WPA2-Personal security

My iPad Air 2 has started telling my internet security is weak "WPA/WPA2 (TKIP) is not considered secure. If this is your Wi-Fi network, configure the router to use WPA2 (AES) or WPA3 security type."


My TP Link router is set to Authentication Type: WPA2-PSK and Encryption: AES.

Why am I getting this message?

I have just installed a router supplied by my ISP, again with WPA2-Personal security and have been assured it is fully up to date but I get the same message.


My iPhone SE2020 does not yet show this message on either router.



iPad Air 2, iPadOS 14

Posted on Nov 9, 2020 9:13 AM

Reply
Question marked as Top-ranking reply

Posted on Nov 10, 2020 10:01 AM

Nothing is broken - but your WiFi network may benefit from update in either settings or improved hardware...


Your iPad is no less secure today than it was prior to the update to iPadOS14. However, your iPad is now better able to [warn] bring to your attention security deficiencies of your WiFi network and iPad settings.


This support page will describe the more secure (recommended) settings for WiFi:

Recommended settings for Wi-Fi routers and access points – Apple Support


It is possible that your WiFi Router is too old to be (or not capable of being) configured for more secure settings. As such, you can either configure the most secure settings that your Router will support - or replace your Router with something more advanced that provides better security configuration options. 


Whilst WPA3 is the newest standard, you should aim to use WPA2 (AES-PSK) as a minimum. Some Routers seemingly continue to support the insecure/deprecated TKIP standards - even when apparently configured for WPA2 operation; TKIP will definitely cause a security warning to appear.


There is a also new privacy feature included within iOS/iPadOS14 that hides your physical MAC Address - and instead uses a randomly selected Private MAC Address. This feature can be enabled/disabled on your iPhone/iPad for each configured WiFi Network. This feature also has bearing upon the appearance of the Weak Security notifications.


More information about this new feature can be found here:

Use private Wi-Fi addresses in iOS 14, iPadOS 14 and watchOS 7 – Apple Support


If you are unable to employ more secure security settings on your WiFi network, you might consider replacement of your WiFi network equipment, such as your WiFi Router, with more advanced equipment. However, if the router is provided by your ISP, this may not be practical proposition. A potentially cheaper and more flexible approach might be to add an additional upstream WiFi Router, of WiFi Access Point (AP) that meets the required standards.


I hope this information provides some helpful insight into ways to resolve the WiFi Security warnings that you might observe after updating to iPadOS14.

6 replies
Question marked as Top-ranking reply

Nov 10, 2020 10:01 AM in response to birder22

Nothing is broken - but your WiFi network may benefit from update in either settings or improved hardware...


Your iPad is no less secure today than it was prior to the update to iPadOS14. However, your iPad is now better able to [warn] bring to your attention security deficiencies of your WiFi network and iPad settings.


This support page will describe the more secure (recommended) settings for WiFi:

Recommended settings for Wi-Fi routers and access points – Apple Support


It is possible that your WiFi Router is too old to be (or not capable of being) configured for more secure settings. As such, you can either configure the most secure settings that your Router will support - or replace your Router with something more advanced that provides better security configuration options. 


Whilst WPA3 is the newest standard, you should aim to use WPA2 (AES-PSK) as a minimum. Some Routers seemingly continue to support the insecure/deprecated TKIP standards - even when apparently configured for WPA2 operation; TKIP will definitely cause a security warning to appear.


There is a also new privacy feature included within iOS/iPadOS14 that hides your physical MAC Address - and instead uses a randomly selected Private MAC Address. This feature can be enabled/disabled on your iPhone/iPad for each configured WiFi Network. This feature also has bearing upon the appearance of the Weak Security notifications.


More information about this new feature can be found here:

Use private Wi-Fi addresses in iOS 14, iPadOS 14 and watchOS 7 – Apple Support


If you are unable to employ more secure security settings on your WiFi network, you might consider replacement of your WiFi network equipment, such as your WiFi Router, with more advanced equipment. However, if the router is provided by your ISP, this may not be practical proposition. A potentially cheaper and more flexible approach might be to add an additional upstream WiFi Router, of WiFi Access Point (AP) that meets the required standards.


I hope this information provides some helpful insight into ways to resolve the WiFi Security warnings that you might observe after updating to iPadOS14.

Nov 11, 2020 2:29 AM in response to birder22

Your router being set to AES doesn’t, necessarily, indicate that TKIP is disabled - and this appears to be the problem for many that report recurrence of the warning. The message is an advisory, but it only appears because there is something that your iPad has detected.


To repeat and amplify my earlier comment - your iPad is no less secure today than it was prior to the update to iPadOS14. Your WiFi network/router settings are potentially the weak link - and your iPad will generally identify and list the cause in iPad Settings.


Settings > WiFi > [Your WiFi Network / SSID] - tap the “i” icon - at the top of the page should be an explanation of the detected condition that causes the Privacy Warning.


Your iPad may also suggest that Private Addresses (a setting for iPad - not the Router) are not enabled. The link to a description of this feature is included in my earlier reply.



Nov 11, 2020 12:38 AM in response to LotusPilot

Thanks.

Having reinstalled my Internet Service Provider’s own router and spoken with them this morning they have assured me it is set to AES, however I still get the ‘weak security’ message on my iPad as I do when using my TP-Link router which is set to WPA2-PSK (AES). Strange!

Is the Apple message simply advisory or is it actually detecting a weakness?

Nov 11, 2020 4:25 AM in response to LotusPilot

Many thanks for your suggestions, however I am still not sure about the validity of the “weak security” message on my iPad.


Bear with me and I will explain:

A few weeks ago the Wi-Fi network logo on my Windows 10 laptop showed a warning sign beside the SSID name and a message saying “This Wi-Fi network uses an older security standard that’s being phased out. We recommend connecting to a different network”.


In response to this message I logged into the settings on my TP-Link router and, yes, the encryption was set to TKIP.

I reset things so that Authentication Type = WPA2-PSK and Encryption = AES

After rebooting the router and laptop the Wi-Fi logo displayed the usual SSID name, locked and secured and has done since so everything appears to be up to date.


As we know, after the iOS 14.1 update many iPads began to receive the weak security message including mine using updated settings on my TP-Link router. I swopped my TP-Link router for the one supplied by my service provider and contacted them where their IT team ran a check and confirmed the rooter was set to AES. So I am at a loss as to what my iPad is detecting after using two routers each employing AES!


My iPhone (currently iOS 13.5) does not show a weak security problem.


Sorry to ramble on but I am a simple user with minimal knowledge of these things.


This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

WPA2-Personal security

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.