Quiz: test your knowledge

WPA3-SAE replaces the old PSK handshake with SAE, which blocks the offline dictionary attacks that still threaten WPA2.

Every extra character roughly multiplies the cracking time by the size of the character pool. A 20-character random key beats any 'clever' 10-character one.

Modern attackers try tens of billions of WPA2 guesses per second. 8 characters falls in hours; 16+ pushes it to centuries.

Slack, email, and sticky notes are all permanent leaks. A team vault lets you share access by group and revoke it instantly when someone leaves.

Hidden networks are easily found by any sniffer, and your devices broadcast the name everywhere they go looking for it.

Rotation contains leaks you may not know about yet. Trigger it on offboarding, lost devices, or contractor handoffs, not on a fixed weekly schedule.

Untrusted IoT belongs on its own SSID with client isolation, so a compromised smart bulb can't reach your file server.

WPS PIN mode has well-known vulnerabilities that bypass even a strong WiFi password. Turn it off.