Should you be using WiFi 7 or WPA3? Best Wi-Fi setup?

[@davidbombal]

Is your WiFi good Or bad? Is it secure? Are you making these mistakes? Big thanks to Ekahau for sponsoring this video! Learn more here: www.ekahau.com/learn/david-bombal/ // Matt’s SOCIAL // X: x.com/mattstarling LinkedIn: www.linkedin.com/in/matthew-starling-03913633 // Mac’s SOCIAL // X: x.com/macderyng LinkedIn: www.linkedin.com/in/macderyng // David's SOCIAL // Discord: discord.com/invite/usKSyzb X: twitter.com/davidbombal Instagram: instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal KZbin: www.youtube.com/@davidbombal // MY STUFF // www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: [e-mail] // MENU // 00:00 - Coming up 00:59 - WPA3, why should we use it? 02:41 - Which security certification standards to avoid 04:37 - Best practises when using WPA2 05:33 - Alternatives for PSK 08:06 - Simultaneous Authentication of Equals (SAE) explained 09:06 - Even more security with WPA3 11:04 - Management Frame Protection explained 11:58 - Deauth attacks won't work on WPA3 13:20 - Summary of WPA3 15:07 - 6GHz and bands explained 17:57 - WiFi 7 explained 21:13 - WiFi 6 vs WiFi 7 22:12 - Home & Enterprise WiFi 24:05 - "Client devices are the problem" 24:55 - Ekahau Sidekick 2 explained 26:26 - Reach out to Matt and Mac on socials 26:50 - Conclusion wifi wi-fi wifi 7 wifi 6e wifi 6 wifi 5 wireless iphone android kali linux kali linux 2020.4 wifite wpa wep wps wpa2 wpa3 hack hacker hacking ethical hacking kali Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #wifi #iphone #android

[@stonefx83]

I suppose a 40-character alphanumeric+symbol WPA2-PSK should be sufficient. :)

[@LakshyaGupta-n3o]

Pls make a video on How to hack a alphanumeric wifi password

[@linguist8623]

Command & Conquer Generals: PLA Hacker Unit: "No System is Safe". "There is Always a Way In." So, joking aside, no system is foolproof. You know that. Thus your question is technical and contextual. 🎉

[@stefanmasnica2189]

Pls can you show mě how to root my phone i Have cat phone S52

[@mattstarling90]

Thank you for having us David, this was a great discussion and we really enjoyed coming on the show!

[@osunlanaadeleke4695]

Hi, How can I purchase this device?

[@davidbombal]

Thank you for sharing your knowledge with the community Matt!

[@AndreuPinel]

I love David questions to all his guests because even though it's obvious he already knows the answers, he makes them anyway for the average viewer, who probably won't. This makes his videos extremely friendly and didactic.

[@davidbombal]

Thank you! My job is to make sure that we all learn together (even when I already know the answers) 😀

[@BillAnt]

Well after this, I'm sticking with wired Ethernet, no bandwidth or interference. lol (jk) What's puzzling to me, is what they said about your wireless network being only as good as the slowest device on the network. I would have expected WiFi 6 or 7 to be able to segregate slower devices from fast ones to have better performance.

[@Traumatree]

Some clarifications here as what is said @19:36 for WiFi 6 is not true: WiFi 6 operates on 2.4GHz and 5Ghz but NOT at 6GHz (en.wikipedia.org/wiki/Wi-Fi_6). This is WiFi 6E that adds the 6GHz band and WiFi 7 is able to use the 3 bands together to even higher throughput.

[@GYTCommnts]

Great video! Thanks! One thing about bands sometimes is not considered is long range and wall penetration. All the great things of 5 & 6 GHz can become meaningless if you can't connect to them. Extending that bands could be expensive for a home user depending on the situation. But 2.4 can reach when other bands can't (in a home scenario). So, I think is still relevant for reach and "wall penetration". It depends of the construction methods used on the country, but many countries have "solid walls" construction methods that prevent WiFi to reach, and you need to extend the WiFi network, except in many cases 2.4, that can reach anyway.

[@user-uc9pn4gd8m]

What's the best router for 2.4 coverage?

[@BillAnt]

You could use 2.4 GHZ between the main router and mesh extenders, then 5 or 6 GHz to connect devices to them.

[@Bud-i13]

It's a great discussion that provides valuable information. Nowadays, many home users connect their IoT devices to the internet using Wi-Fi. So, securing a home Wi-Fi connection is also important, just like securing an enterprise wireless network.

[@Ezra-sc3yw]

Superb content. A lot of technical terms make me realize that I know nothing about Wi-Fi at all, which is eye-opening. Excited to discover more. Thanks for the fantastic work, Mr. David. Keep it up!

[@TrueToCause]

Speaking as someone in the process of upgrading his home network, I really appreciate this video!

[@Fox-Paw]

Really enjoy these in depth topics! Thank you

[@davidbombal]

Happy to hear that! You're welcome!

[@pythonaddict-u7l]

Great job David! This is my go to podcast for times when I’m bored.

[@Abduselam.m]

Thanks so much David amazing topic

[@davidbombal]

You're welcome! Glad you enjoyed it

[@robertvondarth1730]

For home, one could run an isolated subnet for legacy devices, while bolting in newer tech

[@jerrysanchez8361]

Thank you for this video. It was brilliant I am a net engineer WPA3 is around the corner for us

[@neel4fun]

very informative & detailed. Must watch for all (WiFi) connected users (possibly everyone)

[@schrodingersmechanic7622]

Perfect timing as I'm overhauling my wired and wireless network at home. Just got my ubiquiti wifi7 AP's in, even though nothing I have currently uses that (yet). This is gonna be a treat

[@BillAnt]

Problem with getting the latest bleeding edge is overpaying for it, a year or two from now it will be half price. Also, there could be hardware bugs which get fixed in time, software is usually upgradable. And lastly, few if any devices are using the latest WiFi version.

[@phabeondominguez5971]

​@@BillAntyes all that is the true price to pay, but being the first with the latest tech? PRICELESS

[@ivanmytube]

0:00 I scanned and found over 100 Wi-Fi sources in 2.4GHz and 5GHz combined. The interference stays over 60% at all time. Wi-Fi 6E gives significant improvement in stability, reliability and speed. But the ultimate solution is to move wisely to wired connections and gradually moving from GbE to 2.5GbE and even 10GbE for home networking.

[@martekllc352]

Based on your videos, I’d say don’t use WiFi until WPA4 is released, and when law enforcement actually enforces cybercrime laws.

[@jmr]

Great talk but I'm a little disappointed you didn't ask how to prevent downgrade attacks. Right now all I got is network segmentation and trying to force WPA 3 on a separate network.

[@harshthakkar5720]

Hello sir i wanted to ask you a question that data recovery after factory reset from google pixel4 without backup is possible or not? Can you plzz guide me sir 🙏🙏🙏

[@Lazllb]

I love how you asked him if we should be ripping out our 6E routers from our homes 😂

[@gamereditor59ner22]

Thank you David and keep it up!

[@davidbombal]

Thank you! You're welcome!

[@gamereditor59ner22]

@@davidbombal You welcome!

[@SnarkyDark]

Amazing insights regarding the wireless space!

[@billx4266]

Im glad that WPA2 is still safe to use

[@LakedaimonII]

Quite easy to follow even at ccna level. Great video!

[@borisvokladski5844]

Maybe I missed it, but what is the recommended length of a WPA2 password ?

[@newstar346]

Anything above 14 random characters with upper and lower case and symbols will make it harder (take longer) to crack. Change your password every couples of months. Use WPA2 with AES encryption

[@borisvokladski5844]

@@newstar346 thanks for the reply. I think it is time to update my WiFi password.

[@jameswatkinsiii7834]

Government agencies, have a 15 character length minimum and no repeating characters. Also, no cracked passwords ever contained a empty space ie the space bar. But not all systems will allow that as a character.

[@MrPir84free]

Don't use substitution either. Generally, the longer the password, the better; it's also better to use 2,3 or 4 words rather than one, be complex and if possible change it out every now and again. Substutition: Let's say part of my password is HIRE.. Don't use H!r3 or hir3 ;

[@immersivebeats]

Amazing...thank you for making Cyber in South Africa better, I think a lot look down at us when it comes to Cyber

[@Frank-sy3li]

Great channel. Great episode.

[@davidbombal]

Thank you!

[@mccormicksteven]

Really good, technical conversation.

[@vishalpatras6951]

It's such a new thing for me.. Perfectoo keep it up bro :)

[@GiC7]

Thanks, question? Are we safe using the 2.4 ?

[@stan464]

Yes. It's limited in Bandwidth but as long as it's running WPA2 with a strong key, you are fine 😊

[@ambrosebeavers]

I don't think deauth works on wpa3. Due to dragonfly technology

[@alonzosmith6189]

Thanks for sharing, good information.

[@davidbombal]

Glad you enjoyed it!

[@Cyber_realm]

Happy to hear more from them

[@Traumatree]

The question I've got a lot recently about WiFi is "What happened when your mobile devices leave WiFi and switch back to your cellular network. How safe are the the communications there and are they as encrypted as WPA3 for example?".

[@aquatrax123]

Cellular encryption would depend out how your carrier has it configured. Done correctly, cellular encryption would be much stronger due to the fact that is uses the sim card to facilitate encryption rather than a shared password that may not be strong. The issues with cellular is your phone is designed for backwards compatibility meaning that your phone will happily connect to a rouge tower better known as an IMSI catcher. With that all said, these are examples of man in the middle attacks which all modern computers and phones have protection against with https/TLS. These are more academic attacks rather than attacks used in the wild.

[@nioinsane]

You did dirty to the OGs WRT. That's some good router there if you use openwrt, after all these years relative good performance or good as an AP.

[@LocalAuthorityy]

I love the way you ask questions endusers are willing to know about.

[@triodisc4198]

Thank you sir for this informative video.

[@LocalAuthorityy]

Great video man❤

[@JayGee824]

Hey David great work..i had a question regarding an OS..

[@CradleofLifeSA]

As I’m writing this there’s been pure wifi drama from malicious actors! Can’t access the VPN, You Tube…🙄 As a older person we need better & affordable supports when online. Awesome device❤

[@jameswatkinsiii7834]

Let me say David you are a great mentor for me and this question is for my own learning purposes so any guidance you could give is appreciated. Have all the vulnerabilities been patched in WPA3, I thought the Dragonsblood vulnerability needed the complete rework of the protocol? And it wasn't just one there were multiples. Did they all get solved? The WiFi Alliance was a ........slow to comment about the issues.

[@rikoskokos]

great review

[@dimiturmladenov3618]

It's a dumb quesetion, I know, but is wpa3-enterprise more secure than wpa3-personal, since the guys said wpa3-enterprise is basically the same as wpa2-enterprise?

[@stupedcraig]

How many ISE PSNs should I deploy for my house?

[@linuxxxunil]

What about using a QR code for the password. Is that ok ?

[@stan464]

QR Codes can be Decrypted with a QR Scanner (some phones have it inbuilt)

[@oSnapMillerTime]

A lot of devices dont support WAP3

[@Srikanth-lb3gl]

Hi, Sir, I want to use radius server for my wifi users/ and which one is best in open source and also each user should login with diffrent password and auto logout in 1hr or 2hrs, please suggest the same Thank you

[@balajisharathkumar9753]

can you cover topics on other networking protocols such as Modbus etc automation protocols

[@rami.0092]

Well done Sir👍

[@andljoy]

Tips. disable all supported and advertised rates below N on 2.4 make your 2.4 beacons slower than your 5ghtz beacons this will force older devices that support a but not ac onto 5ghtz. It wont break old devices. If you are running multiple SSIDs have a SSID for all your old crap that only supports PSK and give them shitty coverage on only 2.4 to force people to upgrade. The best band steering is to make your 2.4 crap! Only transmit it on some APs

[@willyum-N]

Hi David ❤

[@davidbombal]

Hello!

[@willyum-N]

@@davidbombal thx for making it easy for us to learn 💚

[@komaboi19]

What--no drawing to win an Ekahau Sidekick 2, David? 😅😅

[@vanadiumV]

AES256 with Good password is uncrackable

[@LackofFaithify]

I doubt wifi 7 will be most beneficial for home users. Most of the smart home gizmos and gadgets don't exactly use the most up to date wifi and your average user isn't going to be going through to try and replace all that junk just so everything uses wpa3. If they even know what wpa3 is tbh. And we all know how many industrial type and other slow moving industries operate: if it's 30 years old and it more or less works, no we aren't going to pay to replace it. If you want a secure business wifi network, the best way to do so is to stop all BYOD situations. Have an independent wifi network everyone can connect their personal devices to so you don't have to fight that fight nor spend the money to give everyone their own company phones, etc... And wire all the things: if something doesn't absolutely have to have wifi, it shouldn't, and if it does, find a new something.

[@jamilrayburn83]

Completely agree I just commented the same thing kinda ....sorta .... But agree with your overall perspective with avoiding problems and approach on wired moreso than dependency on wireless everything possible just .....cause.... 😮😂🤦🏽‍♂️ "Its wireless capable tho BRO! the best and only way, DuH!" Literal same exact statement I've overheard and been told to with true, "im right no matter what" type of feelings/belief and overall vibe!

[@MrPir84free]

The smart approach, even for home users, would not be to try to replace all things that use WPA2; it would be to isolate all devices that use WPA2 and limit their access to other critical pieces of the network. For example, put all IOT devices, which are typically WPA2, on a dedicated wi-fi network that does not allow communication between devices and only allows for internet access. For all other devices that are WPA2, put them on a dedicated network, preferably with network isolation and allow network access, preferably over a VPN. For a home network this is not likely as possible, unless the owner is more technically savvy & capable.. The challenge would be then to replace IOT devices with IOT devices that are WPA3 capable, and the same for older devices that aren't WPA3 capable. Poking holes into the firewall between zones is also a possible path to help protect the main network. Currently WIFI 7 is only beneficial IF you have new devices capable of WI-FI 7. However, my personal feelings is that WIFI 7 is essentially in a development phase, and while some devices might work right now, later on, the standard might evolve, and early adopters will end up with less compatible devices anyways; so 6 / 6E makes more sense.

[@MrPir84free]

Working IT, as a profession for the past 20 years, I see the business side as well. At work, their approach is to put all devices onto a guest network, even at work locations, and configure the company devices to use a VPN to provide access to network resources. They use a ZTA ( Zero Trust Architecture ) for this protection; essentially a VPN back in to access anything. BYOD is still in play; if you have a relatively high turnover rate, equipment replacement and equipment loss is a thing; using BYOD for phones/tablets certainly is alive and well. AVD's (Azure Virtual Desktop ) is being used so users can work from home with their own devices ; the bigger the company, the more impact it makes. With nearly 10,000 users, even if only 1/2 to 2/3rds use BYOD, the cost savings is certainly there; go to a larger environment with about 40,000 users, the savings is even larger. On iphones/android phones/ tablets, the devices are partitioned thru MDM ( Mobile Device Management ) which allows more control over the "work" partition. We don't try anything similar, yet, on laptops or desktops that are owned by users; we usually go the AVD route. That may change in the future; not certain. The situation at work is ALWAYS evolving; it changes frequently.

[@JonathanSwiftUK]

Yeah. Long (passwords) is relative, do you mean 14 characters, or 20, 32 or even 63? The devil is in the details.

[@mytewahedo]

hey, I love your show very informative. I have a question or a suggestion can you make a video for the average Joe.how to send email ot text messages,sensitive documents with text message or email so , whatever you sending is very secure and also after you send it probably will expired after a couple days and also with encryption with the encryption also can be expired in certain days.

[@Ferocious_Cat]

The honeypot : 😅

[@SplitZeroOne]

6Ghz also has less penetration through walls and such?

[@shubhambhanot5547]

🎉🎉🎉

[@stan464]

Dont believe wpa1 is ultra crackable like WEP. you would still need to run Brute force or Rainbow Tables against it. Im sure that was still the case??

[@neffexmegh]

I'm doing network engineer course and your ccna + ccnp playlist helping me a lot👀✨❤️ i just love your content sir✨👀 can you increase some videos in comptiA security+ because I want to learn more about that course👀✨❤️ by the way I'm your biggest fan 🤩❤️

[@arturklarecki7256]

Let’s test how secure is Mac’s wifi. I live one house away from his. I could grab handshake and send to David to brute force it😂

[@SplitZeroOne]

millions of billions of devices?

[@cspahn3221]

the audio is slightly out of sync for me between the different ears

[@SplitZeroOne]

HTTtp?

[@joopterwijn]

Old devices,…. So HP printers only using 2.4 ghz? 😂

[@stan464]

2.4ghz lacks bandwidth but does pretty well with longer ranges. It can suffer from interference sometimes though.

[@kev3226]

WPA2 pre-shared key is not secure. The hackers found the long encryption key so fast, like they intercepted the handshake.

[@jamilrayburn83]

Respect the basics and life experiences stay analog asf Faraday bags fir what is valuable...ImO....i still try to be analog as possible from djn real 12"wax vinyls mostly n my studio to my ways with all aspects of life that we all use on a daily basis...like washer/dryer, fridge, oven, light bulbs and so much more...no roomba EVER...nor a ring device...etc etc I feel no need to have alexa and every other AI "helper" that is constantly pushed into every aspect of daily life. Human beings are so reliant on "smart devices" that they can no longer get by in everyday life without having them in their pockets at all times!!!! Crazy how most people will denie that honest and factually based Statement.... sadly I wish it wasn't wrong. But go navigate through a unknown place without ur phone or any location help....USING only a basic paper map. Most young people have no clue what or how or where to start! 😂😂sad but true! @ me if im wrong and see how you can prove it!! Fr fr 🤙🏽✌🏽

[@Nobody-vr5nl]

If only there was more than 1 wifi7 router available.

[@RichardBaran]

Omg I neee one!

[@SplitZeroOne]

the benefit of wifi7 is 6ghz even if wifi6e also supports it? I dont get it... these guys are fakes

[@RobbyPedrica]

Quite a lot of contradictory info in this session.

[@Anonymous-gt7ok]

2nd ❤❤

[@Amirl.b]

Crack PMF frame

[@carsonjamesiv2512]

COOL!

[@kylonmiller631]

Every like this comment if you want to see the (HID Omnikey)on the channel LIKE IF YOU WANT TO SEE THIS

[@kylonmiller631]

Like it up

[@bonfirehost]

1❤❤❤

[@davidbombal]

Thank you!

[@joecizin9357]

👍👍

[@richardshalla]

That was all Greek to me.

[@tradeing-z9w]

❤❤

[@bronxandbrenx]

M&M's

[@LakshyaGupta-n3o]

69th comments My request is that please make a video on how to hack a wifi which have alpha numeric password

[@LMGraph]

1st!!!!

[@chigga5years173]

Here have some cake 🎂

[@davidbombal]

You're very close!

[@peerpede-p.]

My solution is; don´t use WiFi at all. cables is GOD...

[@jamilrayburn83]

Respect that....i still try to be analog as possible from djn real 12"wax vinyls mostly n my studio to my ways with all aspects we all use on a daily basis...like washer/dryer fridge oven light bulbs and so much more...no roomba EVER...no need to have alexa n every other AI "helper" that is constantly pushed into every aspect of daily life. Human beings are so reliant on "smart devices" that they can no longer get by in everyday life without having them in their pockets at all times!!!! Crazy how most people will denie that honest and factually based Statement.... sadly I wish it wasn't 26:39 26:39 26:39

[@peerpede-p.]

@@jamilrayburn83I have Internet, but no TV or Radio, and I listen to my old vinyl records often. I don´t reject tech, but as anold guy, I prefer the simple things, build by men an not robots.

[@jamilrayburn83]

Yup I am with you.... I am well versed with IT and experienced in building and working on all cpu's. But I am a seasoned old 40 currently and I hate... no I highly dislike... how this world is changing for the worse moreso because of advances in technology. Ex. Socially driven people are no longer understanding that a smart phone does not make you smart nor does it make you a social butterfly or even an active person within society. ImO that is.... I've witnessed absolute silence and zero common human interactions, in social settings people have panic attacks or similar problematic issues when they have no little device (smartphone) to stare at and filled with nothing but pointless unguided and mostly unnecessary useless applications or something to scroll through. It kills me seeing the youth and even college kids think nothing of it. Nothing normal is going on in the world as a whole anymore. I could go on and on. But it's not my job to fix stupid or help others who can't be wrong about how they're soooo social! #facts @ me if I'm wrong please!!!

[@jamilrayburn83]

Overall we are in agreement Sorry if I came off rather aggressive. Not pointed at you whatsoever. My Apologies sir. 🤙🏽🧠✌🏽

[@peerpede-p.]

@@jamilrayburn83Don´t worry, the old Rhino have thick skin 🦏

[@medlo850]

first

[@davidbombal]

Very close!