Understand wireless security standards, how rogue access points work, and how to design a secure Wi-Fi environment for business use.
Wireless Network Security
Wi-Fi is convenient but introduces attack surfaces that wired networks don’t have. Understanding wireless threats helps you make smarter decisions about how and where you connect.
Wi-Fi Threat Scenarios
Wi-Fi Security Protocols
| Protocol | Security | Recommendation |
|---|---|---|
| Open (no password) | None — all traffic visible | Never use for work |
| WEP | Broken — cracked in minutes | Never use |
| WPA (TKIP) | Weak — deprecated | Upgrade immediately |
| WPA2-Personal (PSK) | Adequate for home | Use 16+ char passphrase |
| WPA2-Enterprise | Strong | Corporate standard — uses individual credentials |
| WPA3 | Best available | Preferred; mandatory for new deployments |
⛔ Important
WPA2-Personal uses a shared key — everyone on the network uses the same password. If one device is compromised or an employee shares the password, the entire network is exposed. Corporate environments should use WPA2/3-Enterprise which issues individual credentials to each device, allowing per-device revocation.
Public Wi-Fi Risks
Public Wi-Fi in cafés, airports, hotels, and shopping centres is inherently untrusted:
- Traffic may be intercepted by other users on the same network
- An evil twin AP may be masquerading as the legitimate network
- The AP operator can see unencrypted traffic
- Captive portals may serve malicious content
✓ Key Point
When using public Wi-Fi for work:
1. Always connect to your organisation’s VPN before accessing any work resources
2. Prefer your phone’s mobile hotspot over public Wi-Fi for sensitive work
3. Verify the exact network name with staff before connecting — don’t guess
4. Disable Wi-Fi auto-connect to open networks on your device
Wireless Security in the Office
Signs of a rogue access point in your workplace:
- Unknown network names (SSIDs) visible in your Wi-Fi list
- A new physical device plugged into a network port that wasn’t there before
- Unexplained slow network performance
Report any of these to IT immediately. Rogue APs bypass all perimeter security controls and can allow attackers outside the building to access the internal network.
Is your Wi-Fi an open door?
A shared Wi-Fi password and an old router can undo every other security control you’ve paid for. Mobile Techs IT Service designs secure wireless for Gold Coast businesses — WPA3 and Enterprise authentication, properly separated guest and staff networks, rogue access point detection, and business-grade access points that actually perform. Home users welcome too — on-site or remote, anywhere in Australia.
Book a wireless security audit → or call 1300 644 588
