WPA2PSK

WPA2-PSK (Wi-Fi Protected Access 2 – Pre-Shared Key) is a security protocol used to protect wireless networks, commonly found in homes and small offices. It is the personal version of WPA2, defined as part of the 802.11i standard, and relies on a single pre-shared key for initial authentication.

In WPA2-PSK, devices connect to a wireless network by performing a four-way handshake between the access point and the client. This process uses the PSK and the network’s SSID to derive unique encryption keys for each session. The resulting keys are used with AES-CCMP to provide data confidentiality and integrity. The PSK itself is not transmitted over the air.

Security considerations for WPA2-PSK center on the strength and secrecy of the shared key. A weak or easily guessed passphrase is vulnerable to offline dictionary attacks, potentially enabling unauthorized access. Because all clients use the same PSK, compromising the key exposes the entire network. WPA2-PSK does not provide per-user authentication or centralized management, which is a limitation for larger deployments. The protocol also faced widely publicized vulnerabilities in the past (notably KRACK in 2017), leading to widespread firmware updates; these issues emphasize the importance of timely patches.

Best practices include using a long, random passphrase (ideally 12–20+ characters with a mix of letters, numbers, and symbols), disabling WPS, and keeping router firmware up to date. For networks requiring stronger authentication, WPA2-Enterprise with a RADIUS server is preferred, or migrating to WPA3-SAE where supported. In general, WPA2-PSK remains well-supported and suitable for small-scale networks when combined with strong credential hygiene.