How to change WPA to WPA2 on the Xiaomi Mi router: full instructions with a photo

Why WPA2 is safer than WPA and when to change encryption

Protocol WPA2 (Wi-Fi Protected Access 2) It has become a security standard for wireless networks in the 2004 Many users of Xiaomi Mi routers (including Mi Router models) 3/4/4A/4C/AX3600) obsolete WPA. The difference between them is like a bicycle lock and a safe: both protect, but one does it an order of magnitude more efficiently.

WPA’s main problem is the vulnerability to TKIP (Temporal Key Integrity Protocol) attacks that allow attackers to intercept and decrypt traffic. In 2017, even WPA2 received the known KRACK vulnerability, but it is extremely rare and requires physical access to the network. In contrast, a WPA hack can take several hours with free tools like Aircrack-ng, while a WPA2 with a strong password remains invulnerable for decades.

When should I change protocol?

• 🔍 You have noticed suspicious devices in the list of connected customers (192.168.31.1) → Devices).
• 📉 Internet speed drops for no apparent reason (traffic leakage through neighbors").
• 🛡️ Your router supports WPA3, But in the default settings, it is WPA/WPA2 (mixed-regime).
• 🔄 You bought a used router and are not sure of previous security settings.

Preparing for a change in protocol: what to check before starting

Before you go into the settings, make sure your Xiaomi Mi Router supports at all. WPA2. All models released after 2015 (including the Mi Router) 3G, 4Q, AX1800), This is the default feature, but here are the older versions (Mi Wi-Fi Mini or Mi Router). 1S) You may need to update the firmware.

What to do in advance:

1. Connect to the router via cable (LAN-port or Wi-Fi – not from your phone, but from your computer (in case the network “falls” after the changes).
2. Find out the current firmware version: Settings → General → System status. If the version is older than 2.0.XX, update it through Settings → Firmware Update.
3. Prepare a backup password for Wi-Fi (if you forget the new one, you will have to reset the router to factory settings).

💡

If you have a Xiaomi Mi Router AX6000 or newer, check for the WPA3 option – this is the next layer of protection, but not all devices support it (especially older smartphones and printers).

⚠️ Note: If you have devices older than 2010 on your network (e.g. Samsung Galaxy) S2 printer HP LaserJet, they may not be connected to WPA2-AES. In this case, choose a mixed mode. WPA2-PSK (AES+TKIP), But remember, this reduces security.

How to change WPA to WPA2 on Xiaomi Mi Router

The algorithm is the same for most Xiaomi Mi models, but the names of menu items may differ. We will consider a universal way through the web interface (works on the Mi Router 4A Gigabit Edition, AX3600, AIoT Router AC2350, etc.).

Steps:

1. Open your browser and enter in the address bar 192.168.31.1 (or miwifi.com). Log in under the administrator (login and password from the router, do not confuse with a password from Wi-Fi!).
2. Go to Settings → Wi-Fi (or Wireless Mode → Wireless Protection on Old Firmware).
3. Find the Authentication Method or Security Type field, and by default, it can be WPA-PSK/WPA2-PSK (mixed mode) or just WPA-PSK.
4. Select from the drop-down list of WPA2-PSK. If you have the option of Encryption, install AES (not TKIP!).
5. Create a new Wi-Fi password (at least 12 characters, with numbers and special characters). Save the changes.

WPA2-PSK (not mixed mode) protocol selected

Encryption installed on AES

New password recorded in a secure location

There are no important connected devices on the network (for example, IP-camera)

The router is connected to the UPS (if any) in case of a light outage-->

Once saved, the router will restart (it will take ~1 minute) and all devices will disconnect from Wi-Fi and have to be reconnected with a new password.

Common Mistakes and How to Avoid Them

Even in a simple procedure, there are pitfalls. Here are the typical mistakes of Xiaomi Mi Router users:

Critical error: if you have turned on WPA3 on the Xiaomi Mi router AX6000, But forget that your 2016 smartphone doesn't support this protocol -- you'll be left without the Internet. WPA3 Check the compatibility of all devices on the network!

⚠️ Attention: On routers Xiaomi Mi Router 4C Firmware older than 1.0.156 may not be available AES In this case, update the firmware manually through the Settings. → Update → Select a file (download the latest version from the official website mi.com).

How to Check if the Protocol Has Changed

It's not enough to just save the settings -- you need to make sure the router is applying the new settings. Here are 3 ways to check:

Method 1. Through the router's web interface

Go to Settings → Wi-Fi and see the current Authentication Method. If it has WPA2-PSK, it's okay. On some models (like the AX3600), the current settings are displayed in Status → Wireless.

Method 2. With the help of third-party utilities

Install Wi-Fi Analyzer (Android) or Network Analyzer (iOS) on your smartphone. Connect to your network and see the access point information, which will indicate the security protocol. Alternative for PC: Command Prompt:

netsh wlan show interfaces

Search for Security Type – WPA2-Personal should be there.

Method 3. Through router logs

Go to Settings → System → System log and find a record of the type Wi-Fi security updated to WPA2-PSK/AES. If there is no such record, the router has not applied the changes (try restarting it manually).

💡

If the Wi-Fi speed has dropped after the protocol change, check if TKIP compatibility mode has been activated. This algorithm limits the bandwidth to 802.11g (maximum 54 Mbps).

Additional security measures for Xiaomi Mi Router

Changing WPA to WPA2 is just the first step, and to make the network truly secure, do a few more things:

• 🔐 Turn it off. WPS (Wi-Fi Protected Setup. This feature is vulnerable to brute force attacks. → Wi-Fi → WPS → Shut down.
• 📡 Hide. SSID (This won't save you from professional hackers, but it will reduce the number of random connections. → Wi-Fi → Hide. SSID.
• 🔄 Enable automatic firmware updates. Xiaomi regularly closes vulnerabilities in routers.Path:Settings → Update → Auto-update.
• 🛡️ Set up a guest network for smart devices (lamps, cameras). → Guest network → Turn it on.
• 📱 Install Mi Wi-Fi app to monitor connected devices in real time.

For advanced users: activate filtering by MAC-Addresses (Settings) → Wireless mode → Filter MAC). But remember that MAC-The address can be forged, so this method is only an additional measure.

💡

If you have a Xiaomi Mi Router Pro or AX9000, check for Intrusion Prevention System (IPS) in the Security section.

What to do if the Internet is lost after the changes

Situation: You changed the protocol, the router rebooted, and the Internet is down.

1. Check the router's connection via cable. If you have LAN, but you don't have Wi-Fi, the problem is with the wireless settings.
2. Put the settings back to the factory. Press the Reset button on the 10 Seconds (on the back of the router) After reset, connect to the network Xiaomi_XXXX (password is indicated on the router sticker).
3. Check device compatibility. If one of the devices doesn't support WPA2, it can break the network for everyone, turn off all the gadgets, and connect one at a time.
4. Update your firmware manually. Download the latest version from Xiaomi’s official website and download it through Settings → Update → Select a file.

⚠️ Note: On routers Xiaomi Mi Router 3 with firmware 2.18.XX There is a bug: after changing the security protocol, access to the web interface via miwifi.com may disappear. IP-address 192.168.31.1 or reset settings.

FAQ: Answers to Frequent Questions