Orbi WiFi 7 RBE973
Reply

Weak Security

j3trooper
Guide

Weak Security

I am getting a message informing me of weak security (WPA)

"If this is your Wi-Fi network, configure the router to use WPA2/WPA3 Personal (AES) security type for this network"

In Netgear Genie my wireless network is listed with the Security enabled (WPA2-PSK)

and the same on my 5G network.

It is on the highest security option availalve. WPA3 is not displayed as an option.

My router has the latest firmware.

 

Should I be concerned or should I just ignore the message?

 

Message 1 of 12

Accepted Solutions
microchip8
Master

Re: Weak Security

Use WPA2-PSK [AES] only

View solution in original post

Message 7 of 12

All Replies

Re: Weak Security


@j3trooper wrote:

I am getting a message informing me of weak security (WPA)

 


Message from what?

 


@j3trooper wrote:

 

Should I be concerned or should I just ignore the message?

 


Hard to know without some idea of where this message comes from. Browser? Firewall? Security software?

 

 

Message 2 of 12
j3trooper
Guide

Re: Weak Security

 

Thanks for your reply.

 

Not the browser. It is shown on my iMac desktop in the top right hand corner when I click on the Wi-Fi icon.

 

It also displays on my Windows 10 laptop.

Message 3 of 12

Re: Weak Security

Down to your operating system then.

 

It is up to you which you believe, that or your router.

 

This is where to read about Netgear's security:

 

Security Advisory | About Us | NETGEAR

 

 

Message 4 of 12
antinode
Guru

Re: Weak Security

> In Netgear Genie my wireless network is listed with the Security
> enabled (WPA2-PSK)
> and the same on my 5G network.

 

   Has your router a model number?  Look for "Model" on the product
label.  Firmware version?

 

> My router has the latest firmware.

 

   As always, an actual version number would be more useful than your
opinion of what's "latest" today.

 

   What are the actual security options available?  Exact text --
copy+paste is your friend.  Which one(s) did you choose?

 

   Note: "WPA-PSK [TKIP] + WPA2-PSK [AES]" is not "WPA2-PSK".

 

> Should I be concerned or should I just ignore the message?

 

   Assuming that the message is accurate, and you are allowing
(plain-old) WPA, not only WPA2, then there's a reason for that warning.

WPA is less secure than WPA2 (or WPA3).

 


> Down to your operating system then.

 

   Both of it.  I know nothing, but I'd guess that macOS (unknown
version) and Windows 10 (unknown version) would not both be wrong about
this.  But what do I know?

Message 5 of 12
j3trooper
Guide

Re: Weak Security

Model is Nighthawk X4S D7800

Firmware Version V1.0.1.60

Security Options
None 
WPA2-PSK [AES]
WPA-PSK [TKIP] + WPA2-PSK [AES]
WPA/WPA2 Enterprise

 

Bold is selected for both 2.4GHz & 5GHz

Wireless Network (2.4GHz b/g/n)
Enable SSID Broadcast
Enable 20/40 MHz Coexistence

Both are enabled

 

Mac OS Big sur 11.3.1

 

 

Message 6 of 12
microchip8
Master

Re: Weak Security

Use WPA2-PSK [AES] only

Message 7 of 12
j3trooper
Guide

Re: Weak Security

Thanks for all the replies.

I did look at changing the setting to that previously but got the message that it could slow down the data transmission. Have now changed to that setting and hoping that the message was just a generic message.

Thanks

Pev

Message 8 of 12

Re: Weak Security

Clearly something is throwing up those error messages.

 

Several people seem to think it has something to do with their macOS:

 

WPA is not considered secure. Learn More.… - Apple Community

 

(1) My Apple Products Have Problem with the Wifi : techsupport

 

macOS connect to ESP32 Weak Security (WPA) - ESP32 Forum

 

And I see no sign of any Netgear devices being involved in those conversations.

 

Here is a quote from one of those message:

 

iOS13 didn't show warning if we use WPA2(TKIP). Only after the iOS14 update, they marked WPA2(TKIP) as unsafe. Only WPA2(AES) or WPA3 are considered as safe.

 

I have security at WPA2-PSK [AES] 

 

If you check the manual for your D7800, you will read: "This option is the default setting." It goes on to say "WPA-PSK [TKIP] is less secure than WPA2-PSK [AES] and limits the speed of WiFi devices to 54 Mbps."

Is there any reason why you picked "WPA-PSK [TKIP] + WPA2-PSK [AES]"?

 

It would seem that your original idea that "It is on the highest security option available." is a bit wide of the mark.

 

Why not try the default option again? Maybe the message will go away.

 

By the way, if you have issues with the D7800, you might have more luck in the section given over to DSL modem/routers.

 

DSL Modems & Routers

Message 9 of 12
j3trooper
Guide

Re: Weak Security

Thanks for the information.

I can't remember chosing that setting, I think it may have just been the default setting.

It is now set on  WPA2-PSK [AES]

Although I bought the Nighthawk Router a few years ago, it has been boxed up for some time as it wasn't compatible to use when I had Sky as my broadband provider.

I will use the other Forum section next time.

Thanks again for your help

Message 10 of 12

Re: Weak Security


@j3trooper wrote:

 

I can't remember chosing that setting, I think it may have just been the default setting.

According to the manual WPA2-PSK [AES] is the default.

 

Do you still see the warnings?

 

@j3trooper wrote:

Although I bought the Nighthawk Router a few years ago, it has been boxed up for some time as it wasn't compatible to use when I had Sky as my broadband provider.

Sky is one of those ISPs that likes to supply some modem/routers that you cannot put into modem only (bridge) mode.

 

In those circumstances, people sometimes use a router in access point (AP) mode. This usually has the advantage of better wifi.

 

 

 

 

Message 11 of 12
cfNet
Initiate

Re: Weak Security

Fun Fact:

 

IF you use an Insight Managed device, it is impossible to have WPA2 Enterprise with AES because the Insight interface does not support configuring that setting.  In this case, you would have to unmanage the router, and set the AES in the local router interface.  IF you ever manage that router with Insight again, it will overwrite your AES with Mixed Mode/TKIP.

 

 

Message 12 of 12
Top Contributors
Discussion stats
  • 11 replies
  • 11830 views
  • 3 kudos
  • 5 in conversation
Announcements

Orbi WiFi 7