WiFiScanner for Windows: Complete User Guide

What This Guide Covers

This is the exhaustive reference: every tab, sub-tab, button, checkbox and dialog in the app, in plain language. Each part says what it does and why you would use it while diagnosing or improving a WiFi network.

Before You Upgrade

Installing a new version updates the app itself (in Program Files) and leaves your data alone. BSSID Notes, scan history, saved settings, integration credentials and everything else live in a separate location the installer never touches.

Software Updates

WiFi Scanner tells you when a new version is available and installs it for you, after you say yes. A few seconds after the app starts, it checks for a newer version. When there is one, a window shows the new version, the one you have and a link to what's new, with three choices:

• Install Update downloads the new version and checks that it is signed by AccessAgility. WiFi Scanner then closes, Windows asks for permission, and the app opens again on the new version.
• Skip This Version stops the reminders for that version.
• Remind Me Later asks again the next time WiFi Scanner starts.

WiFi Scanner never installs anything without asking you first. To check yourself, choose Help > Check for Updates…. To stop the automatic check, clear Automatically check for updates in Settings > General > Software Updates; you can still check yourself at any time.

Running a Scan

1. Pick a source from the Scan Interface dropdown in the top-right of the window:
   • a real WiFi adapter on this machine,
   • a saved Remote WiFi Scanner device (SSH), or
   • one of the always-available Remote Streamer options, for receiving data pushed or streamed from another machine.
2. Click the toggle switch in the top-left of the Scanner tab to start. While scanning, the switch becomes a pause/stop control, and results fill the grid as networks are discovered.
3. Use the search box above the grid to jump straight to a specific network as you type.

If you already have results you don't want to lose, starting a new scan (or closing the app) first shows a "Would you like to save scanning results?" prompt. See Prompts You'll See.

Results Grid & Columns

Every discovered network gets a row. The grid has many more columns than it shows; most are hidden by default. SSID and BSSID are on by default and stay on across launches unless you hide them.

Selecting a row drives everything in the bottom tabs: the graphs, IE detail, and Copilot findings all follow whichever AP you have selected.

Show, hide and arrange columns

• Right-click any column header to check or uncheck which columns show. The same list is also editable from Settings → Columns.
• The menu starts with the header you clicked: Hide and Rename, or Remove for a column you added.
• The rest of the menu lists the columns alphabetically, so the long list is quick to search. The grid keeps its own arrangement.
• Columns you added from a network's Information Elements get their own section at the bottom of the menu. Unticking one there removes it rather than hiding it.
• Such a column is marked with a * after its name, in the grid header, in the menu and in Settings → Columns. Hovering its header says which element and field it shows.
• Column order and width persist once you drag them, and they stay put.

Rename a column

Renaming a column: the same header menu has Rename for the header you right-clicked, for when your team says TxBF rather than SU Beamformer.

• The new name shows in the grid.
• The header's tooltip and the menu show both, for example TxBF (SU Beamformer), so anyone reading a screenshot can still tell which column it is.
• Rename it to an empty name to put the original back (it then follows the app's language again).
• Names are limited to 40 characters.

What each column tells you

Vendor and Security

Vendor is resolved from the BSSID's MAC OUI. A randomized or locally administered BSSID has no registered OUI, so its vendor comes from the beacon instead: the WPS-advertised manufacturer if there is one, otherwise the AP maker's own vendor-specific element (for example Cisco Meraki).

Elements that name a standard or a chip rather than the AP maker (WMM and WPA under Microsoft's OUI, Broadcom, Qualcomm and similar) are skipped, so they are never shown as the vendor.

Security is read from the AP's own beacon. Wi-Fi 7's SAE-EXT-KEY counts as WPA3, and a network offering both Enhanced Open and WPA3 reads WPA3 (there is no WPA2 in it).

The key-management suites follow in brackets, for example WPA3 (SAE (SHA256)). A network with fast roaming (802.11r) lists its FT suite beside the first one, and one offering Enhanced Open alongside WPA3 lists both.

Hover for detail, including a link between an open network and its paired OWE twin when both are broadcast. The open half of such a pair keeps its own name.

Right-click a row

• Copy / Copy All Columns and Fields / Copy All Columns and Header Names: grab a row's data for pasting into a report or ticket.
• Edit BSSID Note: annotate that specific AP without leaving the grid.
• Select all 3 links of this Wi-Fi 7 AP: appears on one link of a Wi-Fi 7 multi-link AP whose other links are in the grid. It selects them all; the row you right-clicked stays the one the panes below follow.

Group by AP

Turn on Group by AP (the toggle above the grid, also in Settings → General) to fold every BSSID of one physical access point into one row, across all its bands. In a grouped row:

• Channel, Band, Width and Signal give one value per radio, for example 6 / 44 / 133, 2.4 / 5 / 6 GHz and 40 / 80 / 320 MHz. Mode and WiFi Generation are listed per radio too.
• The BSSID column shows the shared address with the differing digits as #, or the lowest BSSID and +N when they share nothing.
• Hover the BSSID cell to see which evidence grouped it (Grouped by ...).

Wi-Fi 7 multi-link APs

Each link of a Wi-Fi 7 multi-link AP keeps its own row, because each has its own channel and signal.

• Click one link and the AP's other links get a light blue tint, so you can see which rows belong together even when they sit far apart in the list.
• Right-click a link and choose Select all 3 links of this Wi-Fi 7 AP to select them together.

Left Filter Tree

Thirteen collapsible nodes let you drill into the current scan from different angles.

Pick rows

• Click a row to filter the grid by that row alone.
• Ctrl-click to add or remove more rows.
• Press Space to switch the row you most recently added between is and is NOT.
• Click All Networks at the top of the tree to clear everything.
• Clicking a node's heading only opens or closes it.
• The arrow keys move through the tree and the grid follows, just as clicking does.

Rows under the same node widen the filter (two SSIDs means either). Rows under different nodes narrow it (an SSID and a band means both). Whatever you pick is written into the search box, so you can always see the filter being applied.

The panes below follow the filter

The filter applies to the panes below the grid too: Spectrum Graphs, Signal vs. Time, Signal Summary and Alerts show only the networks it keeps. Alerts that are not about one network always show.

With Group by AP on, Signal vs. Time and Signal Summary draw one line per AP, as the grid shows one row. The Spectrum Graphs keep every radio of the AP, so a dual-band AP still appears on both band graphs.

The setting that keeps your connected network visible while filtering applies to the grid only.

The nodes

Search Box & Saved Filters

The search box above the grid (watermark SSID, Channel, BSSID) does a live, comma-separated text filter as you type.

Save a filter

1. Build a filter you like in the search box.
2. Click the Save Filter (floppy disk) icon next to it.
3. Name and save it in the small dialog that opens.

The filter then shows up under the tree's Filters node for one-click reuse later.

What you can type

The same band spellings work on Mac, so a filter written on one platform reads the same on the other. Clicking a Band row in the tree still writes the app's own 5ghz token.

Classification names and Watched combine with the rest of your comma-separated filter text like any other token.

Spectrum Graphs / Signal vs. Time / Signal Summary / SSID Details / Alerts

Six tabs below the grid, all following whichever AP is selected above.

Spectrum Graphs

Per-band trapezoid charts (2.4 GHz, 5 GHz side-by-side, and 6 GHz) plotting every AP's RSSI against its channel: the primary tool for visualizing channel overlap and congestion.

A multi-radio AP's SSID label gets a small muted-color tag prefix, consistent across all three band charts. That lets you match the device's radios visually even though they usually land on separate band charts. Turning on Group by AP does not take any radio off these charts: each radio is drawn on its own band.

With a spectrum analyzer

If a supported USB spectrum analyzer is connected, real RF spectrum data overlays the same graphs (Live/Average/Maximum/Utilization trace, Waterfall, Density) via the Spectrum Analysis title-bar menu. This reveals non-WiFi interference (microwave ovens, Bluetooth, cordless phones) that a WiFi-only scan can never see.

Several analyzers at once

Connect more than one analyzer, for example a Wi-Spy DBx and an ESP32-C5 card, and each sweeps its own band, so the 2.4 GHz and 5 GHz graphs are both live. The title-bar button reads Spectrum Analysis (2).

• The menu lists every analyzer on its own row: its name, the bands it can sweep (the lit one is the band it is on), and ✕ to disconnect just that analyzer.
• Click a band on a row to move that analyzer there. If another analyzer is already on that band, the two swap, so two analyzers never sweep the same band.
• The title-bar band pills light every band being swept. Click an unlit one and an analyzer that can sweep it moves there.

ESP32-C5 cards

A low-cost ESP32-C5 board works as a spectrum analyzer for 2.4 and 5 GHz. It runs one of two firmwares:

WiFi Scanner can install the card firmware on a new board directly, in about 20 seconds. A board you have already put ESP-SDR on (from a web page, steps below) can be converted to the card firmware the same way. Either way the board is found automatically when it is plugged in, and starts sweeping 2.4 GHz (use the 5 band pill to move it).

• Plug in two boards and one sweeps 2.4 GHz while the other sweeps 5 GHz, so both graphs stay live at once.
• A WiFi Scanner card with no band of its own (2.4 GHz already has another analyzer, such as a Wi-Spy DBx) shares 5 GHz with the card that has it: each sweeps an equal part of the band and the graph joins them, so 5 GHz refreshes about twice as often with two cards. In focus, the card with the band takes the focus alone.
• Levels are approximate dBm, calibrated against the networks the scanner measures.
• The board samples the air in short snapshots, so very short bursts can be missed.
• Close the ESP-SDR browser viewer first: only one program can use a board at a time.
• A board straight from the web installer can stay silent until it is restarted; WiFiScanner restarts it for you.

Convert a board to the card firmware

1. Plug the board, running ESP-SDR, into USB.
2. Open Settings → Spectrum and click Convert ESP-SDR board to WiFi Scanner card firmware... The button is available only while an ESP-SDR board is plugged in.
3. Answer Yes in Convert this board? and keep the board plugged in while the status counts up (Converting: 45%). It takes about 20 seconds.
4. When it says Converted to firmware and the version, the board restarts and is found again by itself.

If it says Conversion failed, unplug the board, plug it in again and convert it again. If it is then listed as a board that did not answer, install the card firmware from there.

To go back to ESP-SDR later, install it again with the ESP-SDR web installer.

Install the card firmware on a new board

A board that runs neither ESP-SDR nor the card firmware (new from the factory, blank, running other firmware, or left unusable by an interrupted conversion) gets the card firmware straight from WiFi Scanner. When you plug one in, a bar above the WiFi Scanner grid says New ESP32-C5 board found: click Install Firmware... there, or Not Now to hide it for that board. A stock ESP-SDR board gets the same bar with Convert.... Settings → Spectrum offers both at any time:

1. Plug the board into USB with a data cable, using its USB socket, not the one marked UART.
2. Open Settings → Spectrum. The board is listed as The board on COM7 did not answer as ESP-SDR or a WiFi Scanner card.
3. Click Install WiFi Scanner card firmware... and answer Yes in Install the card firmware? Whatever the board runs now is erased.
4. Keep it plugged in while the status counts up (Installing firmware 2.3.2: 45%). It takes about 20 seconds. When it says Installed firmware and the version, the card restarts and is found by itself.

Before writing anything, WiFi Scanner checks that the board is an ESP32-C5 with at least 8 MB of flash. Any other board, such as an ESP32-S3 or ESP32-C6, is restarted as it was, and the status says why.

Card firmware updates

WiFi Scanner carries the latest card firmware. With Update ESP32-C5 card firmware automatically on (Settings → Spectrum, on by default), a card on older firmware updates itself when it connects:

• over USB in about 30 seconds,
• over Bluetooth in about 100 seconds,
• a card on firmware older than 2.3 over USB only, in about 20 seconds.

A notice under the alerts bell shows the progress, for example ESP32-C5 card on COM5: Updating card firmware to 2.3.2 (40%). Keep it connected., and Settings → Spectrum shows the latest one under the setting. The update runs before the card is used, so its trace appears once the card has restarted. Keep it plugged in (or in range) until then. On firmware 2.3 or later an interrupted update leaves the previous firmware in place, and the card tries again the next time it connects. If an older card stops answering after an interrupted update, install the card firmware on it again from Settings → Spectrum.

Use a card over Bluetooth

A card on the card firmware also works without a cable, from the ESP32-C5 over Bluetooth section of Settings → Spectrum:

1. Power the card (a USB charger or battery is enough) and turn on Bluetooth on the PC.
2. Click Find. The cards in range appear in Card.
3. Choose one and click Connect. Its trace appears on the channel graphs.

The status line then says what the link carries, for example about 113 measurements a second, so focus uses 1,024 points. A slower link focuses with 256 points. Disconnect forgets the card until you connect it again. A card that is also plugged into USB is used over USB instead.

Installing ESP-SDR on a new board

To use a board on ESP-SDR, install that firmware once from a web page; nothing to download. (For the WiFi Scanner card firmware, skip this and install it from Settings.)

1. Quit WiFiScanner, so the web page can use the board (only one program can use it at a time).
2. Connect the board with a USB data cable (some cables only charge) to its USB socket, not the one marked UART. WiFiScanner finds the board only through its USB socket, so use the same one afterwards.
3. In Chrome, Edge or Firefox on a computer, open the ESP-SDR web installer.
4. Click Connect device and choose the board's port in the list the browser shows. If it does not connect, hold the board's BOOT button while you click Connect device.
5. In Chip / firmware profile, choose the ESP32-C5 profile (the page usually suggests it once it has detected the chip).
6. Click Install ESP-SDR firmware and wait until the installation log says it has finished. This replaces whatever was on the board before.
7. Close the web page, then open WiFiScanner. The board is found within a few seconds and its live trace appears on the channel graphs. If the board stays at "Not detected", unplug it and plug it in again.

The board keeps the firmware, so this is a one-time step. Then convert it to the card firmware, or keep ESP-SDR for spectrum only.

Unexplained energy icons

Unexplained energy. With a spectrum analyzer connected, WiFi Scanner compares the energy it measures with the networks it scans. Energy the scanned networks do not explain is shaded on the channel graph. What it probably is appears as a small icon in the row above the graph.

• Point at an icon to read the details, for example Bluetooth LE advertising: 2479–2481 MHz (17% busy), and when it was first and last seen.
• Icons stay until you clear them, so an alert is still there after you look away. An icon is bright while its signal is being detected and dims once it stops.
• Click an icon to clear it (it comes back only if the signal returns), or clear them all with Spectrum Analysis → Reset.
• The first icon in the row is the analyzer itself; point at it for its name.
• Turn the shading and the icons off with Spectrum Analysis → Flag Unexplained Energy.

Waterfall

Waterfall colors. The waterfall's colors follow each band's noise floor, so the quiet background shows as dark blue and anything about 30 dB above it as green, whatever the analyzer. The waterfall takes at most a third of the graph's height, so the power spectrum keeps most of the room.

Focus on one channel

Focusing on one channel. To watch one channel closely, focus the spectrum on it:

• click the channel's number under the graph,
• double-click the graph near it, or
• right-click a network in the grid and choose Focus spectrum on this channel (it uses the network's own width).

The graph zooms to that channel, and a label on the graph names the focus, for example Focus: channel 6 · 2427–2447 MHz, with the widths you can switch to and an × to leave.

In focus the analyzer sweeps only that channel, so the waterfall above the graph fills much faster:

• a Wi-Spy DBx about 4 to 28 times faster, depending on the width;
• a WiPry Clarity or Wi-Spy Lucid about 4 to 8 times;
• an ESP32 board more than a hundred lines a second for a 20 or 40 MHz channel.

The waterfall turns on and grows taller while you are focused. A thin strip above it keeps the last whole-band sweep, with the focused channel outlined, and says how old that sweep is; click the strip to move the focus there. When you leave focus, the whole-band waterfall you had before comes back.

Signal vs. Time

A rolling line chart of every visible AP's RSSI over the last ~13 scan ticks. Watch for instability or fading that a single snapshot would miss, useful for diagnosing intermittent connectivity.

• Click a network in the grid above to highlight its line and dim the rest, since dozens of unlabeled lines are hard to read at once.
• Plotted lines are capped at the strongest N by signal (see Settings → General → Max networks shown) so the graph stays responsive with a busy scan.
• Your connected network is always shown regardless of the cap, and always renders in the same gold used for its row in the results grid.

Signal Summary

Three side-by-side charts (Signal Rank, Adjacent Channel Interference, Co-Channel Interference), each with its own RSSI-threshold slider and Any/Same Band/SSID/Width toggle. This is the tool for manual channel-planning decisions: "how many APs are realistically competing with mine at a signal level that matters?"

SSID Details

The 802.11 Information Elements of the selected AP's beacon, decoded into an expandable tree. Use it when you need to see exactly what the AP is actually broadcasting, not just the app's interpretation of it.

On each collapsed row, the Details column says what the element means (“6(B), 9, 12(B) … Mbit/sec”, “Local Power Constraint: 3 dB”) rather than its bytes. Expanding a row goes down to the individual bits: HT and VHT capabilities, HE and EHT (Wi-Fi 6/7) capabilities and operation, Transmit Power Envelope, RSN and RSNXE, WMM and MU EDCA, Spatial Reuse, and the AP name that thirteen vendors broadcast in their own element.

Copy a field, or add it as a column

• Right-click to copy one element or the whole tree.
• Right-click and choose Add as Column: the element or field becomes a grid column (marked *), and the row gets a tag so you can see it is already in the grid. The same item then reads Remove Column.
• A field that a built-in column already shows, such as Country, Station Count, Channel Utilization, Supported Rates or the AP Channel Report, is not added twice. The item reads Show “Country” Column and turns on the built-in column instead.
• The left filter tree's Information Element rows offer the same item.

Alerts

Auto-generated, rule-based findings about the selected network: weak security, DFS instability, BSS Color collisions, channel-14-outside-Japan, and dozens more. Filter by Category or Priority; each card can link to a support article. These same findings can be emailed automatically. See Settings → Alerts.

Wi-Fi 6E and Wi-Fi 7 findings

• Wi-Fi 7 Multi-Link Security Mismatch: the links of one MLO network advertise different security.
• 6 GHz WPA3 Without Hash-to-Element.
• Target Wake Time (TWT) Required: devices without TWT cannot connect.
• Live DFS Channel Switch in Progress: the AP is announcing a move to another channel, usually after radar.
• BSS Color Collision: raised only between two radios on the same band and channel, never between two networks of one radio.
• Non-PSC 6 GHz Channel: raised only when no other access point's neighbor report lists the network, since a listed network is still easy for devices to find.

Priority

Priority runs Very High → High → Medium → Low → Very Low, plus two special tiers:

• Alert: reserved for genuinely severe/actionable findings.
• Info: findings that describe a good or neutral configuration state (e.g. "WPA3 clients use SAE and are required to use 11w"). Informational only, and never emailed, even with alert emails turned on.

Watch a BSSID or SSID

BSSID/SSID watch: right-click a network in the scan grid to watch a specific BSSID or SSID for behavioral changes: channel change, security change, client-count spike, signal volatility, reboot, spatial-stream drop.

• Watch events for the currently-selected row show up right here in the Alerts panel.
• A small badge on the Alerts tab header shows the count of recent watch events across your entire watch list, so a change on a watched access point you aren't currently looking at doesn't go unnoticed.
• Repeated still-active conditions are debounced (won't re-fire every 15 seconds).
• A watch event on a controller-confirmed access point is annotated as such rather than reading like an unknown-device alert.

Clients

Client devices seen talking to (data frames), joining (management frames, the Mgmt Frames column) or probing for (probe requests) the selected network. This is not the same as the AP's own self-reported station count, which is what the grid's Station Count column shows.

Alerts Drawer (side panel)

A second way to reach the same findings as the Scan tab's Alerts sub-tab, without switching away from whatever you're currently looking at (Performance, WiFi Planning and Survey, Copilot).

Click the bell icon in the title bar to slide it open from the right. The badge on the bell shows a live count for the currently-selected AP. The drawer stays in sync with the same DetectedAlertsAP data the in-grid Alerts panel shows, so the two never disagree.

• Click a card's header to expand it in place. The chevron flips from ▸ to ▾, and the card grows to show the full remediation text plus two action buttons.
• Go to AP: selects that finding's BSSID back in the Scanner grid and closes the drawer, so you land straight on the row instead of hunting for it yourself. If the AP has aged out of the current scan, a small toast says so instead of silently doing nothing.
• Fix in Copilot: jumps to the Copilot tab and runs the Go-card report that best matches the finding's category, pre-filled with the alert's own SSID. The drawer becomes an entry point into a real report instead of a dead end.

Copilot Tab: Outcome Cards & AUTO Reports

A card reads Ready once its prerequisite is met (e.g. an Own-classified AP exists, an integration is configured). Until then it grays out and gives the specific reason why.

AUTO cards

Cards tagged AUTO run their action directly with one click (a diagnostic, a sync, a connection, or a full report) instead of just navigating you to the right screen to finish the steps yourself.

Several of these generate a real report window on the spot, reusing the same generalized report engine. The title, description and unit vary per report; the layout and Good/Bad-findings format are shared.

WiFi Checker sub-tab

The cards

Cards that diagnose a problem

Why does my connection drop?

It names the conditions in the air that cause a drop, each with its evidence:

• a signal at the edge;
• nowhere to roam to when this AP fades;
• a DFS channel (the one cause that disconnects every client at the same instant);
• a saturated channel;
• too many clients on the radio;
• crowding;
• or 2.4 GHz when the network also broadcasts elsewhere.

If none of them apply it says so: the cause is not visible from the air.

WPA3 & PMF readiness

It places every BSSID of a network on the road to WPA3, and names the one next step, which is whatever the furthest-behind BSSID needs. The road runs:

1. no protection,
2. original WPA,
3. WPA2 without PMF,
4. WPA2 with PMF,
5. transition mode,
6. WPA3.

• Open or WEP is the step in front of WPA3 rather than a WPA3 question.
• TKIP has to go first, because WPA3 forbids it and PMF cannot be enabled alongside it.
• PMF goes on as capable before required, so no client is evicted.

It also says when the BSSIDs of one network disagree, and when a 6 GHz radio runs without the WPA3 and PMF that band requires.

Is my channel too wide or too narrow?

Type an SSID or BSSID, or leave the field blank for the network you are connected to. It weighs the width that AP is running against the company it keeps.

Width is a trade: every doubling doubles the rate and halves how many channels fit. So it compares what the next width up would add in overlapping APs, and what the next width down would shed.

On 2.4 GHz it needs no comparison, because the band has room for three non-overlapping channels and nothing wider fits. A second radio of the same AP never counts as its own neighbor.

Is it my WiFi or my internet?

It answers with three numbers, in the order the bits travel:

1. the rate your radio agreed;
2. what actually crossed the air to your router (the local throughput test);
3. what reached the internet.

Each step can only lose speed, so the one that loses the most is the answer.

The air is not expected to carry the whole negotiated rate (about half of it is a healthy result over TCP), so the two legs are scored against what each should manage before either is blamed. Bufferbloat and packet loss are reported alongside when the speed test measured them.

Getting your router's full Wi-Fi 6E/7 speed?

Type an SSID or BSSID, or leave the field blank for the network you are connected to. It names the fastest radio that network has in range, and says whether it is 6E (a 6 GHz radio) or Wi-Fi 7 (the generation, which can also appear on 5 GHz) or neither.

It then measures your own link against what that radio can do:

• When your link exactly equals what a narrower channel or fewer streams would give, it says so: that ceiling is your adapter, not the AP.
• When it matches none of them, the modulation is being cut by the air rather than by capability.
• A weak signal is named ahead of both.

The same checks, in the same words, as on macOS.

Fix channel congestion & interference

Fix channel congestion runs its advisor and opens a report directly instead of just pointing at a tab.

It recommends the least busy channel on each band. It counts physical AP radios rather than SSIDs, weighs each by its signal, and on 5 and 6 GHz counts a radio against every channel its width covers, so an 80 MHz neighbor makes four channels busy, not one.

• On 2.4 GHz it chooses between 1, 6 and 11, counting a 40 MHz radio's second half as well.
• It then flags up to three other crowded channels (three or more radios; six or more is high).

The same checks, in the same words, as on macOS.

Performance → Connection Summary

The single most useful button in the app for a fast site-visit read is Run Full Diagnostic. It runs, in order:

1. local WiFi signal, link-rate and channel-congestion checks;
2. Speed Test + Network Diagnostics + Application Tests concurrently;
3. the WiFi-Only test last, so it doesn't compete for airtime with the others.

The signal-path diagram

As it runs, the diagram animates which hop is currently being probed: Your Device → WiFi Access Point → WiFi Router → Internet → Test Server → Applications. Each node shows live detail: connected SSID, router LAN/WAN IP, and your ISP's first-hop IP via a TTL=2 ping trick.

The Applications node is clickable and shows a colored dot per app suite (green = fully reachable, red = a problem). Hover for the per-endpoint breakdown.

Insights and details

• An Insights list of plain-English findings.
• A Connection Details fact sheet.
• A Network Details table listing every AP related to the one you're connected to (same SSID on another band, mesh siblings, a guest network on the same hardware). It helps diagnose roaming/mesh placement or spot an unexpected SSID riding on the same radio.

Performance → Internet Speed Test

The main manual "run a speed test now" screen.

1. Tick which of the four providers to measure: Ookla Speedtest, Cloudflare, M-Lab NDT7 and Fast.com.
2. Click Run Speed Test.

The providers run one after another so they never compete for bandwidth. A live gauge and download/upload/latency readouts follow the run, and the headline numbers average the providers that succeeded.

Every result is logged to a results grid (17 possible columns, right-click a header to choose which show) and plotted on a trend graph across the session. That shows whether speed is degrading as you move through a building or over time. Clear Results empties the grid and the graph.

How each provider is measured

Every provider is measured the same way. Each direction runs for a fixed time over several connections:

The first two seconds are excluded while TCP ramps up. That is how the providers' own apps measure, and it keeps the four comparable: a single download of a fixed-size file disagrees wildly with a multi-stream fixed-time test.

Run Full Diagnostic on the Connection Summary tab uses the same settings and the providers you have ticked, and its report names which provider produced the speed it shows.

Performance → Network Quality

A live, continuously-updating readout, with nothing to click here.

Windows does not report a noise figure, so unless a spectrum analyzer is connected the noise floor is a typical value and is marked as assumed.

A low signal-to-noise ratio causes retries and slowdowns even when signal strength alone looks fine.

Performance → Local Speed Test

Answers the question "is it my WiFi, or my internet service?" by measuring throughput over just the WiFi hop using iperf3, isolating the wireless link entirely from the WAN.

1. On one machine that's wired directly to the router, enable "Serve as a local speed-test target".
2. On any WiFi client (including itself), enter that machine's IP as the Destination Host.
3. Click Run Local Speed Test.

Performance → Network Diagnostic Tools

Runs Ping, Traceroute, DNS Lookup, or HTTP (with a full DNS/TCP/TLS/first-byte timing breakdown) against any hostname or IP. The tests run from real probe machines in dozens of countries, not just from where you're standing. Run All Tests runs all four types in one pass.

This is how you tell whether a problem is specific to the site you're at, or affects the target everywhere:

• If a customer's mail server is slow from here but fast from five other global locations, the problem is local (their ISP, their site network).
• If it's slow everywhere, the problem is on the server/target side.

Performance → Application Tests

The complementary check to Network Diagnostic Tools: this one is a direct request from this machine (not routed through global probes). It tells you whether the network you're on right now can actually reach 12 well-known endpoints across Microsoft 365, Google Workspace, Zoom, Slack, Salesforce, YouTube/Netflix, plus a plain-internet Cloudflare baseline.

Each row breaks down DNS/TCP/TLS/first-byte timing separately, so you can see exactly where a broken connection to a specific app is failing:

• DNS resolution,
• the TCP handshake,
• TLS negotiation,
• or just a slow server response.

LAN Scanner

LAN Scanner is its own top-level tab, alongside WiFi Scanner, Copilot, Performance and WiFi Planning and Survey. WiFi Scanner scans the air; LAN Scanner scans the wire.

It keeps a grouped, persistent inventory of every device seen on the local subnet. That means not just APs/routers, but phones, laptops, printers, smart-home gear, NAS boxes, game consoles, and anything else with an IP.

Scan the subnet

1. Click Scan Now to sweep the subnet.
2. Click Get Open Ports & Services to probe what was found.

Nothing runs until you ask. Results stream into the grid live as the scan finds each device, grouped by guessed device type. They persist across app restarts: each device upserts by MAC address rather than starting from empty every scan.

Device details

Click any row once to open the details panel alongside the grid (no separate popup window). It shows:

• vendor (with a real favicon-style icon once it's looked up);
• hostname;
• matched access point (if the device's MAC correlates to a BSSID this app has also seen as a wireless AP);
• first/last seen;
• an editable note;
• a live open-port scan of common services.

Name a device

Naming a device. Whatever a device calls itself is rarely what you call it. The Name column, beside Note, is editable: type the name you actually use. It becomes what the device is called from then on, in the grid, in the details panel title, and in both exports.

• Names are stored per MAC address, so they survive a rescan and a restart, and a scan never overwrites one.
• Clear a name and the discovered one (hostname, then vendor, then the IP address) comes back.
• Name and Note are separate on purpose: the name is what the device is called, the note is a remark about it, and writing one never disturbs the other.

How devices are identified

WiFi Planning and Survey → Projects Panel

The left panel manages survey projects, each one tied to a floor plan image.

• "+" (Create new Survey Project): opens the project setup dialog.
• Folder icon (Import a Survey Project): loads a project file someone else exported or emailed you.
• Each row's ⋮ menu: Edit, Save As (branch/duplicate), Export, Clear (wipe data, keep the shell), Delete.

Below the project list

Once a project is open, the panel below the list holds, from the top:

1. Project Settings: the Active / Speed Test / Passive / Access Points checkboxes that show/hide each marker type on the floor plan to declutter comparisons, plus Continue From Last Path.
2. The Survey Paths/heatmap-type list.
3. Whichever mode-specific form is currently active.
4. Scanned Networks, during a Passive survey, for picking a filter network from the live scan.

Calibration, AP-on-a-Stick placement, the WiFi marker form, or the heatmap color-range picker all dock here directly instead of opening as a separate window, so they never cover the floor plan underneath.

If a project will not open

If a project or floor plan image cannot be opened, the app says why in a message (for example, an image format it cannot display) and leaves the current project as it was.

The details are also written to the log file, %ProgramData%\AccessAgility\WiFi Scanner\wfs.log, which is the file to send to support.

If that file cannot be written by your Windows account (for example after WiFi Scanner was once run as administrator), the log is kept in %LOCALAPPDATA%\AccessAgility\WiFi Scanner\wfs.log instead.

WiFi Planning and Survey → Toolbar

Three mode tabs (Planner, AP-on-a-Stick, Post-Validation) sit just under the project bar. Each has its own left-side tool rail, and only one mode/tool is active at a time.

The default Pointer tool also drags any selected marker/AP/wall directly on the canvas (a small 4px threshold tells a real drag from a plain click). There's no separate "Move" tool to switch to first.

Move or delete a planned AP

Moving and deleting a planned AP:

• With Pointer, press on the AP's icon or its label and drag. The AP follows the pointer and keeps the spot you grabbed it by, and the heatmap redraws at full detail when you let go.
• Right-click an AP for Edit Properties... and Delete AP, or select it and press Delete.
• While the Place AP tool is active, the same right-click menu also turns each of the AP's bands on or off, so you can keep placing without opening a dialog.

Planner tools

Keyboard shortcuts

Keyboard shortcuts are also listed under the ? icon next to the zoom controls.

AP-on-a-Stick & Post-Validation tools

These two modes share a similar rail:

The rail also has Place AP, Note, Rogue AP, Place IDF, Calibrate, and the three Measure tools.

AP-on-a-Stick additionally tracks separate, named placements. Walk one physical test AP to several candidate mounting locations, and each placement's readings stay separate instead of blending together under one BSSID, so candidate spots compare side by side.

The step bar above the plan helps you get started; in normal use, work from the buttons on the left. Clear Step Guide in the toolbar to hide the bar, and select it again to bring it back.

The placement being walked is Tracking; Freeze Placement finishes it, and the step bar then shows Plan Next APoS Location. To add readings to a frozen placement again, click its row in APoS PLACEMENTS or right-click it on the plan and choose Resume Tracking; the app asks first, so a stray click cannot send new readings to a finished placement. Right-click a placement (or, in Post-Validation, an installed AP) to rename or delete it. With Place AP selected, clicking an existing placement opens the same menu instead of adding a new AP on top of it.

Active and Passive surveys

Active vs. Passive survey: the two record different things.

What a passive click does

What a passive click does: it takes a fresh scan at that exact spot rather than reusing whatever the last scan tick left behind, which takes a few seconds.

• A ring appears on the point straight away and fills as the scan runs, so you can see the click registered and how much of the wait is left. The marker replaces it when the reading lands.
• Clicking again while that ring is still filling does nothing; wait for it to finish.
• Passive capture needs a live scan running. If it is not, the app says so rather than recording a stale reading.

Read a point back

Reading a point back: with the Pointer tool, click any walk point to open every network that was heard there: SSID, BSSID, channel and signal, strongest first, with that point's own strongest reading highlighted.

This is the whole passive snapshot, not just the headline network, so you can answer "how strong was the other SSID right here?" long after the walk. Active points record only the connected network, so they show that one instead of a list.

WiFi Planning and Survey → Header: Floor ▾ / Share / Underlay

The top project bar (visible in the Planner screenshot above) holds the project controls:

The Floor ▾ menu

The menu holds Add Floor, Duplicate Floor, Delete Floor, Clear Floor, Align Floors…, Import Floor Plan and Copy to Floor.

WiFi Planning and Survey → Heatmaps & Visualization

Pick a heatmap

A Heatmap: dropdown picks the visualization mode. Only one mode renders at a time, on the same canvas.

• Signal
• SNR
• AP Overlap
• CCI (co-channel interference), weighted so an interferer on the serving AP's primary channel scores higher than one only reachable via a secondary/bonded channel.
• Roaming: colors the 2nd-best-AP grid against a roam threshold.

Best, 2nd-best and 3rd-best AP

HEATMAP SHOWS: Best AP / 2nd-Best AP / 3rd-Best AP. Plotting the 2nd or 3rd-strongest heard signal instead of just the strongest is how you judge roaming and redundancy: is there always a real fail-over AP, not just the primary?

Include Other-Floor APs folds in APs from an aligned floor above/below, weakened by that floor's own Slab Loss (dB). It requires Align Floors first.

Colors, opacity and legend

The vertical RSSI slider next to the canvas recolors the heatmap live as you drag either handle, with no regeneration needed. Opacity is set right on this panel (no separate dialog).

The color gradient offers a standard green-to-red scheme plus a colorblind-safe blue-to-orange alternative (Settings → Accessibility → Color vision).

Legend shows or hides the legend in the bar below the map, beside the zoom controls, so it never covers the floor plan. It follows the heatmap view: Signal, SNR, AP Overlap, CCI, Roaming or Data Rate. For Signal, the gear on the legend opens its settings:

Environment

Environment sets how much the space around the APs absorbs signal, on top of the walls you draw. It is saved with the project.

AP Type and AP Properties

AP Type is the model a new AP is: its bands, PHY mode, spatial streams, TX power and antenna gain. Choosing a model fills in New AP TX and Gain with its figures. Change them and every AP you place afterwards, by hand or with Auto-Place, uses your values.

In AP Properties, choosing a model applies it to that AP. TX power is the power at the antenna port, and EIRP under it is what the AP radiates: TX power plus antenna gain. A directional antenna pattern then reduces that away from where it points.

Apply to All APs copies this AP's model, radios, power, gain, height, PHY mode, streams, mounting and antenna to the other APs on the floor. Names, positions, channels and azimuth stay as they are, and new APs start from the same settings. Undo reverts it.

Readout by the cursor

With the Pointer tool, the readout by the cursor shows the predicted signal where the heatmap is drawn, for the AP rank the heatmap shows, with the strongest APs listed under it (data rate in the Data Rate view). It does not appear:

• with the heatmap off,
• outside the Prediction Area,
• below Hide below,
• or while you place or draw.

Delete a Prediction Area

The Prediction Area limits where the heatmap is drawn. A simple box around the building is enough. Every AP on the floor still counts, inside the area or not, and the heatmap never goes past the edge of the floor plan, so an area drawn around the whole plan changes nothing.

• To delete a Prediction Area, right-click inside it and choose Delete Prediction Area, or use the button shown while the Prediction Area tool is selected.
• Right-click a corner to delete only that corner.
• Undo restores either.

Auto Channel Plan

Auto Channel Plan gives every AP on the floor a channel and width on each band so that APs that hear each other well do not share spectrum. The line beside the button gives the number of overlapping pairs before and after.

• It counts the whole channel width (an 80 MHz radio on 36 also covers 40, 44 and 48).
• It uses the DFS channels on 5 GHz (52 to 144) after the others.
• When there are not enough channels to go round, it narrows the busiest APs one step at a time (80 to 40 MHz, for example) until nothing overlaps.
• 2.4 GHz has only three channels and is never narrowed.

To test the plan with AP-on-a-Stick, open the APoS tab and click Copy APs from Planner: the floor's planned APs are added to the survey as placements to test.

Coverage Circles

Coverage Circles draw two rings around each planned AP: green where its signal falls to the Good (dBm) threshold and gold where it falls to Fair (dBm). They stop at the Prediction Area, or at the edge of the floor plan when there is none, so they never spill off the plan.

WiFi Planning and Survey → Report (PDF / Word Template)

Set up a Word template

A survey project can have a Word Report Template attached: an ordinary .docx file containing tag placeholders like {{ApSummaryTable}} or {{HeatmapImage:5:Best}}.

1. Attach one when creating or editing a project. Either upload your own .docx, or click Create starter template... to generate one pre-populated with every available tag, grouped under Text / Images / Tables headings.
2. Open that in Word, delete what you don't want, and reorder and format the rest exactly as you'd like the final report to read.
3. Save it back as your template.

Export the Word report

Clicking Export ▾ → Report as Word (.docx) copies your template and replaces every tag with real data from the current survey: company/project name, calibration, floor plan and heatmap images, and the AP summary/AP placement/WiFi marker notes/speed test tables. It then prompts you for where to save the finished .docx.

Your original template file is never modified, so it's reusable across projects and future reports.

Template tags

RFMON Tab

Locks a configured SSH sensor onto one channel instead of hopping the whole band. That trades BSSID-only coverage for the chance to see which clients are actually associated to which access points.

Comes with a Pro license. Needs a sensor: a Raspberry Pi or WLAN Pi running iw, ip and tcpdump with passwordless sudo for those three binaries specifically, or an ESP32-C5 card.

Setting up a capture

1. Capture Interface: which configured sensor to capture with.
2. Frequency: 2.4, 5 or 6 GHz.
3. Channel Width: 20/40/80/160 MHz, and 320 MHz on 6 GHz. Widths the adapter does not advertise are disabled rather than offered and left to fail.
4. Channel: the grid narrows as the width widens, offering only channels that are legal primaries at that width (channel 165, for instance, has no bonding partner and disappears above 20 MHz). See the markers below.
5. Press the capture button to start.

The status area reports frames captured and confirms the lock against the radio itself, including the width actually applied. A driver quietly narrowing an 80 MHz request to 20 MHz is visible rather than silent.

Capture with an ESP32-C5 card

A board on the WiFi Scanner card firmware captures frames too, with no sensor to set up.

1. In Capture Interface, choose ESP32-C5 card (COM5) for a card on USB, or ESP32-C5 card (name, Bluetooth) for one connected over Bluetooth.
2. Choose 2.4 or 5 GHz and a channel. The card always listens 20 MHz wide and has no 6 GHz radio.
3. Press the capture button. Stopping offers to save a pcapng, as with a sensor.

The status line says which kind of capture is running: Capturing all frame types or Capturing management frames. A board that cannot capture (one on ESP-SDR, or on card firmware older than 2.3) stops straight away, and the status line says what to do. While it captures, the card stops drawing spectrum. Its trace comes back when you stop.

Clients seen this capture

A table of every client seen on the locked channel:

• MAC address and vendor;
• the BSSID it is associated to, and that AP's vendor;
• its IP address, if it is on your own LAN;
• RSSI, and when it was last seen;
• data-frame, management-frame (Mgmt Frames) and probe-request counts;
• any SSIDs it probed for.

Mgmt Frames counts the authentication, association and action frames between a client and its access point. They tie a client to its AP even when the capture holds none of its data frames, which is the usual case over Bluetooth.

The same data also populates the Scanner tab's Clients sub-tab, filtered to whichever AP is selected there.

Settings → General

Settings opens in its own window with a close button only; Esc also closes it. Drag its edges to make it larger on a small screen.

Settings → Columns

A checkbox for every WiFi column plus the Speed Test columns, organized the same way as the grid's own right-click header menu. It's just a more comfortable place to set up your default view once, rather than clicking through headers.

Added by you, at the top, lists only the columns you turned on beyond the standard set, so you can find and untick them without searching the full list. Untick one and click Save to hide it. It is hidden while you show only the standard columns.

Below them, Added from Information Elements lists the columns you added from SSID Details or the filter tree, each marked * and with a Remove button. It is hidden until you add one.

Settings → Custom Filter

Manage saved filters here instead of one at a time from the Scanner tab's Save Filter dialog:

• Enter a Name and Filter Text and click Save.
• Edit or delete existing ones from the list.
• Import/ Export Filters move a whole filter library in or out as CSV, handy for sharing a standardized set of filters across a team or multiple machines.

Settings → BSSID Notes

Annotate and classify individual access points:

1. Enter a BSSID.
2. Add an optional free-text note.
3. Pick a Classification: Unclassified, Own, Neighboring, Rogue, or Interfering.

Classification never hides or suppresses a detection (a Rogue AP's security posture is still real diagnostic signal in Copilot). It only scopes things like email alerts to your own equipment (see Alerts), and feeds the PCI Compliance / Network Health reports and the grid's Classification column.

Suggested as Yours

A "Suggested as Yours" section appears automatically, using your connection history to guess which APs you likely own. Click Mark as Own to confirm instead of typing each one manually.

Import/Export Notes works the same way as Custom Filters, as CSV.

Watch for changes

A separate Watch for changes checkbox on each note (with its own Watched column in the grid) is unrelated to Classification. Turning it on is what actually starts monitoring that BSSID for behavioral changes and raising Alerts events.

• A BSSID can be watched without being classified Own (e.g. keeping an eye on a known neighboring AP).
• It can be classified Own without being watched (e.g. equipment you don't need active alerts on).

Settings → Spectrum

Settings → Alerts

Real-time email alerts. Alerts is included with every license.

Alerts and scheduled reports have separate tabs (Alerts and Reports), each with its own recipient list and on/off switch, since not everyone who needs a periodic report also wants real-time alerts, or vice versa.

Alerts & Notifications

• Email me when high-priority Copilot alerts are detected: the master switch. Only Very High/Alert-priority findings (rogue AP, WPS enabled, etc.) trigger an email. Each distinct finding only re-sends once every 24 hours per AP, so you won't be flooded by the same issue repeatedly.
• Only email about networks classified as Own: narrows what gets emailed only. The Alerts tab in-app still shows findings for every visible network regardless.
• Recipient(s), Check Every N minutes, and Send Test Email (with inline guidance for pulling a test email out of Gmail/Outlook Spam) round out the setup.

The 24-hour re-send cooldown is persisted to disk, so an unresolved finding won't re-email right after an app restart mid-cooldown.

Settings → Reports

Report branding and the scheduled email reports.

Report Branding

Set your Company Name, Logo, Primary Color, and Contact Info once. It's applied to every generated report (and alert email) afterward.

Scheduled Reports

Five report types: AP Inventory, Security, Performance, Network Health, PCI Compliance. Each one can be:

• scheduled independently (Nd/Nh/Nm, 5 minutes to 365 days);
• sent with a PDF attached, optionally;
• sent immediately with its own Send Now button;
• saved to a file with Save As.

Every row's buttons line up in one column, and each row's status message wraps under it rather than running off the edge.

A scheduled report whose content hasn't meaningfully changed since the last send is skipped automatically. The schedule still advances, so it won't check again until the next interval. Send Now always sends regardless, since that's an explicit request.

PCI Compliance questions and CDE scope

The PCI Compliance report additionally includes eight yes/no self-attestation questions, for requirements a wireless scan alone can't verify:

• network segmentation;
• physical AP security;
• centralized logging;
• vendor defaults changed;
• and four about accounts: no shared accounts, terminated users revoked, inactive accounts disabled, vendor accounts enabled only when needed.

It also has a CDE scope checklist of which SSIDs count as part of the cardholder-data environment. Answer them once here and every generated PCI report includes your answers alongside what the scan itself detected.

The CDE scope checklist lets you pick from SSIDs currently visible in a live scan, or type one in manually to flag it as in-scope. That is useful for a network that isn't currently broadcasting or hasn't been scanned yet.

The PCI Compliance strong-signal threshold slider (default -40 dBm) is separate from the Security report's own strong-signal slider below: a non-Own AP has to clear the threshold on whichever report you're configuring.

Extra tables in the Security and Network Health reports

The Security report has these three tables beyond its findings list; the Network Health report has the two more.

Settings → Auto Save

Turns on periodic background saving of the running scan session, so you don't lose data to a crash or an accidental close.

Settings → Performance

Controls which of the 17 possible columns show in the Speed Test results grid (same show/hide pattern as the main scan grid), plus test-execution behavior. Pick one of two modes; they are mutually exclusive:

• Repeat Speed Test and wait N seconds, for continuous monitoring over time.
• Run Speed Test automatically when BSSID or SSID changes, for hands-free testing while roaming.

Local Speed Test

The same Serve as a local speed-test target checkbox and Destination Host field as Performance → Local Speed Test, bound to the exact same setting rather than a separate copy. Change it in either place and the other updates immediately.

With the target switched on, this section also shows:

• the Server port (editable, 5203 by default);
• whether the server is actually running;
• every address on this machine another device could connect to, with the one carrying the default route marked;
• the exact command to run over there, with a Copy button.

Every address is listed rather than one, because a laptop usually has several (Wi-Fi, Ethernet, a VPN, Hyper-V), and only the one on the same network as the other machine will answer.

Serving as a target keeps working without a license, so a spare machine can be left running as a speed-test target indefinitely.

Network Diagnostics

A Default Target field: the same persisted value that Performance → Network Diagnostic Tools's Target field starts with. Set your usual target (an internal server, a specific ISP hop) once instead of retyping it every time you open that tab.

Application Tests

A fully editable list of every app and endpoint Performance → Application Tests checks. It ships with 12 defaults: Microsoft 365, Google Workspace, Zoom, Slack, Salesforce, YouTube/Netflix, plus a Cloudflare baseline.

• Edit any cell directly.
• Use the blank row at the bottom to add your own endpoint (e.g. an internal server or a SaaS app not in the default list).
• Delete to remove one you don't care about.
• Changes apply on the very next test run, no restart needed.
• A Restore Defaults button next to the section header adds back any of the 12 built-in defaults that are missing from the list, without touching anything you've added or edited yourself.

Settings → Remote WiFi Scanner

Several ways to get scan/spectrum data from a machine you're not sitting at, all on one tab.

Share via Web Browser

At the very top, Share via Web Browser (Live View) → Get Link... is the one-way, no-install option. Click it for a link anyone can open in a browser to watch your live Scanner grid read-only.

Pairing (Zero-Touch)

The simplest option: no network configuration at all. Two clearly labeled sections make it unambiguous which role you're setting up:

• Share Your Scans (Sender): click Generate Pairing Code and share the short code (copy-icon button) with whoever needs to view this machine's scans.
• View a Remote Scanner's Data (Receiver): enter a code generated by another device and click Connect to view its scans here.

Connecting also auto-switches this machine's Scan Interface (toolbar) to Zero-Touch Remote WiFi Scanner, which is receiver-only from the toolbar. Generating a code to share your own scans happens here in Settings. A Disconnect button ends an active pairing session from either section.

Behind the scenes this negotiates a direct peer-to-peer connection via a signaling relay, so it works even across separate networks/NATs with no port forwarding.

Who needs a license

Only the machine that shares needs a Remote Scanner license. Viewing a share, here, on a Mac or in a browser, needs none.

If the sharing machine has a spectrum analyzer connected, its spectrum comes along. The viewer's Spectrum Graphs show the sender's trace, waterfall, average, maximum, utilization and detections, a couple of seconds behind, under the sender's analyzer name with (remote) after it. The viewer needs no analyzer and no spectrum license for this.

SSH Devices

For a known remote Linux machine (e.g. a Raspberry Pi or WLAN Pi) reachable by SSH:

1. Enter its host, port, username, adapter interface name, and either a password or an SSH private key.
2. Click Test Configuration to verify it's reachable and correctly set up before saving.

The test catches problems (wrong adapter name, missing tools) without you having to manually SSH in and troubleshoot yourself.

The saved password and private key are encrypted at rest, matching how Integration credentials are protected. Export / Import (JSON) let you move a device list to another machine deliberately, instead of relying on a raw database copy.

Settings → Integration

Connect a WLAN controller so the app knows your managed access points automatically, instead of entering every BSSID by hand in BSSID Notes. There is a row here per vendor:

Other vendors listed in this tab are not supported yet.

Sync

Once configured, Sync Now pulls the controller's full managed-AP list and auto-classifies every matching BSSID as Own in BSSID Notes. A sync status indicator shows when the last sync ran and whether it succeeded.

Credentials

The API Key and Password fields are treated as sensitive at rest. API Key shows only its last 4 characters (full value while you're actively editing it), and Password is fully masked. Both are encrypted before being written to disk, tied to this Windows user account.

Export / Import (CSV) let you move a whole set of controller configurations to another machine deliberately, without relying on a raw database copy. That is useful when standing up a new install rather than upgrading in place.

Settings → Accessibility

Appearance

The Light/Dark Theme toggle lives here, alongside the other appearance settings.

Text size

A slider (10% steps) scales text and controls across every window in the app (Scanner, Settings, Survey, and every dialog) and applies immediately, no restart required. It runs from 80% to 150%, up or down from the default.

Color vision

A single Colorblind-friendly colors checkbox swaps the colors most likely to be confused under red-green color blindness:

• The "own network" grid/graph color moves from green to blue. Red is left alone, since that's the one color that should keep meaning "alarm".
• The same swap applies to the RSSI-vs-time graph, channel graphs, and the grid's color-swatch column.
• The heatmap gains a matching blue-to-orange colorblind-safe gradient in its existing palette-cycling bar.
• Speed test markers below the minimum requirement switch from a solid to a dashed red ring, so that flag doesn't rely on color alone to read as "different."

A separate accent color picker offers six curated colors, each checked to hold readable contrast against both the light and dark themes. It is narrower than the full stock accent list, but contrast-guaranteed.

Spectrum graph labels

A separate 8 to 24pt slider controls only the size of the SSID labels drawn on the Spectrum Graphs trapezoids (2.4/5/6 GHz), independent of the whole-app Text Size setting above. Use it if you want those labels larger without scaling every other window in the app. It applies immediately to any spectrum graphs already open, no restart required.

Settings → License

On a trial, this tab shows your trial status, a box to paste in a license key, an Activate button, and a Buy Now link.

Once licensed, it shows License Type, your license key (masked; click the copy icon to copy the real key for a support ticket), and License End Date, plus two buttons:

• Refresh re-checks your license without re-entering the key. Use this after renewing, upgrading, or adding an add-on.
• Deactivate frees up this computer's license slot so you can activate it on another machine, Windows or Mac.

Your Modules below lists every add-on and whether it's active on your license. It is the one place in the app that shows the full module list.

RF Monitor and Capture (channel-lock monitor mode and client visibility; requires additional hardware like a Raspberry Pi) comes with a Pro license.

Title Bar Controls

Other windows

Only the main window minimizes and maximizes. Settings and every other window WiFi Scanner opens has a close button only.

• Esc closes it the same way.
• If a drop-down list is open, the first Esc closes the list and the next closes the window.
• In a dialog with a Cancel button, Esc presses Cancel.
• Esc in the main window keeps its own uses, such as cancelling a wall you are drawing in WiFi Planning and Survey.

WiFi Scanner / File / Help Menus

WiFi Scanner menu

• Settings: opens the settings window covered above.
• About WiFi Scanner: see below.

File menu

• Open Session: load a previously saved session (offers to save current results first). It opens sessions saved by WiFi Scanner for Mac as well, including its older .wifiscan files.
• Save Session (also Ctrl+S anywhere in the app): save the current session, including speed-test history and the spectrum recording, to a .wifi-scanner file. WiFi Scanner for Mac saves the same kind of file, so a session saved on either computer opens on the other. A saved or exported session file contains only scan data; it never includes your SSH device or Integration credentials.
• Export Scan Results as CSV → All / Displayed / Selected Rows.
• Export Scan Results as Pcap → All / Displayed / Selected Rows, saved as .pcap or .pcapng. It synthesizes a Radiotap and 802.11 beacon frame around each AP's real, captured Information Elements, so scan data can be opened directly in Wireshark or any other pcap-reading tool.
• Open pcap: import APs from a raw .pcap packet capture instead of live scanning.

Spectrum recordings

While you scan with a spectrum analyzer connected, WiFi Scanner records what the analyzer measures, and Save Session keeps the recording with the networks (up to the last 4 hours). When you open a session that has one, the Spectrum Graphs show the recording instead of a live analyzer, with a bar above the graphs:

• Play / Pause plays the recording at the chosen Speed (1x, 10x or 60x).
• Drag the position to any moment; the time beside it is when that part was recorded.

The trace, average, maximum, waterfall and detections work as they do live. Viewing a recording does not need the Spectrum Analyzer add-on or an analyzer. Start Scan goes back to live scanning.

Help menu

• Visit Support Website: opens AccessAgility's support site.
• Check for Updates…: checks for a newer version now. WiFi Scanner also checks a few seconds after it starts, unless you turn that off in Settings > General > Software Updates. It always asks before installing. Installing needs administrator rights, so Windows asks for permission, and the app closes and opens again when the update is done.

About Window

The About window has three tabs:

Prompts You'll See

"Would you like to save scanning results?"

Shown before exiting the app or starting a new scan, whenever there's unsaved data and the "always ask" preference is on (General tab).

• Save prompts for a file first.
• Don't Save discards.
• Cancel aborts the exit/new-scan entirely.

Check "Don't ask again" to silence this permanently (re-enable it later from General preferences).

"Is this your network?"

The first time you connect to a network the app hasn't seen classified before, it asks once:

• Yes, it's mine classifies it Own.
• No classifies it Neighboring.
• Not Now dismisses without classifying. The app falls back to passively scoring your connection history instead.

Either way, it won't ask again for this network.