Learn & Understand

The Evolution of WiFi Security: From WEP to WPA3

The companion calculator estimates how long it would take to crack a WiFi password once an attacker has captured the handshake, an offline attack with no router to slow it down. That scenario is the product of a long history: WiFi security has been broken and rebuilt several times, each generation replacing a predecessor whose weaknesses were exposed. Understanding the evolution from the badly broken WEP through WPA and WPA2 to the modern WPA3, and where the handshake-capture attack fits, explains why a strong passphrase remains the single most important defense regardless of protocol.

WEP: Broken From the Start

The first widely used WiFi encryption, WEP, was found to be fundamentally flawed. Its cryptographic design had weaknesses that allowed the key to be recovered by capturing enough traffic, and tools eventually made cracking a WEP network a matter of minutes regardless of the password. WEP is now considered completely broken and should never be used, its presence on a network is a serious vulnerability. WEP's failure taught the industry that WiFi security is hard and that a flawed design cannot be salvaged by a good password, the encryption itself must be sound.

WPA and WPA2: The Rebuild

WiFi security was rebuilt with WPA and then WPA2, which became the long-standing standard.

WPA2 with strong encryption became the baseline for secure home and business WiFi for many years, and remains widely used. Its encryption is sound, so unlike WEP, its security genuinely depends on the strength of the passphrase, which is exactly what the calculator addresses. A WPA2 network with a long, random passphrase is very difficult to break; one with a weak passphrase is not.

The Handshake-Capture Attack

WPA2's main avenue of attack is the one the calculator models. When a device connects to a WPA2 network, it performs a handshake with the router, and an attacker within range can capture that handshake. Crucially, once captured, the attacker can then try to guess the passphrase offline, against their own hardware, with no router to impose rate limits or lockouts. This turns passphrase cracking into a pure contest between the passphrase's strength and the attacker's computing power. A weak or common passphrase falls quickly to this offline guessing; a long, random one is effectively immune. This is why the passphrase is the linchpin of WPA2 security.

WPA3 and the Continuing Role of the Passphrase

WPA3, the current standard, was introduced partly to address exactly this weakness. It adds protections that make offline guessing against a captured handshake much harder, strengthening security even for networks whose passphrases are not ideal, among other improvements. This is real progress. But even with WPA3, a long, random passphrase remains the single most effective mitigation, the newer protocol raises the floor, but it does not make a weak passphrase safe, and not every device supports WPA3 yet. The through-line across the whole history is that sound encryption plus a strong passphrase is what secures WiFi; each generation improved the encryption, and the passphrase's importance never went away.

Securing WiFi Today

Use the calculator to appreciate how a strong passphrase resists offline cracking of a captured handshake, and place it in the evolution of WiFi security: never use broken WEP, use WPA2 or preferably WPA3, and in every case choose a long, random passphrase, since that is the defense that has mattered across every generation. The calculation shows the passphrase's strength; understanding the evolution from WEP to WPA3 is what shows why both the protocol and the passphrase matter.