Ravindra BagaleCourses & study guides मराठी Track your progress

25. Wireless Security

25.1 Wi-Fi Security Standards

By Last updated:

Wi-Fi chi suraksha varshanuvarshe sudharat geli, karan june standards todle gele.

Standard Introduced (approx.) Status Note
WEP 1999 Broken Crackable in minutes; never use
WPA 2003 Weak A stopgap over WEP hardware
WPA2 2004 Common Strong with a good passphrase; AES-CCMP
WPA3 2018 Best Resists offline cracking (SAE); use if your devices support it

Home Wi-Fi usually uses a pre-shared key (PSK) – the passphrase everyone types. Companies use WPA2/WPA3-Enterprise, where each user logs in with their own credentials through a RADIUS server (no shared password).

Ravindra Bagale's Tip

If your router still shows "WEP" or "WPA", switch to WPA2 or WPA3 right away. WEP can be broken in a few minutes – it is not security, only an illusion of it. And choose pure WPA2/WPA3 rather than "mixed WPA/WPA2".

Practice task

Log in to your own home router's admin page and note which Wi-Fi security it uses. In your notes, write whether it should be upgraded and to what.

Choosing Wi-Fi security for home and office

Standards evolved because older ones were broken. Use WPA3 where you can, WPA2-AES as a minimum. Avoid open networks for private work. Avoid WEP entirely.

Example: Indian office (sample)

A 40-person Pune office uses WPA2-Enterprise with individual logins (RADIUS), a separate guest network that cannot reach internal servers, and WPA3 on new access points. Guests get internet only.

Home tip

Change the default router admin password, turn off WPS, and keep router firmware updated. Airtel, Jio and ACT routers all have admin pages; treat them like servers.

Global

Public Wi-Fi at airports is convenient. Use your phone's VPN or mobile data for banking.

Recap

  • WPA3 > WPA2-AES > everything else.
  • Guest Wi-Fi must not reach work systems.

Defender's worksheet (do this today)

  1. Write the lesson title and date in your notebook.
  2. List three systems you own (VMs, personal projects, or lab apps) where this lesson applies.
  3. Run one safe command or checklist item from the lesson on a lab system only.
  4. Paste the command and its output under an Evidence heading.
  5. Write one fix you would give a teammate in two sentences.
  6. Write one mistake students make with this topic and how to avoid it.

More real-world pictures

Indian workplace (sample data)

Suppose we are a junior analyst at Tech Mahindra supporting a client SOC. After reading this lesson you add one detection or one hardening item to the team weekly checklist, with the owner name and a due date. That is how learning becomes operations.

Global practice

Public bodies such as CERT-In (India), CISA (US) and NCSC (UK) publish advisories that map to the same ideas: patch, least privilege, logging and user awareness. Bookmark one advisory feed and read it every Monday.

Home and family

Explain this lesson to a family member in four sentences without jargon. If they can repeat the main warning back to you, you understand it well enough to teach.

Connect to earlier chapters

Parts 1 to 9 built Linux, web servers, databases and cloud pieces. This lesson only makes sense when you can point to a concrete config file, package name or architecture box from those parts. If you cannot, revisit the matching earlier chapter before you practise any tool command.

Common mistakes

  • Skipping written permission just for a quick scan.
  • Practising on hostel or office Wi-Fi targets without authorisation.
  • Collecting tool output without writing the fix.
  • Copying exploit commands onto production to verify. Verification for defenders means checking versions and patches, not firing modules.

Recap

  • Evidence, fix, owner, date.
  • Own lab only.
  • Teach one other person the warning from this lesson.