Why does my phone say my wifi network has weak security?
What the warning is actually objecting to, why the fix sometimes breaks an old device, and how to decide between upgrading the encryption and replacing the router.
- Difficulty
- intermediate
- Time
- 20 min
- Read
- 3 min
- Safety
- caution
Short answer
Your router is using an outdated encryption method — usually WEP, or WPA with TKIP. Log into the router and change the wireless security to WPA2 with AES, or WPA2/WPA3 mixed mode if offered. If the router does not offer WPA2 at all, it is old enough that replacing it is the right answer.
Do this first
Both iOS and Android started flagging this a few years ago, and the warning is deliberately blunt because the schemes it objects to are not merely dated — they are broken. WEP can be cracked in minutes. TKIP has known practical attacks. The warning is not telling you your password is weak; it is telling you the method used to protect the network is one that no longer protects it.
Safety
Step by step
- Read exactly what the warning says.Weak security usually names the scheme — WEP, or WPA with TKIP. A separate warning about a weak or reused password is a different problem with a different fix.
- Log into the router and find the wireless security setting.It sits alongside the network name and password, often as a dropdown listing options like WEP, WPA, WPA2, WPA2/WPA3, and sometimes an enterprise variant you do not want at home.
- Choose WPA2 with AES, or WPA2/WPA3 mixed.WPA3 alone is the strongest but some older devices cannot join it, which is why the mixed mode exists. Mixed mode is the sensible domestic choice: modern devices use WPA3 and older ones fall back to WPA2.
- Make sure TKIP is not selected as the cipher.Some routers offer WPA2 with a choice of AES, TKIP, or both. Choose AES only. Leaving TKIP available keeps the weakness and can cap the network's speed as a side effect.
- Set a strong wifi password while you are there.If you are going to have to rejoin every device anyway, do it once with a password worth having — long, unique, and recorded in your password manager.
- Save and rejoin your devices.Everything drops off and has to be rejoined with the new settings. Do phones and laptops first, then televisions and consoles, then smart devices — which may need a full factory reset and repairing.
- Check what actually failed to reconnect.Anything that will not join WPA2 is at least fifteen years old. In practice this is usually an old printer, an early smart plug, or a wireless bridge in a games console.
- Decide what to do about the stragglers.Do not weaken the whole network for one device. If something genuinely cannot be replaced, put it on a guest network with its own weaker settings if the router allows that, and keep it away from everything else.
If it doesn't work
The router offers no WPA2 option at all
Cause: The router predates WPA2 as a default — Fix: Replace it. A router that old also has no security updates and is very likely the reason your wifi is slow as well.
Warning persists after changing to WPA2
Cause: The change applied to one band only, or the device cached the old network — Fix: Check both the 2.4 GHz and 5 GHz sections — many routers configure them separately. Then forget the network on the phone and rejoin.
An old printer or console will not rejoin
Cause: It only supports WPA or WEP — Fix: Connect it by ethernet if it has a port, which is the best outcome. Otherwise isolate it on a guest network, or replace it.
Speeds dropped after the change
Cause: TKIP is still enabled alongside AES — Fix: Set the cipher to AES only. A network that permits TKIP is restricted to older, slower wireless modes.
Questions people ask
Can I just dismiss the warning?
You can, and it will keep coming back. The warning is accurate: on WEP or TKIP, someone within range of your house can realistically get onto your network and see traffic on it.
Is WPA3 worth switching to fully?
It is stronger, particularly against password guessing, but WPA3-only will lock out any device that does not support it. Mixed mode gives you most of the benefit with none of the disruption.
Does this mean someone has been on my network?
No — it is a warning about the method, not a report of an intrusion. Once you have changed the encryption and the password, anything that was connected is off unless re-entered.