It seems i have the option but i have a vague memory of someone telling me not to bother with it unless i had a good reason

  • zurohki@aussie.zone
    link
    fedilink
    English
    arrow-up
    21
    ·
    3 months ago

    If your devices all support WPA3, go for it. There’s a good chance older things won’t.

    • BigFatNips
      link
      fedilink
      English
      arrow-up
      6
      ·
      3 months ago

      Most routers include backwards compatibility with WPA2 as a fallback, while newer devices will use WPA3. Should be relatively seamless

      • vzq@lemmy.blahaj.zone
        link
        fedilink
        English
        arrow-up
        13
        ·
        3 months ago

        The drawback is that evildoers can still attack the WPA2 handshakes and can force devices to downgrade, so you’re still getting effectively WPA2 level security until you actually turn off WPA2.

        But if it doesn’t cost you anything, you can just turn it on and make their life just s little bit harder.

          • weker01
            link
            fedilink
            English
            arrow-up
            1
            ·
            3 months ago

            In my case that would mean that over 70% would be in the DMZ… It would be the main network

        • BigFatNips
          link
          fedilink
          English
          arrow-up
          3
          arrow-down
          2
          ·
          3 months ago

          Use Ethernet it’ll connect no matter what wireless security you have enabled

          • femtech@midwest.social
            link
            fedilink
            English
            arrow-up
            2
            ·
            3 months ago

            Yeah, it’s on my list to run some Ethernet from my basement to the attic. Right now I have one wire running up the outside of the wall to the AP.

            • BigFatNips
              link
              fedilink
              English
              arrow-up
              3
              ·
              3 months ago

              Don’t be afraid to add extra APs or switches if necessary

  • TedZanzibar@feddit.uk
    link
    fedilink
    English
    arrow-up
    5
    ·
    3 months ago

    Admittedly it was a few years ago since I last tried, but even in WPA2 compatibility mode I had no end of trouble either getting things to join in the first place or weird stability issues afterwards.

    Maybe things have improved now, but when 2 “just works” and is good enough for most use cases I’ve been reluctant to try 3 again.

  • jecht360@lemmy.world
    link
    fedilink
    English
    arrow-up
    4
    ·
    3 months ago

    Technically, the “best” option would be to VLAN the WiFi network separately from a wired network where all the important devices are connected.

    But honestly, for normal people, that’s over the top. Try WPA3 first and see if you have any devices that won’t work over it. If you run into issues, swap over to WPA2. I generally say start stricter and loosen the metaphorical belt only as necessary.

      • BigDanishGuy
        link
        fedilink
        English
        arrow-up
        5
        ·
        edit-2
        3 months ago

        It sorta depends on your physical security. If you live in a town, then sure, you can’t know who’s eavesdropping. But if you park in my yard, several hundred meters from the nearest public road, then I think we’d notice before you could do any damage.