SSID

Beacons and Discovery

An SSID (Service Set Identifier) is the human-readable name of a Wi-FiA family of wireless networking protocols based on the IEEE 802.11 standards, enabling devices to connect to a local network without cables. Wi-Fi 6 (802.11ax) and Wi-Fi 7 (802.11be) are the latest generations. network, up to 32 bytes long. Access points broadcast their SSID in beacon frames roughly ten times per second, allowing nearby devices to discover available networks. Client devices also emit probe requests — essentially asking whether network X is nearby — which can be answered by any access point whose SSID matches. A hidden SSID suppresses beacon broadcast but does not provide meaningful security: passive sniffers capture the SSID from the first probe response or association frame.

Roaming and Extended Service Sets

Multiple access points sharing the same SSID and WPAWi-Fi Protected Access. A family of security protocols (WPA, WPA2, WPA3) that encrypt wireless network traffic and authenticate devices. WPA3 is the current standard, offering stronger encryption and protection against offline dictionary attacks. credentials form an Extended Service Set (ESS). Client devices can roam between access points seamlessly as signal strength varies. The BSSID (Basic Service Set Identifier) distinguishes individual access points within the same ESS — it is the MAC AddressMedia Access Control address. A unique 48-bit hardware identifier (e.g., AA:BB:CC:DD:EE:FF) assigned to a network interface by the manufacturer. Used at Layer 2 for communication within a local network segment. of the access point radio interface. Enterprise Wi-Fi controllers manage BSSID visibility and roaming thresholds to minimize LatencyThe time delay for a data packet to travel from source to destination, typically measured in milliseconds (ms). Lower latency is critical for real-time applications like video calls, gaming, and financial trading. during handoffs.

Security Considerations

The SSID is transmitted in cleartext in beacon frames and association requests, making it visible to any passive listener regardless of EncryptionThe process of converting plaintext data into ciphertext using a cryptographic algorithm and key, making it unreadable without the corresponding decryption key. The foundation of secure communication on the internet. in use. Evil twin attacks exploit SSID matching: a rogue access point broadcasts the same SSID as a legitimate network and captures credentials from devices that connect. WPAWi-Fi Protected Access. A family of security protocols (WPA, WPA2, WPA3) that encrypt wireless network traffic and authenticate devices. WPA3 is the current standard, offering stronger encryption and protection against offline dictionary attacks. Enterprise with 802.1X authentication mitigates this by requiring mutual certificate-based authentication before any network traffic flows.