There is no difference between cracking WPA or WPA2 networks. If it is not in the dictionary then aircrack-ng will be unable to determine the key. IMPORTANT This means that the passphrase must be contained in the dictionary you are using to break WPA/WPA2. You will be very surprised at how much time is required. If you are thinking about generating your own password list to cover all the permutations and combinations of characters and special symbols, check out this brute force time calculator first. It can take hours, if not days, to crunch through a large dictionary. Because it is very compute intensive, a computer can only test 50 to 300 possible keys per second depending on the computer CPU. The impact of having to use a brute force approach is substantial. Conversely, if you want to have an unbreakable wireless network at home, use WPA/WPA2 and a 63 character password composed of random characters including special symbols. The only time you can crack the pre-shared key is if it is a dictionary word or relatively short in length. Since the pre-shared key can be from 8 to 63 characters in length, it effectively becomes impossible to crack the pre-shared key. Handshaking is done when the client connects to the network.Īlthough not absolutely true, for the purposes of this tutorial, consider it true. The only thing that does give the information to start an attack is the handshake between client and AP. That is, because the key is not static, so collecting IVs like when cracking WEP encryption, does not speed up the attack. Unlike WEP, where statistical methods can be used to speed up the cracking process, only plain brute force techniques can be used against WPA/WPA2. This is the approach used to crack the WPA/WPA2 pre-shared key. There is another important difference between cracking WPA/WPA2 and WEP.

So make sure airodump-ng shows the network as having the authentication type of PSK, otherwise, don't bother trying to crack it. aircrack-ng can ONLY crack pre-shared keys. WPA/WPA2 supports many types of authentication beyond pre-shared keys. The WPA Packet Capture Explained tutorial is a companion to this tutorial. This is the link to download the PDF directly. The best document describing WPA is Wi-Fi Security - WEP, WPA and WPA2. The Wiki links page has a WPA/WPA2 section.

I recommend you do some background reading to better understand what WPA/WPA2 is. This tutorial walks you through cracking WPA/WPA2 networks which use pre-shared keys.

How to use aircrack with wpa