As wireless speeds approach those of wired connections, businesses are increasingly opting for the convenience of wireless networks and hybrid connections. Consequently, wireless security is more critical than ever. The ability to turn on a device, connect, and move freely without being tethered to one location is appealing. However, wireless networks lack the physical security that wired connections offer. The primary threat to businesses using wireless connections is eavesdropping, unauthorised access, and data theft.

Wireless Protected Access (WPA2) has been the standard for wireless security since 2004, providing Advanced Encryption Standard (AES) encryption. While it remains relatively secure, numerous vulnerabilities and limitations have been identified over the years.

WPA3 introduces several security enhancements and design improvements. It continues to use AES encryption, now with 128-bit AES for personal networks and 192-bit encryption for Enterprise networks, and introduces Forward Security for all transmitted data. This means that even if a hacker captures encrypted wireless packets, they cannot be decrypted and read.

Additionally, WPA3 replaces ‘pre-shared key’ (PSK) with ‘Simultaneous Authentication of Equals’ (SAE), as PSK has contributed to several vulnerabilities in WPA and WPA2. SAE protects against brute-force attempts to discover the wireless key.

WPA3 also features a new open and secure connection mode called ‘Opportunistic Wireless Encryption’ (OWE), allowing clients to connect without a password. This is particularly useful for hotspot networks, where the connection between the two points is dynamically encrypted.

Draytek offers a range of products that support the Wi-Fi Protected Access (WPA3) standard.