Security Explained

What is WPA3 and Why It Cannot Be Cracked

WPA3 (Wi-Fi Protected Access 3) is the latest WiFi security standard, introduced by the Wi-Fi Alliance in 2018 as the successor to WPA2 (which has been in use since 2004). The most significant change in WPA3 is the replacement of WPA2's 4-way handshake with the SAE (Simultaneous Authentication of Equals) handshake — a protocol that is specifically designed to prevent the offline dictionary attacks that have been used to crack WPA2 passwords for nearly two decades. This article explains what WPA3 is, how SAE works at a conceptual level, why it cannot be cracked the way WPA2 can, and what limitations still exist (including WPA3 Transition Mode).

What is WPA3? A brief history

WPA3 was announced by the Wi-Fi Alliance in January 2018, with mandatory certification for all new WiFi devices starting July 2020. It was developed in response to the KRACK (Key Reinstallation Attack) vulnerability discovered in WPA2 in 2017, which exposed fundamental weaknesses in the WPA2 4-way handshake.

The standard is defined in IEEE 802.11-2016 and includes several improvements over WPA2: mandatory use of Protected Management Frames (PMF, 802.11w), a 192-bit security suite for enterprise networks (WPA3-Enterprise), and the Simultaneous Authentication of Equals (SAE) handshake for personal networks (WPA3-Personal).

By 2026, most new consumer routers ship with WPA3 enabled by default, and all modern operating systems (Windows 11, macOS 14+, iOS 17+, Android 14+) support WPA3 natively. However, WPA2 remains the dominant protocol by installed base due to legacy IoT devices.

The SAE handshake — how WPA3 prevents cracking

The core innovation of WPA3 is the SAE handshake, based on the Dragonfly key exchange (RFC 7664). Unlike WPA2's 4-way handshake, which transmits cryptographic material that can be used to verify password guesses offline, SAE uses a zero-knowledge proof: both devices prove they know the password without ever revealing it over the air.

Here's how it works at a high level: Both the router and the connecting device independently derive a 'Password Element' (PWE) from the password and network name. They each generate temporary cryptographic keys. They exchange 'commit' messages that prove they derived their keys from the same PWE — but the password itself is never transmitted. They exchange 'confirm' messages to verify the shared secret matches.

The critical security property: to verify a password guess against a captured SAE exchange, an attacker would need to replay the entire multi-step handshake for each candidate password — which requires approximately 5-50 milliseconds per attempt. This is approximately 100-600 times slower than verifying a WPA2 password guess (which takes microseconds). At that speed, even a single dictionary of 10 million passwords would take days to test.

WPA2 vs WPA3 cracking comparison

WPA2: ~860,000 password guesses per second per GPU (RTX 5090). Full dictionary (10M words, 50 rules) completes in ~8 hours. WPA3 SAE: ~20-200 password attempts per second per CPU core. Same dictionary would take months. WPA3 is designed to make offline cracking economically infeasible.

Why can't hashcat crack WPA3?

Hashcat, the standard tool for WPA2 password recovery, cannot crack WPA3 SAE handshakes. The reason is fundamental to the protocol design: hashcat works by taking a candidate password, computing the Pairwise Master Key (PMK) through PBKDF2, and checking if the resulting hash matches the MIC value from a captured WPA2 handshake. This is a pure computation — no interaction required.

WPA3's SAE handshake cannot be reduced to a static hash. To verify a password candidate against a captured SAE exchange, an attacker must simulate the entire commit-exchange protocol, including the Password Element (PWE) derivation (a hash-to-curve operation involving repeated hashing), ephemeral key pair generation, and shared secret computation.

The PWE derivation itself is the bottleneck: it uses HKDF-extract with SHA-256 to derive a pseudorandom bitstring from the password, then attempts to map it to a valid point on an elliptic curve. If the mapping fails, the counter is incremented and the operation repeats. This sequential, non-parallelizable process limits verification to approximately 20-200 attempts per second per CPU core.

There is no known mathematical shortcut that would allow WPA3 SAE cracking at speeds comparable to WPA2 mode 22000. The protocol was explicitly designed to prevent this specific attack vector.

WPA3 Transition Mode — the only crackable exception

WPA3 Transition Mode (also called WPA3/WPA2 Mixed Mode) allows both WPA3 and WPA2 clients to connect to the same network. When a WPA2 client connects, the router falls back to the standard WPA2 4-way handshake — which IS crackable.

This is enabled by default on most consumer routers for backward compatibility with older devices (IoT cameras, smart plugs, printers, older phones). The router advertises both WPA3 (SAE) and WPA2 (PSK) capability in its beacons.

Critical: In transition mode, both WPA3 and WPA2 use the same password (PSK). If an attacker captures the WPA2 handshake (by forcing a WPA2 client to reconnect), they can crack that handshake with hashcat mode 22000. The cracked password will also work for WPA3 access — because it's the same password.

If your router supports WPA3-only mode (no transition, also called WPA3-Personal only), and ALL your devices support WPA3, your network is immune to handshake-based cracking. WPA3-only mode is the gold standard for WiFi security in 2026.

WPA3 Transition Mode is not a protocol flaw

The ability to downgrade to WPA2 in Transition Mode is by design — it ensures backward compatibility. The Wi-Fi Alliance mandates Transition Mode for WPA3 certification. The weakness is that the same password is used for both WPA3 and WPA2, so cracking the WPA2 handshake reveals the WPA3 password.

How to recover a WPA3 WiFi password (if you own the network)

If you've forgotten your WPA3 WiFi password, handshake capture will NOT help (unless the network runs Transition Mode and you can capture a WPA2 handshake). The available recovery paths for WPA3-only networks are:

1. Router admin panel — Log into your router's web interface at 192.168.1.1 or similar. Look under Wireless Settings or WiFi Settings for the current password. Use default credentials from the router sticker if needed.

2. Connected device extraction — If any device is already connected (Windows PC, Mac, iPhone, Android phone), view the saved password through the operating system's built-in tools. See our device-specific guides.

3. Factory reset — If you can't access the admin panel and no device is connected, a factory reset restores the default admin password. Hold the Reset button for 10-30 seconds, then log in with the default credentials and set a new WiFi password.

4. ISP assistance — If your router was provided by your ISP, their mobile app or customer support may be able to display or reset the WiFi password remotely.

Does WPA3 mean the end of WiFi password cracking?

For WPA3-only networks: yes, traditional handshake-based cracking is no longer viable. The SAE protocol's design eliminates the offline dictionary attack vector that has been the primary method of WiFi password recovery since WPA2 was introduced.

However, as of 2026, the vast majority of the world's WiFi networks still use WPA2 or WPA3 Transition Mode. Legacy IoT devices that only support WPA2 will keep Transition Mode relevant for years to come. Handshake cracking will remain effective for these networks.

The security industry is adapting: recovery services are shifting their focus from handshake cracking to router-admin recovery, connected-device extraction, and physical access methods. WiFi users should also shift their mindset — WPA3 is not a guarantee against all password recovery, just against over-the-air handshake cracking.

WPA3 security assessment checklist

1
Check your router's security mode
Log into router admin panel. Look for Wireless Security settings. If it shows WPA3-Personal (SAE) only, handshake cracking is not possible.
2
Check for Transition Mode
If the router shows 'WPA3/WPA2 Mixed' or 'WPA3 Transition', the network falls back to WPA2 — crackable via handshake capture.
3
Use WPA3-only mode if possible
If all your devices support WPA3, enable WPA3-only mode in the router settings. This eliminates the WPA2 attack surface.
4
For password recovery: use admin panel
WPA3-only networks require router admin access or connected-device extraction for password recovery.
5
Check our WPA3 deep dive
For the full technical explanation of SAE, Dragonfly, and Dragonblood vulnerabilities, read our complete WPA3 vs WPA2 security deep dive.

Frequently Asked Questions

Can WPA3 be cracked?

Pure WPA3 (SAE handshake) cannot be cracked offline. The protocol is specifically designed to prevent offline dictionary attacks. WPA3 Transition Mode that falls back to WPA2 CAN be cracked — capture a WPA2 handshake and use hashcat mode 22000.

Why is WPA3 more secure than WPA2?

WPA2's 4-way handshake transmits enough information for an attacker to verify password guesses offline. WPA3's SAE handshake uses a zero-knowledge proof that never reveals password-related material. Testing a single password guess against SAE requires simulating the entire handshake (5-50ms).

Can I use hashcat to crack WPA3?

No. Hashcat does not support WPA3 SAE cracking, and no known tool does. The SAE handshake cannot be reduced to a hash format that hashcat can attack. Only WPA2 handshakes captured from WPA3 Transition Mode are crackable with hashcat.

What tools work for WPA3?

For capturing WPA3 traffic: hcxdumptool, Wireshark. For security assessment: check SAE group negotiation, test for downgrade attacks. For password recovery: none — handshake-based recovery does not work on WPA3-only networks.

Should I upgrade from WPA2 to WPA3?

Yes, if your router and all devices support it. WPA3 eliminates the most common WiFi attack vector (handshake cracking) and adds mandatory PMF, stronger encryption, and forward secrecy. If devices don't support WPA3, enable Transition Mode as a bridge.

Is WPA3 vulnerable to KRACK attacks?

No. WPA3's SAE handshake is not vulnerable to the KRACK (Key Reinstallation Attack) that affected WPA2. The handshake is designed with different message ordering and cryptographic properties that prevent the key reinstallation attack.

Can't find the WiFi password another way?

If every other method failed, capture a WPA handshake on your own network and let our GPU cluster handle the rest. Dictionary + rules attack, 2B+ candidates, pay only on success.

Open Recovery Tool