Wi-Fi security: Find out the best setting for your router
Many routers offer the option of using WPA2 security with TKIP (WPA2-TKIP), AES (WPA2-AES), or both. Choose the wrong option, and you will have a slower and less secure network. Despite strange names and problem possibilities, this configuration is important and should be chosen calmly, and of course, with some knowledge of the technologies involved.
Check out our full review of the D-Link DIR-879 router
To help with this choice, learn about the different aspects of these protocols and see which ones may be most appropriate for your network. The scammers on routers already reach thousands of Brazilian homes, and the procedure helps you to protect yourself from this danger.
WPA2-AES, WPA2-TKIP or both? Find out which protocol to use
To find out which Wi-Fi security option to use you need to understand each of the options. See the details of the major security algorithms for Wi-Fi networks.
Blow on the router: how to avoid? Users give tips in Forum
Knowing the main security algorithms of Wi-Fi networks
Wired Equivalent Privacy (WEP), Wi-Fi Protected Access (WPA), and Wi-Fi Protected Access II (WPA2) are the key security algorithms you'll see when setting up a wireless network.
WEP is the oldest and proved to be vulnerable as several security breaches were discovered. WPA has improved security, but now is also considered vulnerable to intrusion. WPA2, although not perfect, is currently considered by many to be the safest choice.
Knowing AES and TKIP Encryption
Make the best choice and protect your network through encryption
The Temporal Key Integrity Protocol (TKIP) and the Advanced Encryption Standard (AES) are the two different types of encryption you can use on networks protected with the WPA2 protocol.
TKIP is actually an older encryption protocol introduced with WPA to replace WEP encryption (which proved to be very insecure). TKIP is actually quite similar to WEP encryption. This standard is no longer considered secure and is now obsolete. In other words, you should not use it.
AES is the most secure cryptographic protocol introduced with WPA2. It is also not a standard developed specifically for Wi-Fi networks. It is a worldwide cryptographic standard.
For example, when you encrypt a hard disk with TrueCrypt, it can use AES encryption for this. AES is generally considered to be fairly secure, and the main weaknesses would be brute-force attacks (which can be prevented using a secure password) and security flaws in other aspects of WPA2.
AES is the best choice?
The bottom line is that TKIP is an older encryption standard used by the WPA standard. AES is a newer Wi-Fi encryption solution used by the WPA2 standard, which is also new and considered secure.
Depending on your router, the choice is not so simple: although it is easy to use WPA2 with AES for optimal security, it is also possible to use the TKIP protocol (although this is not recommended), where compatibility with connected devices is required. In this scenario, devices that support WPA2 will connect to WPA2 and devices that support WPA will connect to WPA.
So what is the best option to use according to the situation?
If you have old devices that can not connect to a WPA2-PSK (AES) network, use the modern WPA2 standard with the old TKIP encryption. This is unsafe and is only a solution to an outdated equipment scenario.
Some devices offer and even recommend using the mixed mode option. This option allows both WPA and WPA2, both with TKIP encryption and with AES. This provides maximum compatibility with any old devices you may have, but also allows an attacker to break your network because of the use of WPA and TKIP, which are more vulnerable.
For more complete protection, you should only use WPA2 with AES, the latest Wi-Fi security protocol and the latest encryption.
When it comes to security, WPA2 with AES is the best option
Choosing the best option according to the device
WPA2 certification became available in 2004. In 2006, WPA2 certification became mandatory. So any device manufactured after 2006 with a "Wi-Fi" logo, must support WPA2 encryption.
Since your Wi-Fi enabled devices are probably younger than 8 to 10 years, just choose WPA2-PSK (AES) and that's it.
After selecting this option, you should check if something does not work. If a device stops working, simply change the network security conic again for compatibility. But if security is your top concern, you'll have to buy a new device, manufactured after 2006, to use only WPA2-PSK (AES).
WPA and TKIP will slow down your Wi-Fi network
Unfortunately, when using the WPA and TKIP compatibility options, the speed of your Wi-Fi network may decrease. If you enable WPA or TKIP on many modern Wi-Fi routers that support 802.11n and newer and faster standards, they will decrease to 54 mbps. They do this to ensure compatibility with older devices.
On most current routers the options are generally WEP, WPA (TKIP) and WPA2 (AES), and perhaps a WPA (TKIP) + WPA2 (AES) compatibility mode. So if you have a router type that offers WPA2 with TKIP or AES, choose AES. Almost all of your devices will certainly work with it, as well as being faster and safer.
How to put speed limit on the router? See in forum
