What this page covers
Use the strongest documented mode that your device mix supports, without falling back to weak legacy encryption.
Step-by-step workflow
- List affected client types privately.
- Check router and client WPA3/PMF support.
- Choose WPA3 or transition mode from current documentation.
- Reconnect and verify older devices without enabling WEP/TKIP.
Decision table
| Check | What it tells you | Safe next action |
|---|---|---|
| New clients connect, old fail | Mode or client compatibility issue | Use transition mode if supported |
| All clients fail | Security/driver settings may be wrong | Check firmware and credentials |
| Only 6 GHz fails | 6 GHz security requirement may apply | Verify WPA3 and region |
Limits and verification
Changing security mode disconnects clients and may require rejoining. WPA2/WPA3 wording is not identical across vendors.
Official sources
- Wi-Fi Alliance — Wi-Fi security (WPA3 and security context)
- Apple — Recommended settings for Wi-Fi routers and access points (security and compatibility guidance)
Related Router Portal guides
Router security guide · Wi-Fi guide
Keep in mind: Firmware, operating-system menus, ISP policies and regional radio rules can change. Confirm the current official source and exact device before applying a setting.
Our networking steps are lab-tested against standard RFC 1918 private networking protocols across Windows 11 (24H2), macOS Sequoia (15.1), iOS 18, and Android 15. We verify physical device labels and firmware release documentation before publishing gateway instructions. Router Portal is strictly read-only and never requests, intercepts, or logs router passwords.