This commit is contained in:
J. Nick Koston
2025-11-10 16:45:54 -06:00
parent f275a31c3a
commit 4964fdc1b0

View File

@@ -207,13 +207,15 @@ def _apply_min_auth_mode_default(config):
if CONF_MIN_AUTH_MODE not in config and (CORE.is_esp8266 or CORE.is_esp32):
if CORE.is_esp8266:
_LOGGER.warning(
"The minimum WiFi authentication mode (min_auth_mode) is not set. "
"The minimum WiFi authentication mode (wifi -> min_auth_mode) is not set. "
"This controls the weakest encryption your device will accept when connecting to WiFi. "
"Currently defaults to WPA (less secure), but will change to WPA2 (more secure) in 2026.6.0. "
"WPA uses TKIP encryption which has known security vulnerabilities and should be avoided. "
"WPA2 uses AES encryption which is significantly more secure. "
"If your router supports WPA2 or WPA3, no action is needed - the new default will be more secure. "
"If your router only supports WPA, explicitly set 'min_auth_mode: WPA' to maintain compatibility."
"If your router supports WPA2 or WPA3, no action is needed - "
"the new default will be more secure. "
"If your router only supports WPA, add 'min_auth_mode: WPA' under 'wifi:' "
"in your configuration to maintain compatibility."
)
config[CONF_MIN_AUTH_MODE] = VALIDATE_WIFI_MIN_AUTH_MODE("WPA")
elif CORE.is_esp32: