NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Larry75
Sep 03, 2022Aspirant
best wifi encryption?
Hello everyone. What is the strongest encryption for WiFi and why? Please site a source for your statement. Thank you. WPA2-PSK (AES) WPA-PSK (TKIP) + WPA2-PSK (AES) WPA/WPA2 Enterprise WPA...
plemans
Sep 04, 2022Guru - Experienced User
both have vulnerabilities currently. I'd say wpa3 is more secure as there's more tools for cracking wpa2 password currently so the general masses know more about them but there's tools for both.
But more importantly is just choosing a smart password for your network.
Many times its simple guesses that get people access to networks or even not having a password at all.
Its just like at a home, you can't make it fully 100% safe from robbers but you can do your best to dissuade the general public and make it hard enough that it isn't worth their time.
schumaku
Sep 04, 2022Guru - Experienced User
The only reason to operate mixed mode like WPA2-PSK(AES) + WPA3-Personal would be to continue clients not capable for operating WPA3-Personal clients, or having interoperability issues limitations.
- Larry75Sep 04, 2022Aspirant
Thanks for your reply's.I already use a large password, over 40 characters.
Security researchers recommend WPA2-PSK (AES) with a long password. WPA3-Personal does not seem to be recommended.Does using WPA2-PSK(AES) + WPA3-Personal provide stronger encryption compared to just using WPA2-PSK(AES)?
Say a person was close to my router (outside a building) snooping my WiFi signals in transit to it's final destination, they would only be getting encrypted data. Question is, does using two protocols make it stronger than using one?
- schumakuSep 05, 2022Guru - Experienced User
Larry75 wrote:
Security researchers recommend WPA2-PSK (AES) with a long password. WPA3-Personal does not seem to be recommended.
Get some more readings and study - WPA3-Personal is lightyears ahead, look into Simultaneous Authentication of Equals (SAE) method.
Even the Opportunistic Wireless Encryption (OWE, Enhanced Open) - without the need for knowing a password (where no access restrictions need to be applied) - does provide the same protection like WPA3 over the air.
Larry75 wrote:
Does using WPA2-PSK(AES) + WPA3-Personal provide stronger encryption compared to just using WPA2-PSK(AES)?
Nope, the "+" notation isn't a mathematic "feature additions". This is to allow WPA2-Personal clients to operate along the WPA3-Personal clients.
- Larry75Sep 05, 2022Aspirant
Thanks for your reply.
Basically, you are telling the best wifi security option is WPA3-Personal with a really long password?
You also say
WPA2-PSK(AES) + WPA3-Personal (in that configuration) is designed for compatibility, not for enhanced security? Do you have source on that statement, I wish to further read upon it.
Thanks.