WiFi security help

**Jagworld** · 2012-03-30 10:13

It was suggested to use the NirSoft Wireless Network Watcher, I have and I think every home around here is on the list.

What is the best way to keep them at bay?

I'm on ATT U-verse 2wire modem with password but just don't know how good that is or means !!

***ruirib*** · 2012-03-30 11:32

What type of authentication are you using? That's what matters, really. Anything WPA should be enough and be sure to use a long passkey.

**Paul T** · 2012-03-31 01:22

You do not need to do anything other than use WPA or preferably WPA2 encryption and a good 63 character password on your WiFi. This will prevent anyone else seeing your data or using your WiFi.

cheers, Paul

**Medico** · 2012-03-31 06:49

As an added layer for the average neighbor you can add a Mac address filter. This will keep all the neighbors at bay unless one of them is a real Geek. He/she could break through the Mac filter, but be stopped by the above mentioned security authentication. Remember all of your devices (PC's, phones, Nooks, Kindles, etc.) that connect through your WiFi would have to be added to the Mac address filter as well. Also any family or friends PC's that visit. it's not a hard thing to do. Just remember to choose Permit, not Prevent PC's from connecting. If you choose wrong, you will have to connect an Ethernet cable to fix this setting.

MacAddressFilter.jpg

**Paul T** · 2012-03-31 07:28

MAC address filters are completely pointless and can be bypassed by a hacker in about 5 minutes. Stick to WPA2 and you can relax in the knowledge of a job well done. (Apologies to Ted.)

cheers, Paul

**Medico** · 2012-03-31 08:34

As I said, this is for the "average" neighbor. I would say the "average" neighbor is not a hacker. Since Jag was talking about all the homes in his neighborhood this would be another layer of protection from his neighbors.

**Paul T** · 2012-03-31 15:05

Ted, you do not need another layer, WPA is all you ever need.

cheers, Paul

**jwitalka** · 2012-04-01 11:14

Ted, you do not need another layer, WPA is all you ever need.

Agreed. If a hacker can crack WPA, he can certainly crack MAC Address Filtering. Maintaining MAC addresses is also a PIA. Hiding SSD broadcast is also not effective for similar reasons.

Jerry

**Gomek** · 2012-04-06 07:29

I also heard the debate whether hiding your SSID (access point name) is effective. Once again, I think it's the "average" user as well. On my router I have WPA2 with a different password than admin for example, and use MAC filters for all my devices.

***ruirib*** · 2012-04-06 08:23

The only thing that is really effective is WPA with a long passphrase. All the rest can be easily defeated. MAC address filtering, SSID broadcast either. Even with no filtering and SSID broadcast neighbours, both technically inclined or not, won't pass your WPA encription, so why bother with it? The additional measures deter no one WPA wouldn't deter and are no obstacle for those who are more technically knowledgeable.

**Paul T** · 2012-04-07 02:32

Hiding the SSID can cause problems if your devices look for the SSID before connecting - no SSID, no connection. I've seen this several times.

cheers, Paul

**lesle** · 2012-04-08 18:28

I use WPA2-PSK [AES] and my SSID is not hidden: Matthew 21:22 KJV_nomap.

**georgelee** · 2012-04-11 09:56

Originally Posted by Paul T

You do not need to do anything other than use WPA or preferably WPA2 encryption and a good 63 character password on your WiFi. This will prevent anyone else seeing your data or using your WiFi. cheers, Paul

A 63 character password! Who on earth could remember that, and what of the hassle if there are several PCs on a network and you make a slight mistake in setting one or more of them.

**Paul T** · 2012-04-11 12:37

Copy the key to a USB stick. ;-))

cheers, Paul

Thread: WiFi security help

Thread Tools