Editing Wi-Fi (section)

=== Data security risks ===
Wi-Fi access points typically default to an encryption-free (''open'') mode. Novice users benefit from a zero-configuration device that works out-of-the-box, but this default does not enable any [[wireless security]], providing open wireless access to a LAN. To turn security on requires the user to configure the device, usually via a software [[graphical user interface]] (GUI). On unencrypted Wi-Fi networks connecting devices can monitor and record data (including personal information). Such networks can only be secured by using other means of protection, such as a [[VPN]], or [[Hypertext Transfer Protocol]] over [[Transport Layer Security]] ([[HTTPS]]).

The older wireless-[[encryption]] standard, Wired Equivalent Privacy (WEP), has been [[Fluhrer, Mantin, and Shamir attack|shown]] easily breakable even when correctly configured. Wi-Fi Protected Access (WPA) encryption, which became available in devices in 2003, aimed to solve this problem. Wi-Fi Protected Access 2 (WPA2) ratified in 2004 is considered secure, provided a strong [[passphrase]] is used. The 2003 version of WPA has not been considered secure since it was superseded by WPA2 in 2004.

In 2018, [[WPA3]] was announced as a replacement for WPA2, increasing security;<ref>{{cite web|url=https://www.techspot.com/news/72656-wpa3-protocol-make-public-wi-fi-hotspots-lot.html|title=WPA3 protocol will make public Wi-Fi hotspots a lot more secure|last=Thubron|first=Rob|date=9 January 2018|website=Techspot|archive-url=https://web.archive.org/web/20181116023123/https://www.techspot.com/news/72656-wpa3-protocol-make-public-wi-fi-hotspots-lot.html|archive-date=16 November 2018|url-status=live}}</ref> it rolled out on 26 June.<ref>{{Cite web|url=https://www.theverge.com/circuitbreaker/2018/6/26/17501594/wpa3-wifi-security-certification|title=Wi-Fi security is starting to get its biggest upgrade in over a decade|last=Kastrenakes|first=Jacob|date=26 June 2018|website=[[The Verge]]|archive-url=https://web.archive.org/web/20190220012909/https://www.theverge.com/circuitbreaker/2018/6/26/17501594/wpa3-wifi-security-certification|archive-date=20 February 2019|url-status=live|access-date=26 June 2018}}</ref>