WPA, WPA2, WPA3: The Security Table

The three wireless security modes with their introduction dates and current status.

WPA was introduced as an interim fix while 802.11i was finalised. It is no longer considered secure for a home network and should not be enabled on a router that carries personal traffic.

WPA2 superseded WPA in 2004 and became the default on consumer routers for over a decade. It remains the minimum acceptable mode: if a device cannot do WPA2, isolate it on a guest network rather than downgrading the main one.

WPA3 was announced in 2018 as a replacement for WPA2, rolling out on 26 June. It hardens passphrase handling so an offline dictionary attack against a captured handshake yields far less.

Not every client supports WPA3 yet. Many routers offer a transition mode that accepts both WPA2 and WPA3; check which devices join before turning transition mode off.

When reviewing the router's wireless security page, confirm the mode shown matches what you intended. A router that silently falls back to WPA after a firmware reset is a common and easy-to-miss failure.

Use the table below as the decision reference: WPA3 where supported, WPA2 everywhere else, and nothing older.

• WPA (2003): no longer considered secure — do not enable.
• WPA2 (2004): minimum acceptable for home use.
• WPA3 (2018, rolled out 26 June): preferred where every client supports it.

Further reading

• The 802.11 Generations in Numbers
• Set Up the Router, Step by Step