The cure for WEP insecurity is pretty simple: Switch to WPA. It’s been around for about four years now, so if your wireless router is that recent, it probably supports WPA. Here’s how to switch.<\/b><\/p>\n
by Joseph Moran<\/b><\/p>\n
Last weekend, 60 Minutes did a story on the theft of customer data from TJX Companies, the parent company of such well-known stores as TJMaxx, Marshalls and HomeGoods. That company made big news early this year when it reported that its computer systems had been penetrated, resulting in the theft of credit card numbers and other personal data on a reported 40 million or more customers.<\/p>\n
In the piece, 60 Minutes cited an Canadian government investigation that determined that ground zero for the data theft was a pair of Miami-area stores and that it took place through wireless networks that were using\u00a0WEP<\/a>\u00a0encryption (Wired Equivalent Privacy \u2014 a misnomer to say the least).<\/p>\n Even more interesting was when a security consultant hired by CBS went\u00a0wardriving<\/a>\u00a0in an typical shopping center and found countless WEP-encrypted networks operated by major retailers, just hanging in the air like ripe fruit ready to be picked.<\/p>\n Although we’ve highlighted the dangers of WEP before, these revelations seem like a good opportunity to remind folks that if you’re using WEP to secure (if you can call it that) your own wireless network, then you’re not getting the protection you think you are.<\/p>\n Without delving into the gory technical details regarding WEP’s weaknesses, suffice it to say that with ordinary PC, free software, and a little bit of patience, you can find your way into a WEP-encrypted network in short order \u2014 often in just a few minutes.<\/p>\n The cure for WEP insecurity is pretty simple \u2014 switch to\u00a0WPA<\/a>, which when properly configured is a far superior way to safeguard a wireless network. WPA isn’t exactly new technology \u2014 it’s been around for about four years now, so if your wireless router \u2014 or at least the firmware it’s running \u2014 is that recent, it probably supports WPA.<\/p>\n Here’s How to Do It<\/b><\/p>\n To configure your router for WPA, start by logging into it with your browser, preferably from a computer with a wired connection so your link won’t be disrupted as you make changes. (If you’re not sure of your router’s\u00a0IP address<\/a>, run\u00a0IPCONFIG<\/a>\u00a0from a command prompt and use the address listed next to Default Gateway). Configuration interfaces differ by device manufacturer, but you should find the relevant options under the heading Wireless Settings, Security or something similar.<\/p>\n When you select\u00a0WPA<\/b>\u00a0as your security type (you may also see it listed as\u00a0WPA-PSK<\/b>\u00a0or\u00a0WPA-Personal<\/b>), you’ll see a place to create a passphrase. Unlike a WEP key, a WPA passphrase doesn’t have to be a fixed length \u2014 it can contain anything between 8 and 63 characters. However, you shouldn’t use a passphrase that’s short and easy-to-remember because with WPA, a longer passphrase is definitely a stronger passphrase. As is the case with all passwords, you also shouldn’t use proper names or any word that can be found in a dictionary. If you want some help coming up with a strong passphrase, check out www.yellowpipe.com\/yis\/tools\/WPA_key\/generator.php, which can automatically generate one of various lengths for you.<\/p>\n Your router may also give you the option to choose an encryption type \u2014 either\u00a0TKIP<\/a>\u00a0or\u00a0AES<\/a>. The latter provides better security, but it also requires more CPU horsepower on both the router and the devices that connect to it, and it’s not supported by some non-PC devices. As long as you use a use a lengthy passphrase, TKIP is more than sufficient and should provide better compatibility.<\/p>\n After saving your changes (which will probably cause your router to automatically reboot itself) it’s time to turn your attention to your wireless clients. You can simplify the configuration of PCs by copying your WPA passphrase to a text file on a\u00a0USB<\/a>\u00a0key. This will let you cut and paste it instead of typing it in, eliminating the possibility of typos. If your system running Windows XP Service Pack 2 or Vista was previously configured for WEP it will detect the new encryption type, but you’ll still need to change the settings before you can connect.<\/p>\n In XP, from the\u00a0Choose a Wireless Network<\/b>\u00a0dialog box, click\u00a0Change the order of preferred network<\/b>s, select the network from the list and click Properties. Then for Network Authentication choose WPA-PSK, and for Data encryption, choose TKIP. It’s slightly different in Vista \u2014 right-click the network you’re trying to connect to and choose\u00a0Properties<\/b>, then choose\u00a0WPA-Personal Security<\/b>\u00a0type and\u00a0TKIP<\/b>\u00a0for\u00a0Encryption type<\/b>. Consult the documentation on how to use WPA with non-PC wireless devices like Wi-Fi phones, game consoles or AV gear.<\/p>\n