WPA3 is the newest WiFi security protocol and the one you should use if your router and devices support it. It fixes structural weaknesses in WPA2 that have existed for years. But WPA2 is not dead - here is what changed and how to choose for a real home full of mixed-age devices.

A quick history

WEP and the original WPA are both obsolete and insecure - never use them. WPA2, introduced in 2004, became the standard for nearly two decades. WPA3 is its successor, designed to close WPA2's known gaps.

What WPA3 actually improves

  • SAE (Simultaneous Authentication of Equals): replaces WPA2's four-way handshake. Even if an attacker captures the handshake, they cannot take it away and brute-force your password offline - the single biggest practical weakness in WPA2-Personal.
  • Individualized encryption: each device's traffic is encrypted with its own key, so one device cannot easily snoop on another on the same network.
  • Enhanced Open (OWE): encrypts traffic on open/password-free networks (like a guest network), eliminating passive eavesdropping without requiring a shared password.

Is WPA2 obsolete?

No. WPA2 with AES is still strong when paired with a long, unique passphrase. The reason WPA2 gets cracked in the news is almost always a weak password, not a flaw in the encryption itself. Its real limitation is the offline-attack exposure that WPA3's SAE removes.

The right setting for a mixed-device home

Many older gadgets - smart plugs, older cameras, budget IoT devices - do not support WPA3 and may fail to connect to a WPA3-only network. Two good approaches:

  • Easiest: set your router to WPA2/WPA3 mixed (transition) mode, which lets new devices use WPA3 while old ones fall back to WPA2.
  • Most secure: run WPA3 on your main network and put legacy WPA2-only devices on a separate guest or IoT network. That isolates older, less-trusted hardware so a compromised device cannot reach your computers and phones.

How to change your security mode

The setting lives in your router's wireless security section. When you change your WiFi password, you will usually see the encryption mode right next to it - pick WPA3 or WPA2/WPA3 mixed there. A strong passphrase still matters; see your network security key.

Security beyond the protocol

Encryption is one layer. For the full picture - admin passwords, firmware updates, guest isolation, and more - see the best home network security plan. Note that MAC address filtering is a weak add-on, not a substitute for strong WPA3/WPA2 encryption.