What Is WPA?

Date First Published: 19th February 2022

Topic: Computer Networking

Subtopic: Network Standards

Article Type: Computer Terms & Definitions

Difficulty Level: 8/10

Learn more about what WPA is in this article.

Short for Wi-Fi Protected Access, WPA is a security standard that was developed by the Wi-Fi Alliance, a non-profit organisation that owns the company name to secure wireless internet connections. WPA is designed to provide better encryption and authentication than the original security standard, WEP (Wired Equivalent Privacy).

In terms of security keys and the methods that users are authorised, WPA is more secure because it allows a 256-bit encryption key of 64 hexadecimal digits instead of a 64-bit or 128-bit encryption key. Encryption keys are strings of characters that are combined together with an algorithm in order to encrypt data into random characters (ciphertext). Longer encryption keys are more secure and stronger because it makes it harder for the encryption code to be cracked, since encrypted text makes use of very complex mathematical formulas in order to scramble text into a mix of random characters.

WPA also makes use of TKIP (temporal key integrity protocol), frequently changing the key that the systems use. WEP did not have this functionality, creating a possibility for malicious users to create their own encryption key to match the one used by the secure network.

Versions

Originally, WPA was introduced in 2003 in response to the Wi-Fi Alliance's definition of WEP as having critical weaknesses and vulnerabilities. The security vulnerabilities in WEP increased over time and it was discontinued by the Wi-Fi Alliance in 2004. Any systems that still use WEP should be upgraded or replaced.

Several different versions of WPA were introduced later on for better security and prevention of unauthorised access to Wi-Fi networks. In 2004, WPA2 was introduced. WPA2 was the newer version of WPA, which uses CCMP (Counter Mode Cipher Block Chaining Message Authentication Code Protocol). It is stronger and much more reliable than the original TKIP (Temporal Key Integrity Protocol). WPA2 also introduced the AES (Advanced Encryption System) and replaced the vulnerable TKIP system that was used in the first version of WPA.

WPA3 was released in 2018, which is the third and newly announced version. WPA3 fixed a vulnerability that allowed hackers to work out what the passwords of users were using brute-force attacks when using public Wi-Fi networks. In addition, WPA3 provides enhanced security for business environments.