If your devices all support WPA3, go for it. There's a good chance older things won't.
this post was submitted on 27 Aug 2024
17 points (87.0% liked)
Cybersecurity
5758 readers
102 users here now
c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.
THE RULES
Instance Rules
- Be respectful. Everyone should feel welcome here.
- No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
- No Ads / Spamming.
- No pornography.
Community Rules
- Idk, keep it semi-professional?
- Nothing illegal. We're all ethical here.
- Rules will be added/redefined as necessary.
If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.
Learn about hacking
Other security-related communities [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
Notable mention to [email protected]
founded 1 year ago
MODERATORS
Most routers include backwards compatibility with WPA2 as a fallback, while newer devices will use WPA3. Should be relatively seamless
The drawback is that evildoers can still attack the WPA2 handshakes and can force devices to downgrade, so you’re still getting effectively WPA2 level security until you actually turn off WPA2.
But if it doesn’t cost you anything, you can just turn it on and make their life just s little bit harder.
Maybe vlan or DMZ a wpa2 network and use wpa3 with no fallback to wpa2 on the main/lan network?
In my case that would mean that over 70% would be in the DMZ... It would be the main network
Yeah but as long as important data is not able to be accessed via the wpa2 network then you are all good.
When I put my network on wpa3/2 mode my Xbox would not longer connect.
Use Ethernet it'll connect no matter what wireless security you have enabled
Yeah, it's on my list to run some Ethernet from my basement to the attic. Right now I have one wire running up the outside of the wall to the AP.
Don't be afraid to add extra APs or switches if necessary
Admittedly it was a few years ago since I last tried, but even in WPA2 compatibility mode I had no end of trouble either getting things to join in the first place or weird stability issues afterwards.
Maybe things have improved now, but when 2 "just works" and is good enough for most use cases I've been reluctant to try 3 again.
Technically, the "best" option would be to VLAN the WiFi network separately from a wired network where all the important devices are connected.
But honestly, for normal people, that's over the top. Try WPA3 first and see if you have any devices that won't work over it. If you run into issues, swap over to WPA2. I generally say start stricter and loosen the metaphorical belt only as necessary.
WPA2 is just fine TBH. Use what works with all the devices you own heh heh
I'm not so sure about this, KRACK was way back in '17
It sorta depends on your physical security. If you live in a town, then sure, you can't know who's eavesdropping. But if you park in my yard, several hundred meters from the nearest public road, then I think we'd notice before you could do any damage.
Yeah thats full answer for OP, since nobody mentioned it thought I'd chime in