# Wpa3

**URL:** <https://forum.gl-inet.com/t/wpa3/3905>\
**Category:** Router\
**Created:** [June 26, 2018, 2:40pm UTC](https://forum.gl-inet.com/t/wpa3/3905 "2018-06-26T14:40:19Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![unlo](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/u/439d5e/32.png) [@unlo](https://forum.gl-inet.com/u/unlo)\
**Post date:** [June 26, 2018, 2:40pm UTC](https://forum.gl-inet.com/t/wpa3/3905/1 "2018-06-26T14:40:19Z")

</div>

WiFi alliance has published [WPA3 OFFICIAL](https://www.wi-fi.org/news-events/newsroom/wi-fi-alliance-introduces-wi-fi-certified-wpa3-security)

please keep us up-to-date when this will be available

---

<div class="post-metadata">

**Author:** ![alzhao](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/5f9b8f/32.png) [@alzhao](https://forum.gl-inet.com/u/alzhao)\
**Post date:** [June 30, 2018, 5:54pm UTC](https://forum.gl-inet.com/t/wpa3/3905/2 "2018-06-30T17:54:53Z")

</div>

We checked and seems there is still some work to do. We expect the earliest support for WPA3 will be end of this year. Openwrt may add a little bit late.

This is chip related I think.

---

<div class="post-metadata">

**Author:** ![tlymer](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/t/4af34b/32.png) [@tlymer](https://forum.gl-inet.com/u/tlymer)\
**Post date:** [October 25, 2019, 11:00am UTC](https://forum.gl-inet.com/t/wpa3/3905/3 "2019-10-25T11:00:28Z")

</div>

hi alzhao,

wpa3 is now available on ubuntu 19.10. Do you know when it will be available on the AR750 ?

Tony

---

<div class="post-metadata">

**Author:** ![Johnex](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/johnex/32/300_2.png) [@Johnex](https://forum.gl-inet.com/u/Johnex)\
**Post date:** [October 25, 2019, 12:21pm UTC](https://forum.gl-inet.com/t/wpa3/3905/4 "2019-10-25T12:21:17Z")

</div>

Seems like OpenWRT is still working on getting that ready, at least looking here:

> **[Wpa3 support in OpenWrt?](https://forum.openwrt.org/t/wpa3-support-in-openwrt/10554/61)**
>
> Which combinations exactly dont work?

My guess is when OpenWRT 19.07 is out, there might be support for it. Unfortunately 19.07 has been delayed since the summer, without any kind of hint as to when it will be released.

GL-iNet only makes new firmware’s based on the latest releases, so that customers have the most stable version. There is no point to develop on top of something that isn’t ready, just to fight with a lot of issues and bugs.

---

<div class="post-metadata">

**Author:** ![alzhao](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/5f9b8f/32.png) [@alzhao](https://forum.gl-inet.com/u/alzhao)\
**Post date:** [October 26, 2019, 4:22am UTC](https://forum.gl-inet.com/t/wpa3/3905/5 "2019-10-26T04:22:30Z")

</div>

WPA3 need to be supported by chipset, right?

---

<div class="post-metadata">

**Author:** ![Johnex](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/johnex/32/300_2.png) [@Johnex](https://forum.gl-inet.com/u/Johnex)\
**Post date:** [October 26, 2019, 2:25pm UTC](https://forum.gl-inet.com/t/wpa3/3905/6 "2019-10-26T14:25:08Z")

</div>

No, it looks to be just a protocol update, so software + firmware update only 🙂

---

<div class="post-metadata">

**Author:** ![tlymer](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/t/4af34b/32.png) [@tlymer](https://forum.gl-inet.com/u/tlymer)\
**Post date:** [November 3, 2019, 4:02pm UTC](https://forum.gl-inet.com/t/wpa3/3905/7 "2019-11-03T16:02:07Z")

</div>

Thanks for your comments. I appreciate them. I am looking forward to the OPENWRT update becoming available.

---

<div class="post-metadata">

**Author:** ![sfx2000](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/sfx2000/32/2196_2.png) [@sfx2000](https://forum.gl-inet.com/u/sfx2000)\
**Post date:** [November 5, 2019, 5:29am UTC](https://forum.gl-inet.com/t/wpa3/3905/8 "2019-11-05T05:29:38Z")

</div>

There’s a fair amount of interop issues with WPA3 and mixed clients - folks are working it…

It’s mostly the mixed-mode stuff and fallbacks for older client implementations for devices.

---

<div class="post-metadata">

**Author:** ![Johnex](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/johnex/32/300_2.png) [@Johnex](https://forum.gl-inet.com/u/Johnex)\
**Post date:** [November 7, 2019, 4:29pm UTC](https://forum.gl-inet.com/t/wpa3/3905/9 "2019-11-07T16:29:52Z")

</div>

Well seems like 19.06 won’t have WPA3 after all. Looking at these messages:

[https://lists.infradead.org/pipermail/openwrt-devel/2019-October/019293.html](https://lists.infradead.org/pipermail/openwrt-devel/2019-October/019293.html)  
[https://lists.infradead.org/pipermail/openwrt-devel/2019-October/019346.html](https://lists.infradead.org/pipermail/openwrt-devel/2019-October/019346.html)

And the fact that 19.06 RC1 was released yesterday, it seems like WPA3 has been pushed back to version 20.03.

Sorry guys that wanted WPA3 soon.

---

<div class="post-metadata">

**Author:** ![sfx2000](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/sfx2000/32/2196_2.png) [@sfx2000](https://forum.gl-inet.com/u/sfx2000)\
**Post date:** [November 8, 2019, 4:58am UTC](https://forum.gl-inet.com/t/wpa3/3905/10 "2019-11-08T04:58:17Z")

</div>

Here’s one example - folks are working thru challenges of WPA3, but please be patient.

Some of it is OpenWRT devs, and also upstream - and client interoperability is an absolute must - this particular checkin is touching just one item.

```
commit 3034f8c3b85e70b1dd9b4cd5cd33e9d2cd8be3b8
Date: Mon Oct 28 19:10:14 2019 +0100

hostapd: enable PMKSA and OK caching for WPA3-Personal

This enables PMKSA and opportunistic key caching by default for
WPA2/WPA3-Personal, WPA3-Personal and OWE auth types.
Otherwise, Apple devices won't connect to the WPA3 network.

This should not degrade security, as there's no external authentication
provider.

Tested with OCEDO Koala and iPhone 7 (iOS 13.1).

```

---

<div class="post-metadata">

**Author:** ![Johnex](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/johnex/32/300_2.png) [@Johnex](https://forum.gl-inet.com/u/Johnex)\
**Post date:** [November 8, 2019, 2:33pm UTC](https://forum.gl-inet.com/t/wpa3/3905/11 "2019-11-08T14:33:56Z")

</div>

Some people might not be aware but having WPA3 on a GL router does not guarantee that you will even be able to use it.

For example, users on Windows need to be running the May 2019 Update, and for example with Intel cards which most laptops use, only these have support for WPA3:

- Intel® Wi-Fi 6 AX201
- Intel® Wi-Fi 6 AX200
- Intel® Wireless-AC 9560
- Intel® Wireless-AC 9462
- Intel® Wireless-AC 9461
- Intel® Wireless-AC 9260

My 2 year old laptop did not have one of those cards, but i did swap it out for another reason.

Apple users need to be on iOS13 or later.

Android users need to use Android Q aka Android 10, which is also a limited list of devices that currently have it:

- Google Pixel 4
- Google Pixel 3 / Pixel 3 XL
- Google Pixel 3a / Pixel 3a XL
- Google Pixel 2 / Pixel 2 XL
- Google Pixel / Pixel XL
- Essential Phone
- OnePlus 7T
- OnePlus 7T Pro

Samsung, Huawei and others will probably only update their latest flagships to Android 10, all older phones will be left in the dark as usual. Those updates won’t happen until the beginning of 2020.

And the cherry on top is this:

> **[These are the WiFi 6e routers announced at CES 2021](https://www.xda-developers.com/these-are-the-wifi-6e-routers-announced-at-ces-2021/)**
>
> Wifi 6e routers have made their big debut at CES this year. But when will be be able to buy them and what are the benefits? Look no further.

The Wi-Fi Alliance then made some suggestions on how to fix it, which ironically caused more side attacks, woopsie 🙂

It will probably only be fixed when WPA3.1 or something like that is made standard in another 10 years.

You can read more directly from the researchers that found the vulnerabilities here:

> **[Dragonblood: Analysing WPA3's Dragonfly Handshake](https://wpa3.mathyvanhoef.com/)**
>
> This website presents the Dragonblood Attack. It is a collection of attacks against the WPA3 protocol, which mainly abuse the password element generation algorithm of WPA3's Dragonfly handshake.

So kids, stick to using LAN cables if you want to be more secure or always use a VPN when on wifi 😛

---

<div class="post-metadata">

**Author:** ![sfx2000](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/sfx2000/32/2196_2.png) [@sfx2000](https://forum.gl-inet.com/u/sfx2000)\
**Post date:** [November 9, 2019, 4:13am UTC](https://forum.gl-inet.com/t/wpa3/3905/12 "2019-11-09T04:13:48Z")

</div>

> [@Johnex](#):
>
> You can read more directly from the researchers that found the vulnerabilities here:
> 
> [https://wpa3.mathyvanhoef.com/](https://wpa3.mathyvanhoef.com/)
> 
> So kids, stick to using LAN cables if you want to be more secure or always use a VPN when on wifi

WPA3 has it’s issues… it’s not as bad as it sounds, as 2019 seems to be the year of “named” vulnerabilities - meltdown/spectre anybody?

The bigger problem is stupid clients on wifi period - case in point - [Ring Doorbells sending credentials in plaintext](https://www.bitdefender.com/files/News/CaseStudies/study/294/Bitdefender-WhitePaper-RDoor-CREA3949-en-EN-GenericUse.pdf)

In the larger scope however, unless **all** equipment on the WLAN is WPA3, one will have to run in mixed mode to support WPA2 clients.

---

<div class="post-metadata">

**Author:** ![bruce](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bruce/32/35649_2.png) [@bruce](https://forum.gl-inet.com/u/bruce)\
**Post date:** [October 29, 2025, 4:09am UTC](https://forum.gl-inet.com/t/wpa3/3905/13 "2025-10-29T04:09:17Z")

</div>


