It seems i have the option but i have a vague memory of someone telling me not to bother with it unless i had a good reason

  • @[email protected]
    link
    fedilink
    English
    2121 days ago

    If your devices all support WPA3, go for it. There’s a good chance older things won’t.

    • @[email protected]
      link
      fedilink
      English
      621 days ago

      Most routers include backwards compatibility with WPA2 as a fallback, while newer devices will use WPA3. Should be relatively seamless

      • @[email protected]
        link
        fedilink
        English
        1321 days ago

        The drawback is that evildoers can still attack the WPA2 handshakes and can force devices to downgrade, so you’re still getting effectively WPA2 level security until you actually turn off WPA2.

        But if it doesn’t cost you anything, you can just turn it on and make their life just s little bit harder.

        • @[email protected]
          link
          fedilink
          English
          621 days ago

          Maybe vlan or DMZ a wpa2 network and use wpa3 with no fallback to wpa2 on the main/lan network?

          • @[email protected]
            link
            fedilink
            English
            120 days ago

            In my case that would mean that over 70% would be in the DMZ… It would be the main network

            • @[email protected]
              link
              fedilink
              English
              119 days ago

              Yeah but as long as important data is not able to be accessed via the wpa2 network then you are all good.

      • femtech
        link
        fedilink
        English
        220 days ago

        When I put my network on wpa3/2 mode my Xbox would not longer connect.

          • femtech
            link
            fedilink
            English
            220 days ago

            Yeah, it’s on my list to run some Ethernet from my basement to the attic. Right now I have one wire running up the outside of the wall to the AP.

  • @[email protected]
    link
    fedilink
    English
    520 days ago

    Admittedly it was a few years ago since I last tried, but even in WPA2 compatibility mode I had no end of trouble either getting things to join in the first place or weird stability issues afterwards.

    Maybe things have improved now, but when 2 “just works” and is good enough for most use cases I’ve been reluctant to try 3 again.

  • @jecht360
    link
    English
    420 days ago

    Technically, the “best” option would be to VLAN the WiFi network separately from a wired network where all the important devices are connected.

    But honestly, for normal people, that’s over the top. Try WPA3 first and see if you have any devices that won’t work over it. If you run into issues, swap over to WPA2. I generally say start stricter and loosen the metaphorical belt only as necessary.

  • jelloeater - Ops MgrA
    link
    English
    221 days ago

    WPA2 is just fine TBH. Use what works with all the devices you own heh heh

    • @kernelle
      link
      English
      320 days ago

      I’m not so sure about this, KRACK was way back in '17

      • @[email protected]
        link
        fedilink
        English
        5
        edit-2
        20 days ago

        It sorta depends on your physical security. If you live in a town, then sure, you can’t know who’s eavesdropping. But if you park in my yard, several hundred meters from the nearest public road, then I think we’d notice before you could do any damage.

        • @kernelle
          link
          English
          120 days ago

          Yeah thats full answer for OP, since nobody mentioned it thought I’d chime in