An emergency token for one-time, highly restricted, access to an arbitrary WiFi network, while maintaining full network security and integrity, is disclosed. When an IoT medical device (IMD) detects failure in the IMD, or detects the patient having a medical emergency, IMD detects local active WiFi networks, and attempts connecting to a monitoring center through one of the networks. If the network is password protected, the connection may fail. The IMD retries the connection request using factory-installed one-time use token that is only for emergency calls only. If successful, the IMD sends an emergency message to the monitoring center, which dispatches emergency responder to the location of the IMD. Monitoring center invalidates the token with the central on-line token registrar when both the IMD and the monitoring center acknowledges that the notification is successful. A person having the proper security authorization can install a new one-time use token.