can i see wifi passwords without root
No. Every location holding Wi-Fi passwords sits behind root permissions by design, and there is no supported API that reveals them to file managers. Sharing one network is done through the QR code on the Wi-Fi settings page, which Android generates without exposing the raw key.
how do i move wifi networks to a new phone
Open the network's settings page and use Share with QR code; scanning it joins the new device without typing anything. For many networks at once, Google's device-to-device transfer during setup migrates them. Both beat transcribing keys by hand and keep the underlying files untouched.
should i forget wifi on a sold phone
Yes, and recommend it. Forgetting the network on the old phone removes a stale entry that can auto-join with an outdated key and lock the account after retries. Change the password on the router first, forget everywhere, then join fresh with the QR code.
Notice an outdated path? Let us know.