WPA2 vs WPA3: Wi-Fi Security Compared

What Are WPA2 and WPA3?

WPA2 and WPA3 are Wi-Fi Protected Access security protocols defined by the Wi-Fi Alliance to encrypt and authenticate connections on IEEE 802.11 wireless networks. Both protect wireless traffic from interception and control which devices may join the network. The defining traits of each are listed below:

• WPA2: the 2004 Wi-Fi Alliance standard that uses AES-CCMP encryption and a pre-shared key for authentication.
• WPA3: the 2018 Wi-Fi Alliance standard that strengthens encryption and replaces the pre-shared key handshake with SAE.
• Both protocols: secure traffic on IEEE 802.11 networks, the wireless standard behind Wi-Fi.
• WPA3 succeeds WPA2: it addresses weaknesses found in the older protocol while keeping a compatible transition mode.

Both protocols encrypt the wireless traffic an attacker could otherwise intercept, one of the encryption controls covered in the overview of network security. The protocol is set on the device that broadcasts the network, so choosing it is part of configuring a router.

WPA2 vs WPA3 at a Glance

The two protocols share AES encryption but differ most in how they authenticate devices and how well they resist attack. The side-by-side below shows where each one fits.

The difference is not the cipher, since both use the Advanced Encryption Standard. It is the handshake: WPA3 fixes the part of WPA2 that an attacker could capture and grind through offline.

How Do WPA2 and WPA3 Differ in Encryption?

WPA2 encrypts traffic with AES in CCMP mode, while WPA3 adds the option of GCMP-256 and requires 192-bit security in its enterprise mode. Both rely on the Advanced Encryption Standard, but WPA3 raises the ceiling. The encryption differences are listed below:

• WPA2 encryption: AES with the Counter Mode Cipher Block Chaining Message Authentication Code Protocol (AES-CCMP), using 128-bit keys.
• WPA3 encryption: AES-CCMP plus an optional Galois/Counter Mode Protocol with 256-bit keys (GCMP-256) for stronger protection.
• WPA3-Enterprise: mandates a 192-bit security level built on GCMP-256, GMAC-256, and SHA-384, aligned with the NSA Commercial National Security Algorithm (CNSA) suite.
• Both protocols: use the Advanced Encryption Standard, a cipher standardized by the National Institute of Standards and Technology (NIST).

WPA2 secures traffic with AES-CCMP, while WPA3 can use GCMP-256 and enforces a higher enterprise minimum, according to the Wi-Fi Alliance specifications. The stronger cipher and longer key make intercepted WPA3 traffic harder to decrypt than WPA2 traffic.

How Do WPA2 and WPA3 Differ in Authentication?

WPA2 authenticates devices with a pre-shared key handshake, while WPA3 replaces it with Simultaneous Authentication of Equals (SAE), a handshake that resists offline guessing. The authentication method controls how a device proves it knows the network password. The differences are listed below:

• WPA2-Personal: uses a pre-shared key (PSK) four-way handshake, in which both sides confirm the same password.
• WPA3-Personal: uses Simultaneous Authentication of Equals (SAE), also called the Dragonfly handshake.
• SAE proves knowledge without sending it: each side shows it knows the password through a zero-knowledge exchange, so a captured handshake reveals nothing to guess against offline.
• WPA3 adds forward secrecy: a later password compromise cannot decrypt traffic that was already captured.

WPA2 relies on a handshake an attacker can capture and attack offline, while WPA3 uses SAE to block that attack, according to the Wi-Fi Alliance. Because every SAE guess must interact with the access point, a weak password is far harder to crack than under WPA2.

How Do WPA2 and WPA3 Protect Against Attacks?

WPA3 resists brute-force and KRACK attacks better than WPA2, because SAE blocks offline guessing and a redesigned handshake closes the key-reinstallation flaw. An attack on a Wi-Fi protocol targets either the handshake or the encryption. The protections each one offers are listed below:

• Brute-force protection: WPA3 SAE forces each password guess to interact with the network instead of an offline copy, so mass guessing is impractical.
• KRACK resistance: WPA3 uses a handshake that does not reinstall and reuse encryption keys, closing the class of weakness by design.
• WPA2 brute-force exposure: a captured pre-shared key handshake can be guessed offline at billions of attempts per second.
• WPA2 KRACK exposure: a key-reinstallation flaw in its four-way handshake, since mitigated by vendor patches but not removed from the protocol.

The Key Reinstallation Attack (KRACK), disclosed by researcher Mathy Vanhoef in October 2017 across ten related CVEs, forced nonce reuse in the WPA2 four-way handshake and affected every WPA2 network until patched. WPA3 removes this attack surface by design. These wireless attacks join the broader set catalogued in the guide to common network attacks.

Is WPA3 Completely Secure? The Dragonblood Findings

WPA3 is stronger than WPA2 but not flawless: in 2019 researchers found weaknesses in early SAE and in transition mode, since addressed by the Wi-Fi Alliance. Knowing the limits matters as much as knowing the gains. The Dragonblood findings are summarized below:

• Who and when: Mathy Vanhoef and Eyal Ronen disclosed the Dragonblood weaknesses in 2019, the same researcher who found KRACK.
• Side-channel leaks: timing and cache side channels in the original SAE handshake could leak information used to recover a password.
• Downgrade attacks: transition mode, which accepts both WPA3 and WPA2, could be forced down to a WPA2 dictionary attack.
• The fix: the Wi-Fi Alliance adopted the Hash-to-Element (H2E) method for SAE, which removes the side-channel paths, and the researchers still rated WPA3 an improvement over WPA2.

Dragonblood showed that transition mode is the weak link, which is why a WPA3-only network is safer than a mixed one wherever the hardware allows it. Patched, current WPA3 gear is not affected by the original flaws.

Are WPA2 and WPA3 Backward Compatible?

WPA3 includes a transition mode that lets WPA3 and WPA2 devices share one network, so older devices connect while newer ones use the stronger protocol. Backward compatibility allows a gradual upgrade without replacing every device at once. The compatibility facts are listed below:

• WPA3 transition mode: runs WPA3 and WPA2 together, accepting both device types on one network.
• WPA3-only mode: requires every device to support WPA3 and refuses WPA2 connections.
• Older devices: those that lack WPA3 still connect through transition mode using WPA2.
• Transition mode trade-off: it offers less protection than WPA3-only, since it still accepts the weaker handshake and was the target of the Dragonblood downgrade attack.

What Is the History of Wi-Fi Security From WEP to WPA3?

Wi-Fi security progressed from WEP to WPA, then WPA2, and finally WPA3, with each standard fixing weaknesses in the one before. The history shows why WPA3 exists and why the earlier protocols are dead. The Wi-Fi security standards are listed below:

• Wired Equivalent Privacy (WEP): the first Wi-Fi security standard, broken by flaws in its encryption and crackable in minutes today.
• Wi-Fi Protected Access (WPA): an interim fix that replaced WEP using the TKIP cipher, itself later found weak.
• WPA2: introduced AES-CCMP in 2004 and became the long-standing wireless standard.
• WPA3: arrived in 2018 with SAE authentication and stronger encryption, and the Wi-Fi Alliance made it required for new Wi-Fi CERTIFIED devices from 2020.

WEP and the original WPA are obsolete because their encryption was broken, leaving WPA2 and WPA3 as the only secure choices today, according to the Wi-Fi Alliance. A network still set to WEP or WPA should be reconfigured at once, since either leaves traffic effectively open.

WPA2 vs WPA3 Comparison Table

Which Wi-Fi Security Protocol Should You Use?

WPA3 is the protocol to use when every device supports it, and WPA2 remains the minimum acceptable standard only when older devices require it. The choice depends on device support, since WPA3 needs compatible hardware. The selection guidance is listed below:

• WPA3-only mode: for a network where every device supports WPA3, giving the full strength of the protocol.
• WPA3 transition mode: for a mixed network, accepting WPA2 devices while newer ones use WPA3.
• WPA2: acceptable only when no WPA3 support exists, and worth replacing when possible.
• WEP and the original WPA: never use them, since both have broken encryption.

WPA3 provides the strongest available Wi-Fi security and is the recommended choice for supported devices, while WPA2 serves as the fallback for older hardware. Choosing the protocol is part of the encryption layer within the overview of network security.

What Are the Personal and Enterprise Modes of WPA2 and WPA3?

WPA2 and WPA3 each offer a Personal mode for shared-password networks and an Enterprise mode for individual authentication through a central server. The mode sets how a device proves it may join, with Personal using one network password and Enterprise using per-user credentials. The two modes are listed below:

• WPA2-Personal and WPA3-Personal: use a single shared password for all devices on a home or small network.
• WPA2-Enterprise and WPA3-Enterprise: authenticate each user separately through a RADIUS server using the IEEE 802.1X standard.
• Personal mode: suits homes, where one password controls access to the wireless network.
• Enterprise mode: suits organizations, where each user holds individual credentials that can be revoked separately.

Personal mode controls access with one shared password, while Enterprise mode authenticates each user through a central server, according to the Wi-Fi Alliance. WPA3-Enterprise raises the minimum to a 192-bit security level built on the CNSA suite, exceeding what WPA2-Enterprise requires.

What Is WPA3 Enhanced Open for Public Networks?

WPA3 Enhanced Open encrypts traffic on open public networks that require no password, protecting users from passive interception. It applies Opportunistic Wireless Encryption so each device encrypts its own connection even without authentication. The facts about Enhanced Open are listed below:

• Open network encryption: protects traffic on public Wi-Fi that does not require a password to join.
• Opportunistic Wireless Encryption (OWE): uses a Diffie-Hellman key exchange to give each device a unique encrypted session on an open network.
• Passive interception defense: stops a nearby attacker from reading traffic on the same open network.
• No authentication added: Enhanced Open encrypts traffic without verifying a password, so it raises privacy, not access control.

WPA3 Enhanced Open encrypts traffic on open networks that WPA2 left unprotected, defined by the Wi-Fi Alliance through Opportunistic Wireless Encryption. Public networks still benefit from extra protection such as a VPN, which encrypts traffic across any untrusted connection. The wider picture of how this traffic moves is covered in the guide to what a computer network is.

Last Thoughts on WPA2 vs WPA3

WPA2 and WPA3 are Wi-Fi Protected Access protocols that encrypt and authenticate wireless connections, with WPA3 the newer standard. WPA2 uses AES-CCMP encryption and a pre-shared key handshake, while WPA3 keeps AES, adds an optional GCMP-256 cipher, and replaces the handshake with Simultaneous Authentication of Equals. SAE resists offline guessing, closes the KRACK class by design, and adds forward secrecy. WPA3 is not flawless, as the 2019 Dragonblood findings showed, but the Hash-to-Element fix addressed them and the protocol remains a clear step up from WPA2.

The practical rule is simple: run WPA3-only when every device supports it, use transition mode only while older hardware remains, and never use the broken WEP or original WPA. Wi-Fi security is one layer of a larger system, and the hub on what a computer network is connects it to the rest.

Key Takeaways:

• WPA2 and WPA3 are Wi-Fi Protected Access protocols that encrypt and authenticate wireless connections.
• WPA2 uses AES-CCMP, while WPA3 adds an optional GCMP-256 cipher and a 192-bit enterprise level.
• WPA3 replaces the WPA2 pre-shared key handshake with SAE, which blocks offline password guessing.
• WPA3 closes the KRACK class by design and adds forward secrecy, which WPA2 lacks.
• The 2019 Dragonblood weaknesses in early SAE and transition mode were fixed with Hash-to-Element.
• Use WPA3-only when devices allow it; never use the broken WEP or original WPA.

Frequently Asked Questions (FAQs)