When I talk on the phone or send text messages, I never need to type a userid and password.
But when I use WiFi I need to use a password.
How is the phone connection secured without a password, and why is that method not used for WiFi?
WLAN/WiFi can be secure when properly configured (this certainly requires a password or key).
Cellphone connections are not really secure. They are encrypted based on a key from your SIM card. This key is also known to your mobile network operator. You do not need a password, but your communication can be intercepted and eavesdropped on by your mobile network operator and law enforcement. The A5/1 encryption used for GSM is actually completely broken.
The reason why this is not done for WiFi is because you do not want an extra SIM card and you do not want your ISP to specify your password/key for WPA2.
You always need a key, password or certificate to authenticate and key/password to encrypt your communication. This information can be stored in various places, like your SIM card or your brain.
Additional information due to comments:
There are several reasons why using SIM cards for authentication to all WiFis in general would not work.
Today it would be possible to use a SIM and manage access locally for a WiFi, but this means the SIM is just a substitute for authentication by password and the setup isn't simplified.
Your idea would work for access points operated by your mobile carrier, but as we already have mobile internet through LTE and similar technology (which is not the same as WiFi!), it will not take a central role . Especially since the mobile carrier can charge money for mobile internet usage, which is obviously in their interest. If you have a subscription to special services, some mobile carriers and ISPs offer access to hotspots, that can be accessed through EAP-SIM (thanks billc.cn).
WiFi can be easily sniffed with cheap hardware + software and only properly encrypted WiFi helps against this.
But phone calls are not much better:
As for messaging, it depends:
Apart from that you would not even need a secure transport layer (i.e. encrypted WiFi) if your communication is already properly end-to-end encrypted. This includes HTTPS connections, PGP or S/MIME encrypted mails, various messaging solutions or virtual private networks (VPN). So if you use only these (very unlikely) then you could actually mostly ignore WiFi security (meta data could still be sniffed, but no content).
WiFi networks can be secured using proper algorithm and secure password. For that I point you to these tips.
GSM uses encryption to make its data transmission secure, be it SMS or a Phone Call but this is nowhere near perfect. There are some flaws (see cryptanalysis part) in the encryption algorithm used and MITM using a rogue BTS antenna is also possible.
The way authentication happens in GSM without entering a password is as follows:
There's an IMSI Number along with a Key stored in your sim card, written by your MNO or sometimes called the carrier.
In the WiFi Scenario there's no single Carrier that gives you wireless service and there's no sim card with a key and id that's also known to the wireless service provider so the same scheme can't be implemented there.
Using your sim card, you can only access the network provided by your carrier, and not others (Let's forget about roaming to keep it simple). In the WiFi scenario, I have my own wifi which only works with my devices and not with my neighbors, I also have my tablets(W/O Simcards) and my laptop and also my PS4 and lots of other devices, Wifi Connectivity is one of the 1000 features these devices provide. Your suggested scheme requires a specific module being added to all these devices, and then I will have to go ahead and register these devices in my network somehow, this doesn't extend well. Wifi devices are made to be able to easily join different WiFi networks whereas GSM devices (Sim cards) are designed to join a single network and stick with that.
Thank you for your interest in this question.
Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).
Would you like to answer one of these unanswered questions instead?