Systems and methods are provided for cloud controlled secure Bluetooth pairing for network device management. A method for a mobile device includes sending a Bluetooth pairing request to a network device that cannot connect to a network, wherein the network device responds to the Bluetooth pairing request by sending a challenge token; responsive to receiving the challenge token from the network device, sending the challenge token to a server, wherein the server responds to the challenge token by sending a response token, wherein the response token comprises a secure Bluetooth pairing key; and responsive to receiving the response token from the server, establishing a secure Bluetooth connection with the network device, comprising pairing with the network device using the secure pairing key.