21

I'm running gentoo on my laptop, and I'm currently using wpa_supplicant to handle wifi.

My configuration works and I can connect, but it is required to type in the plain text password into the configuration file. This doesn't work if I want to connect to a friend's wifi and they want to type in the password instead of telling me what it is. There's no security with plain text passwords.

How can I make this more secure so that some sort of encrypted password is stored instead of plaintext?

2 Answers 2

17

wpa_passphrase [ ssid ] [ passphrase ] generates a WPA PSK from an ASCII passphrase for a SSID. Then store it as

network={
        ssid="your ssid"
        psk=outputfromabove
}
7
  • 4
    Or do xargs -n 2 wpa_passphrase followed by ssid and passphrase each on its own line, followed by C-d. May 6, 2012 at 19:31
  • 1
    This adds no security. While the password is not stored in plain text, knowing the PSK is enough to connect to the network.
    – BatchyX
    Apr 2, 2014 at 20:24
  • 1
    I'm just answering the question. In any case, en.wikipedia.org/wiki/Salt_(cryptography). Apr 2, 2014 at 21:11
  • 1
    This works for the case of the SSID with a single pass phrase (psk=...). Is there a way to do the same for the SSID / identity / password case (password=...)?
    – AstroFloyd
    Jul 30, 2015 at 9:13
  • 2
    It adds security. My work uses the AD password for wifi. I don't want my AD password sitting around un-hashed. May 21, 2017 at 2:47
4

Alternatively, you can leave the password entry blank. If you're running wpa_gui, it will prompt you for the password. (I do this with eduroam accounts, as my password is the same as my *nix login)

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.