Network Security WPA2 and WPA3
WPA2 and WPA3 are the two security standards that protect Wi-Fi networks today. WPA2 has been the dominant standard since 2004. WPA3, introduced in 2018, addresses WPA2's remaining weaknesses and brings significantly stronger protections. Understanding both helps network administrators make informed decisions about their wireless infrastructure.
WPA2 — How It Works
WPA2 uses AES-CCMP encryption, which is far stronger than the RC4 cipher used in WEP and early WPA. The authentication process depends on whether the network uses Personal (PSK) or Enterprise (802.1X) mode.
WPA2 Four-Way Handshake
When a device connects to a WPA2 network, it performs a four-way handshake to derive the session encryption key without ever transmitting the actual password over the air.
WPA2 Four-Way Handshake:
Access Point (AP) Client Device
│ │
│──── Message 1: ANonce ────────────►│
│ (random number from AP) │
│ │ Client combines:
│ │ Password + ANonce + SNonce + MACs
│ │ → generates PTK (session key)
│◄─── Message 2: SNonce + MIC ───────│
│ (client's random + integrity) │
│ AP generates same PTK │
│ Verifies MIC │
│──── Message 3: GTK + MIC ─────────►│
│ (group key, confirms AP) │
│◄─── Message 4: ACK ────────────────│
│ │
│════ Encrypted data session begins ═│
The password never travels over the air. Both sides independently derive the same key using the exchanged random numbers (nonces). This is why WPA2 is resistant to passive eavesdropping — an attacker capturing the handshake cannot simply read the password from it. They must perform a computationally expensive offline dictionary attack against the captured handshake.
WPA2 Weaknesses
Weakness | Explanation
-------------------------|----------------------------------------------------
KRACK (2017) | Key reinstallation attack forces reuse of nonces
| → Patched by OS updates; patch all devices
Offline dictionary attack| Captured handshake + weak password = cracked
| → Use strong passwords (20+ random chars)
PMKID attack (2018) | Can capture auth data without full handshake
| → Same defense: strong random password
Weak PSK | "CompanyWifi1" cracked in minutes
| → Long random PSK defeats this
WPA3 — What It Fixes
WPA3 replaces the four-way handshake with SAE (Simultaneous Authentication of Equals), also called Dragonfly. SAE uses a cryptographic mechanism that prevents offline dictionary attacks even if an attacker captures the connection process.
SAE vs PSK Authentication
WPA2 PSK (vulnerable to offline attack): Attacker captures handshake → takes it home → runs dictionary attack → With GPU: tests 100 billion passwords per second → "CompanyWifi2024" cracked in seconds WPA3 SAE (offline attack not possible): Attacker captures SAE exchange → tries offline attack → Cannot perform offline test (SAE design prevents it) → Must interact with AP for every guess (locked out after failures)
WPA3 Forward Secrecy
WPA3 Personal provides forward secrecy. Even if someone discovers the Wi-Fi password later, they cannot decrypt traffic captured in the past. Each session uses a unique derived key that is discarded after the session ends.
WPA3 Forward Secrecy: Session 1: Key A (used, then discarded) Session 2: Key B (used, then discarded) Session 3: Key C (used, then discarded) Attacker captures all three sessions. Later obtains the Wi-Fi password. → Cannot derive Key A, B, or C → all sessions remain encrypted. WPA2 without forward secrecy: Attacker captures sessions → later obtains password → decrypts everything.
WPA3-Enterprise with 192-Bit Mode
WPA3-Enterprise adds an optional 192-bit security mode for high-security environments like government, finance, and healthcare. It uses a suite of stronger algorithms for every part of the connection (GCMP-256 encryption, HMAC-SHA-384 authentication, ECDH/ECDSA-384 key exchange).
OWE — Opportunistic Wireless Encryption
WPA3 introduces OWE for open networks (like café Wi-Fi with no password). OWE encrypts each user's traffic individually without requiring a password. Before OWE, an attacker on an open network could read every other user's unencrypted traffic. With OWE, the traffic is encrypted even though no authentication takes place.
Open Network WITHOUT OWE: All traffic on the network is visible to every connected device. Open Network WITH OWE (WPA3): [User A traffic] ── encrypted with key unique to User A ──► [AP] [User B traffic] ── encrypted with key unique to User B ──► [AP] User B cannot read User A's traffic even though both are connected openly.
Migration from WPA2 to WPA3
Step | Notes --------------------------------------|------------------------------------------ Enable WPA3 on new access points | Most APs since 2020 support WPA3 Use WPA2/WPA3 transition mode | Allows older WPA2 devices to still connect Update device drivers and firmware | Many devices get WPA3 via software update Set target date to drop WPA2 entirely | As WPA2-only devices retire Monitor for rogue WPA2-only APs | Attackers may try to force downgrades
WPA3 is not a wholesale replacement yet — billions of WPA2-only devices still exist. Transition mode lets organizations move toward WPA3 without stranding older hardware. New deployments should configure WPA3 from day one with WPA2 as a fallback, and plan to remove the fallback as the device fleet matures.