Home | Discover and Learn | Security

Security

Wi-Fi CERTIFIED devices implement the latest in security technology - Wi-Fi Protected Access 2 (WPA2). A Wi-Fi network using WPA2 is both secure (you can control who connects to your network) and private (the transmissions across your network cannot be read by others). The security level of a home network is determined by the least capable device - for maximum security your network should include only devices capable of WPA2.

Most Wi-Fi equipment is shipped with security disabled to make it very easy to set up your network. Most access points, routers, and gateways are shipped with a default network name (SSID), and administrative credentials (username and password) to make configuration as simple as possible. These default settings should be changed as soon as you set up your network.

Download our white paper, "The State of Wi-Fi® Security".

Securing your Network

Here are the steps you can take to secure your home network:

Gateway

  • Change the network name (SSID) from the default name.
  • Change the administrative credentials (username and password) that control the configuration settings of your Access Point/Router/Gateway.
  • Enable WPA2-Personal (aka WPA2-PSK) with AES encryption.
  • Create a network passphrase that meets recommended guidelines. (link to passphrase quality)

Client devices.

  • Enable WPA2 security features on your client device and enter the passphrase for your network.

Passphrase Quality & Lifespan

A secure network passphrase greatly enhances network security, so it is a good investment of time to select an effective passphrase. In general, increasing length, complexity and randomness all improve the quality of a passphrase. We recommend that your passphrase is at least 8 characters long, and includes a mixture of upper and lower case letters and symbols. Your passphrase should not contain a word found in a dictionary and should not include personal information (identification number, name, address, etc).

Periodically changing the passphrase on your network also increases security.

 Effective passphrases

 Ineffective passphrases

 FJ45od$#

 JohnDoe123

 %GkdR#$43

 543Main

 

Security Made Easy: Wi-Fi Protected Setup

The skill level and time required to protect a Wi-Fi network depends on the complexity of the network. A home user installing a simple, new network and configuring it for security can expect to spend 5 to 15 minutes on the task.

Wi-Fi Protected Setup is an optional feature that simplifies and standardizes the process of configuring and securing a Wi-Fi network. It configures the network name (SSID) and WPA2 security for the gateway and client devices on a network and makes adding a new device to your network as easy as pushing a button, touching two devices together or entering a personal information number (PIN). Products certified for Wi-Fi Protected Setup are available at major electronics retailers and display this logo on their packaging.  

Wi-Fi Security Away From Home

Once users have experienced the convenience and freedom of working wirelessly, they want to take their Wi-Fi on the road. Here are some tips for securing your Wi-Fi devices when using them away from your home network.

  • Enable WPA2 security: All of your Wi-Fi client devices (laptops, handsets, and other Wi-Fi enabled products) should use WPA2.
  • Configure to approve new connections: Many devices are set by default to sense and automatically connect to any available wireless signal. Configuring your client device to request approval before connecting allows gives you greater control over your connections.
  • Disable sharing: Your Wi-Fi enabled devices may automatically enable themselves to sharing / connecting with other devices when attaching to a wireless network. File and printer sharing may be common in business and home networks, but you should avoid this in a public network such as a hotel, restaurant, or airport hotspot