For the best security, performance, and reliability, we recommend these settings for Wi-Fi routers, base stations, or access points used with Apple products.
About Wi-Fi Privacy and Security Warnings
If your Apple device shows a privacy warning or weak-security warning about a Wi-Fi network, that network could expose information about your device. If you administer the Wi-Fi network, we recommend that you update the settings of your Wi-Fi router to meet or exceed the security standards in this article. If you don’t administer the Wi-Fi network, bring these settings to the attention of the network administrator.
Router Settings
Before changing settings, back up your router’s existing settings in case you need to restore them. Also, make sure that your router’s firmware is up to date, and install the latest software updates for your Apple devices. After changing settings, you might need to forget the network on each device that previously joined the network. The device then uses the router’s new settings when rejoining the network.
To help ensure that your Apple devices can connect securely and reliably to your network, apply these settings consistently to each Wi-Fi router and access point, and to each band of a dual-band, tri-band, or other multiband router:
- Security
- Network name (SSID)
- Hidden network
- MAC address filtering
- Automatic firmware updates
- Radio mode
- Bands
- Channel
- Channel width
- DHCP
- DHCP lease time
- NAT
- WMM
- DNS server
The security setting defines the type of authentication and encryption used by your router, and the level of privacy protection for data transmitted over its network. Whichever setting you choose, always set a strong password for joining the network.
Weak security settings to avoid on your router
Don’t create or join networks that use older, deprecated security protocols. They’re no longer secure, they reduce network reliability and performance, and they cause your device to show a security warning:
- WPA/WPA2 mixed modes
- WPA Personal
- WEP, including WEP Open, WEP Shared, WEP Transitional Security Network, or Dynamic WEP (WEP with 802.1X)
- TKIP, including any security setting with TKIP in the name
Settings that turn off security, such as None, Open, or Unsecured, are also strongly discouraged. Turning off security disables authentication and encryption and allows anyone to join your network, access its shared resources (including printers, computers, and smart devices), use your internet connection, and monitor the websites you visit and other data transmitted over your network or internet connection. This is a risk even if security is turned off temporarily or for a guest network.
The SSID (service set identifier) is the name that your network uses to advertise its presence to other devices. It’s the name that nearby users see on their device’s list of available Wi-Fi networks.
Make sure that all routers on your network use the same name for every band they support. If you give your 2.4 GHz, 5 GHz, or 6 GHz bands different names, devices might not connect reliably to your network, to all routers on your network, or to all available bands of your routers. If your router is providing a Wi-Fi 6E network that isn’t using the same name for all bands, Apple devices that support Wi-Fi 6E will identify the network as having limited compatibility.
Use a name that’s unique to your network. Don’t use common names or default names such as “linksys,” “netgear,” “dlink,” “wireless,” or “2wire.” Otherwise, devices that join your network are more likely to encounter other networks that have the same name and then automatically try to connect to them.
A router can be configured to hide its network name (SSID). Your router might incorrectly use “closed” to mean hidden and “broadcast” to mean not hidden.
Hiding the network name doesn’t conceal the network from detection or secure it against unauthorized access. And because of how devices search for and connect to Wi-Fi networks, using a hidden network might expose information that can be used to identify you and the hidden networks you use, such as your home network. When connected to a hidden network, your device might show a privacy warning because of this privacy risk.
Features That Can Affect Wi-Fi Connections
These features can affect how you set up your router or the devices that connect to it.
Private Wi-Fi Address
If you’re connecting to a Wi-Fi network from an iPhone, iPad, Apple Watch, or Apple Vision Pro, learn about using private Wi-Fi addresses on those devices.
Location Services
Make sure that your device has Location Services turned on for Wi-Fi networking because regulations in each country or region define the Wi-Fi channels and wireless signal strength allowed there. Location Services help to ensure that your device can reliably see and connect to nearby devices and that it performs well when using Wi-Fi or features that rely on Wi-Fi, such as AirPlay or AirDrop.
Mac with macOS Ventura or later
- Choose Apple menu > System Settings, then click Privacy & Security in the sidebar.
- Click Location Services on the right.
- Scroll to the bottom of the list of apps and services, then click the Details button next to System Services.
- Turn on “Networking and wireless,” then click Done.
Mac with macOS Monterey or earlier
- Choose Apple menu > System Preferences, then click Security & Privacy.
- Click the lock in the corner of the window, then enter your administrator password.
- In the Privacy tab, select Location Services, then select Enable Location Services.
- Scroll to the bottom of the list of apps and services, then click the Details button next to System Services.
- Select Networking & Wireless (or Wi-Fi Networking), then click Done.
iPhone, iPad, and Apple Vision Pro
- Go to Settings > Privacy & Security > Location Services.
- Turn on Location Services.
- Scroll to the bottom of the list, then tap System Services.
- Turn on Networking & Wireless (or Wi-Fi Networking).
Auto-Join When Used With Wireless Carrier Wi-Fi Networks
Wireless carrier Wi-Fi networks are public networks set up by your wireless carrier and their partners. Your iPhone or other Apple cellular device treats them as known networks and automatically connects to them.
If you see a privacy warning under the name of your carrier’s network in Wi-Fi settings, your cellular identity could be exposed if your device were to join a malicious hotspot impersonating your carrier’s Wi-Fi network. To avoid this possibility, you can prevent your iPhone or iPad from automatically rejoining your carrier’s Wi-Fi network:
- Go to Settings > Wi-Fi.
- Tap the information button next to the wireless carrier’s network.
- Turn off Auto-Join.