Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How do I, from the command line, confirm on the host that the wireless network connection uses WPA2?

The wireless router is set to use WPA2 Personal (WPA2 with a pre-shared key) and AES on the network, and I have added wpa-ssid, wpa-psk and wpa-proto RSN to /etc/network/interfaces, but iwconfig prints Encryption key:off. I am running Debian Wheezy/7.0. I checked the system logs but saw nothing of relevance, and the only current wpa_supplicant.conf on my system is one for D-Bus.

share|improve this question
up vote 4 down vote accepted

You can check what the access point is broadcasting in its beacons by doing this (you'll need the wireless-tools package):

$ sudo iwlist wlan0 scanning

The output varies by device, and will display every SSID the interface can see. My WPA2 access point gives this (from iwlist's very verbose output):

IE: IEEE 802.11i/WPA2 Version 1
    Group Cipher : TKIP
    Pairwise Ciphers (2) : CCMP TKIP
    Authentication Suites (1) : PSK

You can also interrogate wpa_supplicant directly, which might be more what you're after:

$ sudo wpa_cli status
Selected interface 'wlan0'
group_cipher=TKIP              <-- cipher
key_mgmt=WPA2-PSK              <-- key mode
share|improve this answer
Perfect! wpa_cli says pairwise_cipher=CCMP, group_cipher=CCMP and key_mgmt=WPA2-PSK, and looking at Wikipedia, "CCMP is the standard encryption protocol for use with the WPA2 standard and is much more secure than the WEP protocol and TKIP protocol of WPA." iwlist scanning says only CCMP and PSK are available. That sounds good enough for me! – Michael Kjörling Jun 21 '13 at 11:16

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.