Password · guide

What is a network security key, and what decides its worth

By Alberto Gulotta · Updated 7 September 2026 · 12 min read

What is a network security key: it is your Wi-Fi password, under the name Windows gives it. The same string also travels as network key, wireless password, WPA key and Wi-Fi password. What is worth knowing beyond the synonym is which protocol is protecting it, because that decides how much the password is doing.

The number that actually answers “is my Wi-Fi password strong enough”. It is not the length. It is how many guesses an attacker gets, and that is a property of the protocol, not of the characters. Under WPA2-Personal the secret is a Pre-Shared Key, and an attacker who has recorded one handshake can sit somewhere else and try candidates at machine speed. The Wi-Fi Alliance’s own WPA3 document describes what replaces that: “WPA3-Personal replaces the Pre-Shared Key (PSK) used in WPA2-Personal with Simultaneous Authentication of Equals (SAE), delivering more robust password-based authentication”, and under SAE “the only method for determining the network password is through repeated active attacks in which the adversary gets only one guess at the password per attack”. Unlimited offline guesses against one guess per attempt, on the network, in front of you: that is the whole difference, and the password never changed.

Which is why the Alliance says you may pick an easier password, not a harder one. The same document draws the consequence itself: “because WPA3-Personal is resistant to offline dictionary attacks, users can choose passwords that are easier to remember and easier to enter, while still retaining a high level of security.” It is the opposite of the usual advice, and it follows from the arithmetic above rather than from anybody’s opinion. The catch is that it holds only when the network is actually running WPA3-Personal — which is a setting on the router, and on most home networks is still a mixed mode kept there for the sake of an older device.

Why an old device sometimes refuses a correct password. This is the practical consequence of the protocol row, and it looks nothing like a protocol problem when it happens. Wi-Fi Alliance lists among the properties of a WPA3 network that it will “disallow outdated legacy protocols” and “require use of Protected Management Frames”, and its WPA3 document says what a network does about a device that cannot keep up: “the network will reject association by any client device not adhering to these policies.” Reject, not complain — so a printer or a smart plug from several years ago fails in exactly the way a wrong password fails. The key is right, the network is right, and the fix is a setting on the router rather than another attempt at the password.

What this page deliberately does not do. It does not walk through finding the key on each system, because that question already has its own page here and repeating it in two places would mean two versions to keep true. What belongs here is the part that page does not carry: that the phrase is a synonym, that one similar-looking phrase means a physical object, and that the same characters are worth different amounts depending on a setting that lives on the router.

That the Windows box labelled “Network security key” holds the Wi-Fi password is quoted from Microsoft’s own instructions, read on 7 September 2026. The statements about WPA3 being mandatory, disallowing legacy protocols and requiring Protected Management Frames come from Wi-Fi Alliance’s security page; the sentences on SAE, on one guess per attack, on offline dictionary resistance and on rejected association come from its own WPA3 Technology Overview, read the same day. The list of synonyms is ours, taken from the screens that print them.

Not covered here. It will not walk through finding the key on Windows, macOS, Android and a router, which is a separate page here for the good reason that keeping one copy of that answer true is hard enough.

It will not cover enterprise networks, where there is often no shared key at all and each person signs in with their own credentials.

And it will not tell you to change the key today. It will point out that a key which has never changed has been given to everyone who has ever visited. What holds instead is simple: the protocol statements are quoted from the Wi-Fi Alliance’s own security page and WPA3 document rather than from a vendor summary, and the name itself from Microsoft’s instructions, with the date each was read.