In this article
Buried in most router settings pages is a dropdown menu offering choices like WEP, WPA, WPA2, and WPA3 — usually with no explanation of what any of them do differently. Since this setting controls how your Wi-Fi traffic is encrypted, it's worth understanding well enough to make an informed choice rather than just picking whatever's already selected.
Why Wi-Fi Needs Encryption at All
Wi-Fi signals travel through open air, which means anyone within range with the right equipment could technically listen in on unencrypted traffic. Encryption scrambles that traffic so that even if someone captures the radio signal, they can't read its contents without the correct key — which in a home network is derived from your Wi-Fi password.
WEP: The Outdated Option You Should Never Pick
WEP (Wired Equivalent Privacy) was the original Wi-Fi encryption standard, introduced in the late 1990s, and it has been considered broken for a very long time. Its encryption can be cracked in minutes with widely available tools, due to fundamental design flaws rather than just weak passwords. If your router's settings still list WEP as an active option and it's currently selected, that's worth changing immediately — modern routers keep it available mainly for compatibility with extremely old devices, not because it offers meaningful protection.
WPA and WPA2: The Long-Standing Standard
WPA (Wi-Fi Protected Access) replaced WEP with substantially stronger encryption, and WPA2, introduced in 2004, has been the dominant standard for most of the past two decades. WPA2 uses AES encryption, which remains considered strong when implemented correctly and paired with a sufficiently long, unique password. The practical weak point in WPA2 isn't usually the encryption itself but a short or commonly used Wi-Fi password, which remains guessable through automated attempts regardless of how strong the underlying encryption algorithm is.
WPA3: What Actually Changed
WPA3, introduced in 2018 and increasingly common in routers sold since roughly 2020, addresses several of WPA2's practical weaknesses rather than reinventing encryption from scratch:
- Stronger protection against offline password-guessing attempts, through a new handshake method (Simultaneous Authentication of Equals) that makes each guess require direct interaction with the router rather than allowing an attacker to capture data and guess passwords offline at unlimited speed.
- Individualized data encryption even on open or public networks, meaning other devices on the same open Wi-Fi network are less able to snoop on your traffic than under older standards.
- Better protection even with a relatively weak password, though a strong, unique password remains worthwhile regardless.
Most routers manufactured in the past few years support a WPA2/WPA3 mixed mode, which allows both newer and older devices to connect while giving WPA3-capable devices the stronger handshake.
The Wi-Fi Password Isn't the Only Thing at Play
Even with strong encryption selected, the practical security of your home network still depends heavily on password strength and how it's shared. A long, unique Wi-Fi password matters — reusing a password you've used elsewhere, or leaving a router on its default password, undermines even WPA3's improvements. It's also worth periodically checking which devices are actually connected to your network, since a shared password given out to guests or an old device that's since been discarded doesn't automatically stop working just because time has passed.
Which Setting Should You Actually Pick
If your router offers WPA3 or a WPA2/WPA3 mixed mode, use it. If your router only offers WPA2, that remains reasonably secure with a strong password and is still far better than WPA or WEP. If your router's newest available option is WEP or plain WPA, and it's more than roughly seven or eight years old, that's a reasonable point to consider whether the device is due for replacement — see our guide on why router firmware updates matter for related context on aging hardware.
Frequently Asked Questions
Will switching to WPA3 disconnect my older devices?
If you select WPA3-only, yes — devices that don't support it won't be able to connect. Using the WPA2/WPA3 mixed mode available on most modern routers avoids this by supporting both simultaneously.
Is a longer Wi-Fi password always better?
Generally yes, up to a reasonable point — length contributes more to resistance against guessing than complexity alone. A long passphrase of unrelated words is both stronger and easier to type correctly than a short string of substituted symbols.
Does encryption type affect Wi-Fi speed?
The difference is generally negligible on modern router hardware, which handles encryption and decryption with dedicated processing that doesn't meaningfully affect throughput for typical home use.