Wi-Fi
From Navas Wireless Wiki
m (→Performance and Speed) |
m (→Essential Checklist: reformat) |
||
Line 40: | Line 40: | ||
== Essential Checklist == | == Essential Checklist == | ||
{| | {| | ||
- | | | + | | valign="top" | ☐ |
+ | | '''Use [[wikipedia:Wi-Fi Protected Access|WPA]] security'''. If you don't do this, assume ''you will get [[wikipedia:Hacker (computer security)|hacked]]''. ''[[wikipedia:Wired Equivalent Privacy|WEP]] is essentially worthless''. Replace wireless equipment that doesn't support WPA. Seriously. (''See [[#Wi-Fi Security|Wi-Fi Security]]'') | ||
+ | |- | ||
+ | | valign="top" | ☐ | ||
+ | | '''Use a ''strong'' WPA passphrase'''. A good way to do that is with [[wikipedia:Diceware|diceware]] words. (''See [[#What Makes for a Strong Password or Passphrase?|What Makes for a Strong Password or Passphrase?]]'') Write your passphrase on a label and stick it on the bottom of your wireless router so you won't forget it. (If someone gets to your wireless router, you are compromised regardless.) | ||
|- | |- | ||
- | | [[ | + | | valign="top" | ☐ |
+ | | '''Make your wireless [[wikipedia:Service set identifier|SSID]] unique'''. This helps avoid network collisions. A good way to do this is to use your address, phone number, and/or name for your SSID (making it easy for you to be contacted if something is wrong with your wireless network). | ||
|- | |- | ||
- | | | + | | valign="top" | ☐ |
+ | | '''Don't bother with SSID hiding or [[wikipedia:MAC address|MAC address]] filtering'''. They ''don't do any real good'' (improve security) but they can ''cause you grief''. (''See [[#Wi-Fi Security Myths|Wi-Fi Security Myths]]'') | ||
|- | |- | ||
- | | | + | | valign="top" | ☐ |
+ | | '''Turn off [[wikipedia:Universal Plug and Play|Universal Plug and Play]]''' (UPnP) in your wireless router. Because most consumer-grade wireless routers lack UPnP [[wikipedia:Authentication|authentication]] they are vulnerable to attack. (''See [[wikipedia:Universal Plug and Play#Lack of Authentication|Problems with UPnP, Lack of Authentication]]'') | ||
|- | |- | ||
- | | | + | | valign="top" | ☐ |
+ | | '''Set a ''strong'' password''' on the administration interface of your wireless router. Again, [[wikipedia:Diceware|diceware]] is a good way to do that. | ||
|- | |- | ||
- | | | + | | valign="top" | ☐ |
+ | | '''Turn off remote administration.''' If your wireless router supports remote administration, ''turn it off'' (unless you really know what you're doing). | ||
|- | |- | ||
- | | | + | | valign="top" | ☐ |
+ | | '''Configure Windows ''not'' to connect to open networks automatically.''' See [http://compnetworking.about.com/od/wirelesshotspots/qt/noautoconnect.htm Do Not Auto-Connect to Open Wi-Fi Networks] | ||
|- | |- | ||
- | | | + | | valign="top" | ☐ |
- | + | | '''On unsecured Wi-Fi use [[#VPN|VPN]]''' (Virtual Private Networking). Otherwise your wireless traffic can be ''snooped and compromised''. ''(See [[Wi-Fi How To#Secure Internet access in a public hotspot|Secure Internet access in a public hotspot]])'' | |
- | + | ||
|} | |} | ||