How Wi-Fi Connects You

Your phone joins Wi-Fi networks dozens of times a week, at home, at work, in cafés and on trains. This lesson explains what happens when it does, and the single fact that every wireless attack in Unit V depends on: a network's name tells you nothing about who runs it.

What you'll be able to do

Explain how a device finds and joins a Wi-Fi network and why a network name alone proves nothing about who runs it.

• Describe the roles of the router, the access point and the network name (SSID).
• Explain why choosing a network by its name or signal strength is not a safety check.
• Read today's Wi-Fi labels (Wi-Fi 6, Wi-Fi 7, WPA3) and compare the risks of Wi-Fi and mobile data.

Routers and access points

Wi-Fi is a way of connecting devices to a network by radio instead of cables. At home, the box your broadband provider gave you usually does two jobs at once:

• The access point is the radio part. It sends and receives Wi-Fi signals to and from your devices.
• The router connects your home network to your ISP and, through it, to the rest of the Internet. As you saw in Lesson 2.1, it also shares one public address among all your devices.

In offices, campuses and airports these jobs are usually split across many devices, with dozens of access points spread around a building. The idea is the same: your device talks by radio to an access point, and the network behind it carries your data onward.

How your device finds a network

Every phone and laptop has a Wi-Fi settings screen that lists nearby networks. Each network is identified by its SSID (Service Set Identifier), which is simply its name. As Dr. Al-Doori explains, access points constantly broadcast their names so that devices in range can see them. Your device shows each name with its signal strength.

When you pick a network, your device connects, possibly after you type a password. It then usually remembers that network and joins it again automatically next time it sees the same name. That is convenient at home. It also means your device may join any network that uses a name it remembers.

A name proves nothing

Here is the key point of the lesson. Anyone can give a network any name. You can rename your own home network, or your phone's hotspot, to "City_Library" or "Airport_Free_WiFi" in a few seconds. Nothing checks that the name belongs to whoever uses it.

Your device identifies a network mainly by its name. So two networks with the same name can look identical in your Wi-Fi list, and a strong signal only means the access point is close by. It says nothing about who owns it. The book calls this the seed of every wireless impersonation attack, and Unit V (Lesson 5.9) shows how criminals use it with fake hotspots. For now, remember the rule: when it matters, confirm the exact network name with the people who run the place, from a sign or the staff, instead of trusting the list.

Today's Wi-Fi labels

You will see two kinds of label on routers, phones and laptops.

Generations. The book uses the technical names 802.11a, b, g and n. In 2018 the Wi-Fi Alliance, the industry body that certifies Wi-Fi products, introduced simple generation numbers: Wi-Fi 4 (802.11n), Wi-Fi 5 (802.11ac) and Wi-Fi 6 (802.11ax). Since then, Wi-Fi 6E has added a new radio band (6 GHz), and Wi-Fi 7 (802.11be) has followed. Newer generations are mainly about speed and handling many devices at once.

Security. The label that matters for protection is the security setting. WPA3 is the current standard, and WPA2 is its widely used predecessor. WPA3 is required for Wi-Fi CERTIFIED 6 devices. For home networks, WPA3-Personal makes it much harder for an attacker to guess the Wi-Fi password by trying combinations offline (Wi-Fi Alliance). Lesson 5.10 shows how to check your own router. Remember, though, that even the best encryption protects the radio link to a network. It does not tell you who runs that network.

Wi-Fi or mobile data?

When your phone uses mobile data (4G or 5G), it connects to your mobile operator's network instead of a nearby access point. That avoids the "who runs this hotspot?" question, and the UK's NCSC suggests mobile data as a sensible alternative to unknown public Wi-Fi for sensitive tasks.

But mobile data has different risks, not no risks:

• Text messages are not encrypted. That is one reason the US cybersecurity agency CISA ranks SMS codes as the weakest kind of second sign-in step, and advises people who are likely targets not to use them at all (Unit IV covers better options).
• Phones are the main target for scams. Verizon's 2026 Data Breach Investigations Report found that mobile-centric lures, such as texts and calls, got about 40% higher click rates than email in its simulations. Unit III is about exactly these tricks.

Real-World Example

Imagine: at home, a student shows her flatmate how little a network name proves. Their home Wi-Fi is called "Flat_12". She turns on her own phone's hotspot and, just for the demonstration, gives it the same name. Her flatmate's laptop now lists two networks called "Flat_12", and the hotspot shows the stronger signal because the phone is on the same table. Nothing in the list reveals which one is the real home network. She switches the hotspot off and renames it. The point is made: the name and the signal bars tell you nothing about who owns a network.

Try this kind of demonstration only with your own devices and network. Never broadcast a network name designed to mislead other people.

From the Book to 2026

What the book teaches. Wi-Fi goes by the labels 802.11a/b/g/n; devices list networks by their broadcast name (SSID) and signal strength; a network's name is not proof of who runs it; and mobile data does not share Wi-Fi's risks.

Why it made sense. The name-is-not-identity point was true then and is still the foundation of wireless security. Mobile data really does avoid the fake-hotspot problem.

What has changed. Security guidance has evolved since the original text. The Wi-Fi Alliance now uses generation names (Wi-Fi 4 to Wi-Fi 7), and WPA3 is the current security standard. Phones have also become the main channel for scams, so mobile data has different risks rather than none.

What to do now. Confirm network names with the venue, prefer mobile data for sensitive tasks on networks you don't know, and stay alert to texts and calls on any connection.

What Would You Do?

A friend tells you: "I always join whichever free network has the strongest signal. And when I'm on mobile data I don't worry at all, because nothing can go wrong there." What would you tell them?

Knowledge Check

Key Takeaways

• Your device talks by radio to an access point; the router links your network to the Internet.
• Networks are identified by their broadcast name (SSID), and anyone can use any name.
• Signal strength shows distance, not ownership. Confirm network names with the venue when it matters.
• Wi-Fi generations are numbered (Wi-Fi 4 to 7); WPA3 is the current security standard, with WPA2 before it.
• Mobile data avoids unknown hotspots but brings its own risks, especially scam texts and calls.

Further Study

• PowerCert Animated Videos — Wireless Access Point vs Wi-Fi Router (optional, external)

Sources

• Wi-Fi Alliance — Wi-Fi Alliance introduces Wi-Fi 6
• Wi-Fi Alliance — Brand Style Guide (2025)
• Wi-Fi Alliance — Wi-Fi CERTIFIED WPA3 Technology Overview
• CISA — Mobile Communications Best Practice Guidance
• CISA — Implementing Phishing-Resistant MFA (fact sheet)
• UK NCSC — Small Business Guide
• Verizon — 2026 Data Breach Investigations Report: Executive Summary
• Dr. Tahseen Al-Doori — Cyber Security Essentials, Chapter 6: Wireless Network Basics