Question about contradictory advise in FAQs

Joined
Mar 25, 2008
Messages
131
Reaction score
1
Points
18
Another means of securing a wireless network is to choose to disable “SSID broadcast”... It’s highly recommended that you do not disable SSID broadcast.

Um, okay. Is there anybody else who sees a contradiction here? I'm thinking of getting a printer with a wireless connection for the house, and I'm totally new to networking. Doing a little research before I start belting out questions.
 

pigoo3

Well-known member
Staff member
Admin
Joined
May 20, 2008
Messages
44,210
Reaction score
1,418
Points
113
Location
U.S.
Your Mac's Specs
2017 15" MBP, 16gig ram, 1TB SSD, OS 10.15
Um, okay. Is there anybody else who sees a contradiction here? I'm thinking of getting a printer with a wireless connection for the house, and I'm totally new to networking. Doing a little research before I start belting out questions.

Like you said...you're new to networking!;)

The SSID is the name of your network (wireless or wired). So let's say the name or SSID of your home network is "Fred". If "SSID Broadcast" is enabled...and you're using a wireless router...then everyone within the router's range will be able to see your wireless network's name "Fred". If you have a password setup for "Fred"...they cannot access your network.

If you choose to disable "SSID broadcast"...then your wireless router will not broadcast your network's name (Fred).

By not broadcasting your network's SSID (Fred)...this (in some small way) can help to enhance the security of your network...since folks can't even see your networks name. The downside to this is...you then have to manually enter your networks name (and password) each time you sign onto your network.

Is there a contradiction in the info you quoted...maybe...maybe not. It seems more of an opinion to me...rather than a fact. I'm really not sure why the person that posted that said, "It’s highly recommended that you do not disable SSID broadcast."...other than if you forget your networks name you won't be able to log into it.

HTH,

- Nick
 

cwa107


Retired Staff
Joined
Dec 20, 2006
Messages
27,042
Reaction score
812
Points
113
Location
Lake Mary, Florida
Your Mac's Specs
14" MacBook Pro M1 Pro, 16GB RAM, 1TB SSD
It's because your network name is still visible to WiFi scanners. So while it won't be visible to casual users, anyone with a modicum of knowledge about WiFi can still see it. So it affords very little security while making it harder for your clients to find and maintain a connection, particularly in areas of weak signal.

OS X, in particular, seems to have issues with hidden SSIDs. So my advice is to not disable it, lest you give yourself a false sense of security and cause yourself more headache than its worth.
 

cwa107


Retired Staff
Joined
Dec 20, 2006
Messages
27,042
Reaction score
812
Points
113
Location
Lake Mary, Florida
Your Mac's Specs
14" MacBook Pro M1 Pro, 16GB RAM, 1TB SSD
can I leave SSID on and have it set up for a password?

Yes, setup your wireless router to use WPA2 security and it will allow you to create a passphrase. This is the preferred method of securing a wireless network.
 

pigoo3

Well-known member
Staff member
Admin
Joined
May 20, 2008
Messages
44,210
Reaction score
1,418
Points
113
Location
U.S.
Your Mac's Specs
2017 15" MBP, 16gig ram, 1TB SSD, OS 10.15
It's because your network name is still visible to WiFi scanners. So while it won't be visible to casual users, anyone with a modicum of knowledge about WiFi can still see it. So it affords very little security while making it harder for your clients to find and maintain a connection, particularly in areas of weak signal.

Yeah...that's why I mentioned that disabling SSID broadcasting could "in some small way" improve security...but for the folks that REALLY want to do find your network...they'll find it with or without SSID broadcasting.

I think maybe one way disabling SSID broadcasting can be helpful is to discourage network "leeching"...by other users who may not be that computer savvy...but do know how to connect to networks via their Airport (for example).

But then again...it's usually pretty silly not to have as password on a wireless network...to prevent "leeching", and other unauthorized access.

- Nick
 
Joined
Feb 26, 2010
Messages
2,116
Reaction score
123
Points
63
Location
Rocky Mountain High, Colorado
Your Mac's Specs
1.8 GHz i7 MBA 11" OSX 10.8.2
But hiding the SSID does nothing for leaching. If that is all you do - it is extremely easy to find the SSID. As cwa said - You are 1 scanning program away from finding the name of the SSID. It becomes just a royal pain because when something disconnects you have to go through the reconnect sequence - typing in the SSID name - connect etc.

By far - you are better off broadcasting SSID and enabling WPA2 with a strong password rather than trying to disable SSID for any reason.
 

Shop Amazon


Shop for your Apple, Mac, iPhone and other computer products on Amazon.
We are a participant in the Amazon Services LLC Associates Program, an affiliate program designed to provide a means for us to earn fees by linking to Amazon and affiliated sites.
Top