WPA3 (Wi-Fi Protected Access 3)

What It Means

Wi-Fi Protected Access 3 (WPA3) is the Wi-Fi Alliance's third-generation Wi-Fi security protocol, ratified in 2018 and required for Wi-Fi 6 certification since 2020. WPA3 replaces WPA2, which had been the standard since 2004 and was shown to have significant vulnerabilities in 2017 via the KRACK attack. WPA3 introduces three major improvements over WPA2-Personal: Simultaneous Authentication of Equals (SAE) replaces the 4-way handshake used in WPA2, preventing offline dictionary attacks on the Wi-Fi password, forward secrecy means that even if a password is compromised in the future, previously captured traffic cannot be decrypted retroactively, and stronger 192-bit encryption for enterprise deployments (WPA3-Enterprise). WPA3 also mandates Protected Management Frames (PMF), which prevents the deauthentication attack used by aircrack-ng and other Wi-Fi hacking tools to disconnect legitimate clients from the network. Most consumer routers sold since 2020 support WPA3, but many default to WPA2 or a hybrid WPA2/WPA3 mode for backward compatibility with older client devices (pre-2019 phones and IoT devices typically do not support WPA3). Nest, Ring, and many smart home devices only support WPA2. When using WPA3, choose a strong Wi-Fi password even though brute-force attacks are harder, because local privilege escalation attacks (a compromised device on the network) remain a threat. WPA3 does not affect internet speed but materially improves home network security, especially important for smart home devices with known firmware vulnerabilities. The Broadband Grade does not measure Wi-Fi security but flags it in home network best-practice guidance.

Frequently Asked Questions