# Securing Your WiFi from Neighbours: WPA3 and Disabling WPS

Source: https://urbanx.co.za/knowledge-hub/competitive-security-edge-config-continuity/wifi-security-wpa3-wps

**Answer:** Disable WPS immediately — its 8-digit PIN can be brute-forced in minutes. Upgrade to WPA3 (SAE/Dragonfly Key Exchange) which makes offline dictionary attacks mathematically impossible. Use MAC filtering as an additional identity layer and segregate IoT devices to a Guest Network.

Part of [Competitive Security, Edge Config & Continuity](https://urbanx.co.za/knowledge-hub/competitive-security-edge-config-continuity) · 11 min read · by UrbanX Edge Security & Resilience

### Securing Your WiFi from Neighbours: WPA3 and Disabling WPS

Living in a high-density South African residential complex—whether it’s a modern apartment block in Sandton or a gated estate in uMhlanga—comes with a specific set of networking challenges. While you can control the hardware inside your four walls, you cannot control the "invisible" data leaking through them. For a competitive gamer, an unsecured wireless network is more than a privacy risk; it is a direct threat to your latency. Within the framework of [Competitive Security, Edge Config & Continuity](/knowledge-hub/competitive-security-edge-config-continuity), securing your wireless "Edge Layer" is the only way to ensure your neighbours aren't inadvertently sabotaging your rank.

In the South African context, "WiFi theft" is often less about a neighbour trying to save money on a subscription and more about "background bleed." If a neighbour’s device automatically connects to your router because of a weak password or an enabled WPS button, their background iCloud backups and Windows updates will saturate your upload, leading to the dreaded ping spikes we aim to eliminate.

#### The Evolution of Encryption: Why WPA2 is No Longer Enough

For over a decade, WPA2 (Wi-Fi Protected Access 2) was the global standard for wireless security. However, as compute power has increased, so has the vulnerability of WPA2 to "offline dictionary attacks." In these attacks, a malicious actor captures the "handshake" between your PC and your router and uses a powerful GPU to guess your password at a rate of millions of attempts per second.

#### Enter WPA3 (The 2026 Standard)

WPA3 is the most significant upgrade to wireless security in twenty years. If you are using a modern Wi-Fi 6 or 6E router, you should verify that WPA3 is enabled in your settings.

Why is WPA3 better for gaming security? WPA3 replaces the vulnerable "Four-Way Handshake" of WPA2 with a much more secure protocol called Simultaneous Authentication of Equals (SAE), also known as the Dragonfly Key Exchange. This makes it mathematically impossible for a neighbour to crack your password through offline brute-forcing, even if you use a relatively simple password. It also provides "Forward Secrecy," meaning even if an attacker somehow discovered your password today, they could not decrypt data you sent yesterday.

By upgrading your encryption, you harden the physical entry point to your network. This is the foundation of a secure "Edge Layer," preventing the kind of unauthorized access that leads to [DDoS Attacks in Competitive Gaming](/knowledge-hub/competitive-security-edge-config-continuity/ddos-attacks-gaming).

#### The WPS Disaster: Why You Must Disable It Immediately

If your router has a button on the back labeled WPS (Wi-Fi Protected Setup), it is likely the weakest link in your entire security chain. Designed for convenience, WPS allows devices to connect via an 8-digit PIN instead of a complex password.

Why is WPS a security risk for gamers? The 8-digit WPS PIN is divided into two halves, making it extremely easy to brute-force using automated tools like "Reaver" or "Pixie Dust." An attacker can crack a WPS PIN in a matter of hours, or sometimes minutes, giving them full access to your network regardless of how strong your WPA3 password is. For a competitive gamer, this means someone could be using your bandwidth without you ever seeing a "new device" notification.

In 2026, there is no technical reason to keep WPS enabled. Most modern smartphones and consoles use QR code scanning or simple manual entry. Disabling WPS in your router’s "Wireless" or "Security" menu is a non-negotiable step for anyone serious about their network integrity. If you're unsure how to find this setting, our Frequently Asked Questions section provides a guide to navigating common South African router interfaces.

#### MAC Filtering: Adding a Layer of Identity

While a strong password is your first line of defence, MAC Address Filtering acts as a "guest list" for your router. Every device has a unique hardware ID known as a MAC address.

How does MAC filtering improve security? By enabling a "Whitelist" in your MAC Filtering settings, you tell the router: "Only allow these specific 10 devices to connect." Even if a neighbour discovers your WPA3 password, the router will still block their device because its hardware ID is not on the approved list. This adds a physical layer of verification to your wireless edge.

However, it is important to remember that MAC addresses can be spoofed by sophisticated attackers. To understand the mechanics of these hardware IDs and how they impact your connection to the FNO, see [relevant guide](/knowledge-hub/competitive-security-edge-config-continuity).

#### Guest Network Segregation: Quarantining the Weakest Links

Many South African households are now filled with "Smart Home" devices—fridges, lightbulbs, and security cameras that are notoriously insecure. If a neighbour (or a remote attacker) compromises a cheap smart bulb on your main network, they can use it as a bridge to see your gaming PC’s traffic.

The Solution: Use a Guest Network Most modern routers allow you to create a "Guest Network." This is a completely separate wireless environment with its own password. You should put all IoT devices and visiting guests on this network. This "quarantines" them, ensuring that even if one of these devices is compromised, the attacker cannot "jump" over to your main gaming VLAN. This is a critical component of managing [UPnP Vulnerabilities](/knowledge-hub/competitive-security-edge-config-continuity/upnp-vulnerabilities), as IoT devices are the primary abusers of automatic port opening.

#### SSID Stealth: Obscurity vs. Security

A common tip found in local forums is to "Hide your SSID" (make your WiFi name invisible). The logic is that if a neighbour can't see your network, they can't hack it.

Is hiding your SSID effective? In 2026, hiding your SSID is largely "security through obscurity" and provides very little real protection. Free "stumbling" tools can easily find hidden networks by listening for the "probe requests" your devices send out to find the router. In some cases, hiding your SSID can actually decrease performance, as devices have to work harder and use more battery to maintain the connection.

Instead of hiding your name, focus on Signal Power Management. If you live in a small apartment, you don't need your router’s "Transmit Power" set to 100%. By lowering the power to 50% or 75%, you reduce the "bleed" of your signal into the street or the next-door unit, making your network a less visible target for random scanning.

#### Managing the "Neighbour Noise" (Congestion)

In dense complexes, the issue is often not malicious—it's simply congestion. If everyone in your block is using "Channel 1" on the 2.4GHz band, your throughput will tank, and your jitter will spike.

Prioritize 5GHz and 6GHz: These bands have much shorter ranges, meaning they don't penetrate walls as well as 2.4GHz. This is actually an advantage—your 5GHz signal stays in your lounge, and your neighbour's signal stays in theirs, reducing interference.

Auto-Channel vs. Manual: Modern routers are good at picking the cleanest channel, but in a "noisy" environment, they can sometimes get stuck in a loop of switching. Using a WiFi Analyzer app to find a "dead zone" and manually locking your router to that channel can provide a much more stable experience for mobile gaming broadcasts, as discussed in our guide on [TikTok & IG Reels Live: Mobile WiFi Stability](/knowledge-hub/content-creation-streaming-bandwidth-sa/tiktok-ig-mobile-wifi).

#### Summary: Hardening Your Wireless Sanctuary

Your WiFi is the "airspace" of your home. If you leave it unregulated, you invite instability into your competitive environment. In 2026, securing your wireless edge is a multi-step process that moves beyond a simple password:

Upgrade to WPA3: Leverage SAE encryption to prevent offline cracking.

Kill WPS: Disable the 8-digit PIN vulnerability immediately.

Segregate IoT: Keep smart devices on a Guest Network to protect your gaming PC.

Audit MAC Addresses: Use whitelisting for an extra layer of identity verification.

Manage Power: Don't broadcast your signal further than it needs to go.

By taking these steps, you ensure that your fibre’s performance is dedicated entirely to your gameplay. You shouldn't have to share your 165ms ping to Europe with the neighbour’s Netflix binge.

## Frequently Asked Questions

**If I have a very long, complex WiFi password, am I safe staying on WPA2?**

Not entirely. While a long password makes "Brute Force" harder, WPA2 is still vulnerable to Offline Dictionary Attacks. An attacker can capture your "Handshake" and crack it on their own hardware without you knowing. WPA3 uses the Dragonfly Key Exchange (SAE), which makes this impossible. It ensures that even if a neighbour captures your data, they can’t guess the password after the fact. For a deeper look at the encryption math, see .

**My router has a "WPS" button for easy setup. Why should I disable it?**

WPS is the "master key" under the welcome mat. The 8-digit PIN is mathematically weak; tools used by malicious actors can crack it in minutes. Once they have the PIN, they have your WiFi password, no matter how complex it is. In the 2026 competitive landscape, leaving WPS on is an invitation for "Background Bleed" from neighbours' devices. If you suspect someone is already on your network, use the Support Robotics platform to audit your connected devices.

**Will "Hiding my SSID" (WiFi Name) stop hackers?**

No. It’s the digital equivalent of closing your eyes and thinking no one can see you. Any basic WiFi scanner can see a "Hidden" network because your devices are constantly shouting the name out to find the router. In some cases, hiding your SSID can actually cause latency spikes because your phone has to work harder to re-establish the connection. Instead of hiding, focus on MAC Filtering, which we discuss in .

**Why does my ping get worse when my neighbour uses their microwave?**

This is a 2.4GHz interference issue. Microwaves, baby monitors, and old Bluetooth devices all live on the same frequency as basic WiFi. In dense complexes, this "Noise Floor" makes it hard for your gaming packets to be heard. To fix this, always prioritize the 5GHz or 6GHz (WiFi 6E/7) bands. They have more "lanes" and don't penetrate walls as easily—which, for once, is a good thing because it keeps your neighbour's noise out of your lounge.

**Can I use a "Guest Network" to make my smart home safer?**

Absolutely. Most smart bulbs and cameras have terrible security. By placing them on a Guest Network, you "Air-Gap" them from your main gaming PC. If a neighbour compromises a cheap smart light, they stay stuck in the "Guest" lane and can't access your private data or trigger UPnP vulnerabilities, which we detail in .

**How do I know if my neighbour is "stealing" my WiFi?**

Look for the "Network Hogs." If your ping spikes whenever you see your neighbour’s car pull in, log into your router and check the DHCP Client List. If you see unrecognized device names (e.g., "Sams-iPhone" when you don't own one), someone has bypassed your security. You can cross-reference these hardware IDs via the Looking Glass to see if they are affecting your throughput stability.

**Does "Transmit Power" really affect security?**

Yes. If you live in a small apartment, your WiFi doesn't need to reach the street. By lowering your Transmit Power to 50% or 75%, you reduce the "Signal Bleed" into public areas. This makes your network a smaller, less attractive target for random passers-by or malicious actors in the parking lot. This is especially important for mobile creators who need a clean environment for [suspicious link removed].