WPA3 for Wi-Fi systems is generally acknowledged to be more secure than WPA2. For example, it introduces SAE with the Dragonfly handshake, in an attempt to close the door on the kind of brute force dictionary attacks that WPA2 could be susceptible to. However, even WPA3 has its vulnerabilities. Perhaps the most risky of these include:
- WPA3 Transition Mode, meant to support a transition period where some devices are not yet WPA3-capable and so, could be exploited to perform downgrade attacks. One canonical way to do this would be with a rogue AP that forces WPA3-capable devices to downgrade to use WPA2 with the rogue AP (by taking advantage of the genuine AP's use of WPA3 Transition Mode).
- Side-channel attacks on Dragonfly.
Here's a recent paper that analyzes the security vulnerabilities in WPA3.
While IEEE SA and the Wi-Fi Alliance are working on fixes, together with the vendors, what do we do in the meantime, for the following two cases?
- I have a WPA3 capable Wi-Fi device/phone
- I administer a Wi-Fi network in a small office/home environment. All the APs are WPA3-capable.