What does WPA stand for?
WPA stands for Wi-Fi Protected Access. The family of Wi-Fi security standards. Original WPA with TKIP was a stopgap after WEP and is now weak; WPA2 brought AES-CCMP; WPA3 adds SAE to resist offline password cracking. Personal uses a shared passphrase, Enterprise authenticates each user via RADIUS.
WPA is the family of Wi-Fi security standards from the Wi-Fi Alliance. The first WPA was a quick replacement for the broken WEP and used TKIP so that it could run on existing hardware. WPA2 moved to AES encryption. WPA3 keeps AES and replaces the pre-shared key handshake with SAE, which resists offline guessing of the passphrase. Each version has a Personal mode, with one passphrase for everyone, and an Enterprise mode, in which each user signs in individually through 802.1X and a RADIUS server.
WPA in practice: an example
A small company uses one Wi-Fi passphrase that every past employee still knows. The technician replaces it with WPA2-Enterprise: each person signs in with their own account, checked by a RADIUS server. When someone leaves, disabling the account ends that person's Wi-Fi access and nobody else has to change anything.
What WPA is confused with
WPA vs WEP: what is the difference?
WEP is the original Wi-Fi encryption and can be broken in minutes. WPA was created to replace it, and WEP should not be used on any network.
WPA vs WPS: what is the difference?
Wi-Fi Protected Setup is a convenience feature for joining a network with a button or a PIN. It is not an encryption standard, and its PIN method is a known weakness that is usually switched off. What WPS stands for
Which exams cover WPA?
WPA is on the official CompTIA acronym list for two of the four exams covered here.
- Network+ N10-009: 2.0 (Network Implementation).
- A+ 220-1201 and 220-1202: 220-1202 2.0 (Security).
Each number is a CompTIA exam objective and the name in brackets is its domain. The exam puts the term in a scenario; it does not ask you to recite the expansion.
Check yourself: two practice questions
Written by CertSprint for this page. They are not taken from any exam.
1. Which option gives the strongest protection on a new home wireless router?
- WEP
- WPA with TKIP
- WPA3-Personal
- An open network with a hidden name
Show the answer
C. WPA3-Personal. WPA3 is the current standard and its SAE handshake resists offline passphrase guessing. WEP and TKIP are obsolete, and an open network has no encryption.
2. A company wants each employee to sign in to Wi-Fi with an individual account that can be disabled separately. Which mode provides this?
- WPA2-Personal
- WPA2-Enterprise
- WEP with a longer key
- WPS push button
Show the answer
B. WPA2-Enterprise. Enterprise mode authenticates each user through 802.1X and a RADIUS server. Personal mode shares one passphrase among everyone.
Sources: Wi-Fi Alliance: Wi-Fi security (WPA2 and WPA3); NIST SP 800-97, Establishing Wireless Robust Security Networks: A Guide to IEEE 802.11i; NIST glossary: Wi-Fi Protected Access. The acronym and its expansion come from CompTIA's official acronym lists, linked from each exam glossary above. The explanation, example and questions are CertSprint's own, checked against these sources on 11 November 2026.