sodcalculator

10 Tech How-To

Fix Wi-Fi Network Isn’t Secure in Windows

Guide 10-37492 · Updated · Step by step

If Windows shows “Wi-Fi network isn’t secure”, it means your router is using an older, weaker encryption standard (WEP or TKIP) that Windows considers unsafe. The fix is to change your router’s security settings to WPA2 or WPA3, then reconnect your PC. This guide explains why the warning appears, how to update your router settings, and what to do if the message persists.

What Does “Isn’t Secure” Mean in Windows?

Windows 10 and 11 display this warning when the Wi-Fi network you’re connected to uses an outdated security protocol. The message appears in the Wi-Fi settings under the network name, and sometimes as a pop-up notification. It’s not a sign that your PC is infected; it’s a warning about the router’s configuration.

Modern routers support WPA2 (Wi-Fi Protected Access 2) or WPA3, which encrypt data strongly. Older routers may default to WEP (Wired Equivalent Privacy) or WPA with TKIP, both of which have known vulnerabilities. Windows flags these as “not secure” because an attacker can more easily intercept or decrypt your traffic.

Why Windows Shows the Warning

Windows checks the security type of the network you join. If it detects WEP, TKIP, or an open network (no password), it warns you. The warning is part of Microsoft’s effort to push users toward stronger encryption. Even if your router has a password, WEP can be cracked in minutes with free tools, and TKIP has been deprecated since 2012.

Another scenario: your router might be set to “WPA/WPA2 mixed mode” or “WPA2-PSK with TKIP”. Windows sees the weaker option and warns you. The solution is to force the router to use only WPA2-AES or WPA3-SAE.

How to Fix It: Step-by-Step

You’ll need to log into your router’s admin page. The exact steps vary by router brand, but the general process is the same.

  1. Find your router’s IP address. Open Command Prompt and type ipconfig. Look for “Default Gateway” — usually something like 192.168.1.1 or 192.168.0.1. You can also check the sticker on the router.
  2. Log in to the admin page. Open a browser and type that IP address. Enter the admin username and password. If you don’t know them, check the router’s label or manual. Common defaults are “admin” for both, but many ISPs set a unique one.
  3. Find the wireless security settings. Look for a tab like “Wireless”, “Wi-Fi”, or “Security”. It might be under “Setup” or “Advanced Settings”.
  4. Change the security mode. Select WPA2-PSK (or WPA2-Personal) and set the encryption to AES. If your router supports WPA3, choose WPA3-SAE or “WPA2/WPA3 mixed”. Avoid “WPA/WPA2 mixed” and any option that includes TKIP.
  5. Set a strong password. Use at least 12 characters, mixing letters, numbers, and symbols. Avoid dictionary words or obvious sequences.
  6. Save and reboot. Apply the changes. The router may restart. After it does, reconnect your PC to the network and the warning should disappear.

What If the Warning Persists?

If you’ve changed the settings but the warning still appears, try these steps:

  • Forget the network and reconnect. In Windows, go to Settings > Network & Internet > Wi-Fi > Manage known networks. Select the network, click “Forget”, then reconnect by entering the password again.
  • Update your Wi-Fi driver. An outdated driver might misreport the security type. Go to Device Manager, expand “Network adapters”, right-click your Wi-Fi adapter, and choose “Update driver”. You can also download the latest driver from the manufacturer’s site.
  • Check if your router has a separate guest network. Guest networks sometimes have weaker security. Make sure you’re connecting to the main network.
  • Reset the router. If you changed settings and something went wrong, a factory reset (holding the reset button for 10 seconds) will restore defaults. Then reconfigure with WPA2-AES.

WPA2 vs. WPA3: Which Should You Choose?

WPA3 is the newest standard, offering stronger encryption and better protection against password guessing. However, not all devices support it. If your router supports WPA3, enable it. If you have older devices (like a 2015 laptop or an old smart TV), they might not connect to a WPA3-only network. In that case, use “WPA2/WPA3 mixed mode”, which allows both. This is safe because Windows will still see WPA2-AES as secure.

If your router only supports WPA2, that’s fine. WPA2-AES is still considered secure for home use. The key is to avoid WEP and TKIP entirely.

Common Mistakes and Misconceptions

One common mistake is thinking that hiding your SSID (network name) makes it secure. It doesn’t. Hiding the SSID only prevents casual discovery; attackers can still find it. The encryption type is what matters.

Another misconception: “I have a password, so I’m safe.” A password alone doesn’t protect your data if the encryption is weak. WEP can be cracked even with a strong password. Always use WPA2 or WPA3.

Some users try to disable the warning by changing Windows registry settings. That’s not recommended. The warning is there for a reason. Fixing the router is the proper solution.

When to Call Your ISP

If you have a router provided by your internet service provider (ISP), you might not be able to change the security settings easily. Some ISPs lock the admin interface. In that case, call your ISP and ask them to enable WPA2 or WPA3 on your router. They can do it remotely or guide you. If they refuse, consider buying your own router and using the ISP’s device in bridge mode.

Frequently Asked Questions

Is it safe to ignore the “not secure” warning?

It’s risky. If you’re on a network with WEP or TKIP, someone nearby could capture your traffic and decrypt it. That includes passwords, emails, and browsing history. It’s best to fix the router or avoid using sensitive accounts on that network.

Why does my iPhone not show this warning?

Apple’s iOS doesn’t display the same warning for WEP or TKIP networks. It may still connect without alerting you. Windows is stricter about flagging weak security. That doesn’t mean the network is safe; it just means the OS handles it differently.

Can I change the security type without logging into the router?

No. The router’s security settings are only accessible through its admin page. If you can’t log in, you’ll need to reset the router to factory defaults (which usually restores admin access) or contact your ISP.

What if my router only supports WEP? Do I need a new router?

If your router is so old that it only supports WEP, it’s likely outdated in other ways too. It may not support modern speeds or have known vulnerabilities. Upgrading to a newer router is recommended for both security and performance.

Does changing the security type slow down my Wi-Fi?

No. WPA2-AES is actually faster than WEP or TKIP because it uses hardware acceleration on most devices. You might even see a slight speed improvement after switching.

How do I know if my network is using WEP or TKIP?

In Windows, go to Settings > Network & Internet > Wi-Fi > click on the network name. Under “Properties”, look for “Security type”. If it says WEP, TKIP, or WPA (without “2”), that’s the problem. If it says WPA2-AES or WPA3, you’re fine.

Related

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →