Skip to content

Expert · Deeper lab skills: passwords, privilege, Metasploit, wireless · topic 28 of 35 · 16 min

Wireless security concepts

Explanation

Wi-Fi security has improved from the broken WEP to WPA2 and WPA3. You learn why old encryption is unsafe, what makes a network strong, and the common attacks in concept — and you only ever test your own network. The defences are strong encryption, strong passphrases and up-to-date equipment.

Why wireless needs its own thinking

Wi-Fi sends data through the air, so anyone nearby can capture the signal. Encryption is what stops them reading it. Over the years the standards have improved as older ones were broken. Understanding this history explains why some networks are safe and others are not.

StandardStatus
WEPBroken long ago; never use it
WPAOld and weak; avoid
WPA2Still common; strong with a long passphrase
WPA3Current; best protection, use where supported

Common attack ideas (concept only)

In concept, attacks on Wi-Fi include: capturing the handshake when a device connects and then trying to crack a weak passphrase offline; setting up a fake access point ("evil twin") to trick devices into connecting; and de-authentication, which knocks devices off to force a reconnect. You study these to defend against them, and you only ever test your own equipment.

Think of it like this: Wi-Fi is like talking across a crowded room. WEP is whispering in a code everyone has already broken. WPA3 is speaking in a strong, modern code. A fake access point is an impostor who sets up a booth with your network's name hoping you talk to them instead.

Detection and defence

  • Use WPA3 where possible, or WPA2 with a long, random passphrase (a short one can be cracked offline).
  • Change default router admin passwords and keep firmware updated.
  • For organisations, use enterprise authentication (each user has their own credentials) rather than one shared key.
  • Detection: wireless intrusion detection can spot rogue/evil-twin access points and de-authentication floods; watch for unknown access points broadcasting your network name.
Careful: Only test wireless security on your own network and equipment. Capturing or interfering with other people's Wi-Fi — including a neighbour's or a cafe's — is illegal. The goal here is to secure your own network and understand the risks, not to attack anyone.

Need help?

Stuck on a word or an idea? Search this course, or every course, and jump straight to the explanation or a worked question.

Try:

Watch the lesson

Wireless security concepts · 1/7

Air = anyone can listen

Wi-Fi travels through the air, so encryption is what keeps it private.

Prefer a video by a teacher? Find free videos on “wifi security wep wpa2 wpa3 explained defence” on YouTube ↗

In real life: Securing a home router

A learner checks his own home router and finds it set to WPA2 with a short, guessable passphrase and the default admin password. Using what he learned, he switches to WPA3 (supported by his router), sets a long random passphrase, changes the admin password and updates the firmware. He has not attacked anyone; he has used attacker knowledge to make his own network far harder to crack — which is exactly the point of the topic.

Practice (0/3 done)

Task 1 · Question

Which Wi-Fi standard should never be used today?

Task 2 · Question

An "evil twin" attack uses…

Task 3 · Practice

Write a checklist to secure a home or small-office Wi-Fi network using this topic.

Quick quiz

Question 1

1.The best current Wi-Fi protection is…

Question 2

2.A long, random passphrase matters because a short one can be…

Question 3

3.A de-authentication attack aims to…

Question 4

4.You may test wireless attacks on…

Read more (free)

Open a question to see the answer and why. The first ones are this topic's own quiz, so try the quiz above before you peek.

The best current Wi-Fi protection is…

Answer: WPA3

WPA3 offers the strongest protection where supported.

A long, random passphrase matters because a short one can be…

Answer: Cracked offline after a handshake capture

Short passphrases fall quickly to offline cracking.

A de-authentication attack aims to…

Answer: Knock devices off so they reconnect

It forces reconnects, often to capture a handshake or push an evil twin.

You may test wireless attacks on…

Answer: Only your own network and equipment

Only your own equipment; others are illegal to test.

Which encryption does WPA2 use?Related

Answer: AES-CCMP

WPA2 uses AES with CCMP.

From Wi-Fi security: WPA2, WPA3 and guest networks

What is the best response when you do not know an answer?Related

Answer: Say you are not sure and reason aloud from what you know

Interviewers value honest reasoning.

From Core concept questions

What does a wireless LAN controller do?Related

Answer: Centrally manages many lightweight access points

A WLC pushes configuration to APs and handles roaming.

From Network devices

The main defence against privilege escalation is…Related

Answer: Least privilege and patching

Good hygiene closes most escalation paths.

From Privilege escalation concepts (labs only)

Pass the quiz (60% or more) or mark this topic as done when you are ready.

Your progress is saved on this device only.

Next: Post-exploitation ethics: what to do once you are in →

Next steps

  1. This is the last topic of “Deeper lab skills: passwords, privilege, Metasploit, wireless”. The module exam comes next.
  2. Module 8 exam: deeper lab skills · 12 questions · 20 min, without help. 4 topics of this module still to finish first.
  3. Then the next module, Post-exploitation ethics and reporting. 35 topics left in the course before the final exam.

← Previous: Metasploit basics (in the lab)