Is wpa3 reccomended on a home network?
from yokonzo@lemmy.world to cybersecurity@sh.itjust.works on 27 Aug 2024 03:52
https://lemmy.world/post/19095601
from yokonzo@lemmy.world to cybersecurity@sh.itjust.works on 27 Aug 2024 03:52
https://lemmy.world/post/19095601
It seems i have the option but i have a vague memory of someone telling me not to bother with it unless i had a good reason
threaded - newest
WPA2 is just fine TBH. Use what works with all the devices you own heh heh
I’m not so sure about this, KRACK was way back in '17
It sorta depends on your physical security. If you live in a town, then sure, you can’t know who’s eavesdropping. But if you park in my yard, several hundred meters from the nearest public road, then I think we’d notice before you could do any damage.
Yeah thats full answer for OP, since nobody mentioned it thought I’d chime in
If your devices all support WPA3, go for it. There’s a good chance older things won’t.
Most routers include backwards compatibility with WPA2 as a fallback, while newer devices will use WPA3. Should be relatively seamless
The drawback is that evildoers can still attack the WPA2 handshakes and can force devices to downgrade, so you’re still getting effectively WPA2 level security until you actually turn off WPA2.
But if it doesn’t cost you anything, you can just turn it on and make their life just s little bit harder.
Maybe vlan or DMZ a wpa2 network and use wpa3 with no fallback to wpa2 on the main/lan network?
In my case that would mean that over 70% would be in the DMZ… It would be the main network
Yeah but as long as important data is not able to be accessed via the wpa2 network then you are all good.
When I put my network on wpa3/2 mode my Xbox would not longer connect.
Use Ethernet it’ll connect no matter what wireless security you have enabled
Yeah, it’s on my list to run some Ethernet from my basement to the attic. Right now I have one wire running up the outside of the wall to the AP.
Don’t be afraid to add extra APs or switches if necessary
Admittedly it was a few years ago since I last tried, but even in WPA2 compatibility mode I had no end of trouble either getting things to join in the first place or weird stability issues afterwards.
Maybe things have improved now, but when 2 “just works” and is good enough for most use cases I’ve been reluctant to try 3 again.
Technically, the “best” option would be to VLAN the WiFi network separately from a wired network where all the important devices are connected.
But honestly, for normal people, that’s over the top. Try WPA3 first and see if you have any devices that won’t work over it. If you run into issues, swap over to WPA2. I generally say start stricter and loosen the metaphorical belt only as necessary.