Cybersecurity · Intermediate level

Intermediate level · Module 1: Network Security Fundamentals · Lesson 2 of 3

Securing Wi-Fi

Configure wireless networks that resist eavesdropping and misuse.

In this lesson you will

  • Choose secure Wi-Fi settings
  • Secure router administration

Key concepts

WPA3 and WPA2-AESstrong passphrasesWPSfirmware updates

The lesson

Use WPA3, or WPA2 with AES where devices do not support WPA3. Avoid WEP and WPA-TKIP, which are broken.

Use a long Wi-Fi passphrase, disable WPS, change the default admin password and update the router firmware.

Manage the router only from inside the network, and turn off remote management unless it is truly needed and protected.

Step by step

  1. Check the lab router's security mode.
  2. Set a strong passphrase.
  3. Disable WPS and remote management.
  4. Update the firmware.

Practice activity

Secure the lab router's Wi-Fi and administration settings.

Expected result: A router with secure Wi-Fi and protected administration.

Check your understanding

  1. Which Wi-Fi security modes should be avoided?

    Show answer

    WEP and WPA-TKIP.

  2. Why change the router's default admin password?

    Show answer

    Default passwords are published and easy to guess.

Taught live by an instructor — online or in person. Free course lessons are for self-study and do not lead to a certificate — see registration options.