eero offers three encryption options that you can customize for each frequency band:
- Standard (WPA2): Uses WPA2 encryption only
- Hybrid (WPA2 + WPA3): Allows both WPA3-capable and WPA2-only devices to connect
- Enhanced (WPA3): Uses WPA3 encryption only; devices without WPA3 support cannot connect
Note: The 6 GHz band only supports Enhanced (WPA3) encryption, as WPA3 is required for this frequency.
How do I customize encryption settings?
To customize encryption settings on your eero network:
- Open the eero app and tap Settings in the bottom-right corner
- Tap Network settings
- Tap Encryption
- Select your preferred encryption option for each frequency band:
- 2.4 GHz: Choose Standard, Hybrid, or Enhanced
- 5 GHz: Choose Standard, Hybrid, or Enhanced
- 6 GHz: Enhanced (WPA3) only
When you first access the Encryption settings, an informational message appears explaining how encryption customization works and providing guidance about WPA3 compatibility.
Note: Hybrid and Enhanced encryption may impact the roaming behavior of some wifi devices. If a device has trouble connecting or staying connected, try using Standard encryption.
If you select Enhanced encryption for the 2.4 GHz or 5 GHz bands, a confirmation message appears asking if you're sure you want to use Enhanced encryption, as it may cause certain devices to become unable to connect.
What are the default encryption settings?
By default, eero uses different encryption settings for each frequency band to balance security with device compatibility:
- 2.4 GHz: Standard (WPA2)
- 5 GHz: Standard (WPA2)
- 6 GHz: Enhanced (WPA3)
What is WPA3 encryption?
Wi-Fi Protected Access 3 (WPA3) is the latest standard for Wi-Fi encryption. WPA3 provides added security for connected devices, including an encryption method called Simultaneous Authentication of Equals (SAE) and Management Frame Protection (MFP).
In WPA3, SAE replaces WPA2-PSK (Pre-shared key) mode, providing protection against offline dictionary attacks that can affect WPA2. WPA3 provides forward secrecy, which prevents someone who later learns the network password from decrypting saved older messages.
MFP makes it more difficult for an attacker to pretend to be your access point and attempt a deauthentication attack. A deauthentication attack allows an attacker to kick any of your devices off the network at any time by pretending to be your access point. MFP ensures that clients only listen to management frames from your eero.
What is WPA2 encryption?
Wi-Fi Protected Access 2 (WPA2) is a widely-supported Wi-Fi encryption standard that has been used for many years. While WPA2 provides strong security, it doesn't include the enhanced protections available in WPA3. Most wifi devices support WPA2, making Standard encryption the most compatible option for networks with older devices.
Frequently asked questions
How do I check if a device is using WPA3?
Each connected wifi device indicates whether it's connected using WPA2, WPA3, or without a password (open). To find this information for a particular device:
- Locate the device using either the Home or Devices tab
- Tap the device's name
- Tap Device information
- The encryption protocol the device is using is displayed under Security
What encryption option should I use?
Hybrid encryption (WPA2 + WPA3) offers the best balance of security and compatibility for most networks. It allows both newer WPA3-capable devices and older WPA2-only devices to connect. If you have legacy devices that struggle to connect, use Standard encryption (WPA2).
Why can't I change the 6 GHz encryption setting?
The 6 GHz band requires WPA3 encryption as part of the Wi-Fi 6E standard. This ensures the highest level of security for devices using this newer frequency band. The 6 GHz encryption option appears greyed out in the app because it cannot be changed.
Why is my device having trouble connecting?
Even though Hybrid encryption is designed to support WPA2 and WPA3 simultaneously, our testing has revealed interoperability issues with some legacy devices.
Some legacy devices may struggle to connect to any network with Hybrid or Enhanced encryption. This can present as the device not getting an IP address, not being able to "see" or connect to the network at all, or disconnecting intermittently.
Note: If you're having issues connecting legacy devices, change the encryption setting to Standard (WPA2) in the eero app and see if the issue persists.
Why is my device asking for a password repeatedly?
On networks capable of accessing the 6 GHz band, WPA3 is always present on 6 GHz regardless of your encryption settings for other bands. This can cause devices to repeatedly ask for a password or refuse to roam away from the 6 GHz band.
Note: If you're having issues with devices communicating between WPA2 and WPA3, change the encryption settings to Hybrid (WPA2 + WPA3) for the 2.4 GHz and 5 GHz bands in the eero app and see if the issue persists.
If you notice a device can't connect to eero wifi after changing encryption settings or if you're seeing other symptoms mentioned above, update that device to the latest available software or use an updated device if available.
We recommend contacting the device manufacturer for any devices that have difficulty connecting when Hybrid or Enhanced encryption is enabled.