Wi-Fi
From Navas Wireless Wiki
m (→Wi-Fi Checklist: edit) |
(→Wi-Fi Checklist: expand) |
||
Line 37: | Line 37: | ||
== Wi-Fi Checklist == | == Wi-Fi Checklist == | ||
- | # '''Use [[wikipedia:Wi-Fi Protected Access|WPA]] security'''. If you don't do this, assume ''you will get [[wikipedia:Hacker (computer security)|hacked]]''. ''[[wikipedia:Wired Equivalent Privacy|WEP]] is essentially worthless''. Replace wireless equipment that doesn't support WPA. Seriously. ''See [[#Wi-Fi Security|Wi-Fi Security]]'' | + | # '''Use [[wikipedia:Wi-Fi Protected Access|WPA]] security'''. If you don't do this, assume ''you will get [[wikipedia:Hacker (computer security)|hacked]]''. ''[[wikipedia:Wired Equivalent Privacy|WEP]] is essentially worthless''. Replace wireless equipment that doesn't support WPA. Seriously. (''See [[#Wi-Fi Security|Wi-Fi Security]]'') |
- | # '''Use a ''strong'' WPA passphrase'''. A good way to do that is with [[wikipedia:Diceware|diceware]] words. ''See [[#What Makes for a Strong Password or Passphrase?|What Makes for a Strong Password or Passphrase?]]'' | + | # '''Use a ''strong'' WPA passphrase'''. A good way to do that is with [[wikipedia:Diceware|diceware]] words. (''See [[#What Makes for a Strong Password or Passphrase?|What Makes for a Strong Password or Passphrase?]]'') Write your passphrase on a label and stick it on the bottom of your wireless router so you won't forget it. (If someone gets to your wireless router, you are compromised regardless.) |
# '''Make your wireless [[wikipedia:Service set identifier|SSID]] unique'''. This helps avoid network collisions. A good way to do this is to use your address, phone number, and/or name for your SSID (making it easy for you to be contacted if something is wrong with your wireless network). | # '''Make your wireless [[wikipedia:Service set identifier|SSID]] unique'''. This helps avoid network collisions. A good way to do this is to use your address, phone number, and/or name for your SSID (making it easy for you to be contacted if something is wrong with your wireless network). | ||
- | # '''Don't bother with SSID hiding or [[wikipedia:MAC address|MAC address]] filtering'''. They ''don't do any real good'' (improve security) but they can ''cause you grief''. ''See [[#Wi-Fi Security Myths|Wi-Fi Security Myths]].'' | + | # '''Don't bother with SSID hiding or [[wikipedia:MAC address|MAC address]] filtering'''. They ''don't do any real good'' (improve security) but they can ''cause you grief''. (''See [[#Wi-Fi Security Myths|Wi-Fi Security Myths]]'') |
+ | # '''Turn off [[wikipedia:Universal Plug and Play|Universal Plug and Play]]''' (UPnP) in your wireless router. Because most consumer-grade wireless routers lack UPnP [[wikipedia:Authentication|authentication]] they are vulnerable to attack. (''See [[wikipedia:Universal Plug and Play#Lack of Authentication|Problems with UPnP, Lack of Authentication]]'') | ||
+ | # '''Set a ''strong'' password''' on the administration interface of your wireless router. Again, [[wikipedia:Diceware|diceware]] is a good way to do that. | ||
+ | # '''Turn off remote administration.''' If your wireless router supports remote administration, ''turn it off'' (unless you really know what you're doing). | ||
== Wi-Fi Network Types == | == Wi-Fi Network Types == |