Explain like I'm five · Security

What is Wi-Fi Security?

Wireless network security, told as a story about letters thrown through the air and a free mailbox in the village square.

hand to hand, down the hallthrown in the air, anyone can catch itinvisible letters fly through the air

Castle letters travel down the hall. A letter thrown through the air can be caught by anyone.A wireless letter is invisible, but it flies through the air. Anyone with an antenna — even the thief next door — can catch it.

FREE MAILBOXthe real plaza mailboxall mineFREE MAILBOXa fake the thief set up — looks the samewhich one is real?letters in the fake box go straight to the thief

The free mailbox in the square might be a fake the thief put up.Same name, same look. Letters dropped in the fake go to the courier who opens them on the way.

castle mailboxsealed lock + ID badgeguest mailboxsplit from the castle halls by a ribbonplaza mailboxsend only through the sealed tunnela lock on every box, a badge for the castle box, guests apart, a tunnel in the plazathrown in the air, a sealed letter reads as nothing

A lock on every box, a badge for the castle box, guests apart, a tunnel in the square.The sealed lock (a sealed letter) makes a caught letter unreadable. The castle box checks a badge instead of a password. Guests are kept apart by a ribbon, and in the square you send only through the sealed tunnel.

Sealed lockcaught, still unreadable
A badge eachnot one shared password
Guests apartbeyond the ribbon only
Tunnel in the squarenever trust the free box
no key… can't read itsealed lock: catch it, still can't read itcastle mailbox: a badge instead of a passwordpassword: appleone password everyone sharesthe thief learns it fasta different badge for eachleavers get theirs erasedthe lock guards the letter, the badge guards the door

The lock guards the letter; the badge guards the door.One password shared by all is soon known to the thief too. A badge is different for each person, and a leaver's badge is erased at once.

cloth or not, I see it allhiding the mailbox name= a cloth. does nothingMAILBOX CHECKLISTsealed lockbadge for the castle boxguest box aparttunnel in the plaza×cloth over the namedon't hide it — seal it

Hiding the mailbox name is just a cloth. Don't hide it — seal it.A thief with an antenna sees the waves right through the cloth. And letters to and from the shop get one more layer from the sealing promise.

In one breath

Wi-Fi security = make letters thrown through the air unreadable with a sealed lock, check a badge at the castle box, keep guests apart, and never trust the free mailbox in the square — send only through the sealed tunnel.

Anyone can receive a wireless signal, so you need encryption like WPA3, per-user 802.1X authentication, a separated guest network, and a VPN on public Wi-Fi. An evil twin (rogue AP) looks exactly like the real one.

When grown-ups say it

WPA2 / WPA3
The mailbox's sealing lock. Makes a caught letter unreadable. The newer lock (3) is sturdier. → the sealed letter
Public Wi-Fi
The free mailbox in the square. Nobody knows who put it up. Never drop a letter in without the sealed tunnel.
Rogue AP / evil twin
The thief's fake mailbox. Same name, same look. → the courier who opens letters on the way
802.1X
A badge for each person. Checks each person instead of one shared password. → a doorkeeper at every hole in the hall
Guest network
The guest mailbox. Can't reach the castle halls past the ribbon. → halls divided by colored ribbons
VPN
The sealed tunnel. From the square to the castle with no one peeking. → the sealed tunnel
Man-in-the-middle
Opening it on the way. What the fake mailbox does. → the courier in the middle
Hiding the SSID
A cloth over the mailbox. The waves still spread. A thief with an antenna sees it all — this is not security.
Next story
The Letter in the King's Handwriting →
Want another term as a picture book? Request →