Wi-Fi AKM Suites

Every protected Wi-Fi network advertises one or more AKM suites: the method used to authenticate and to derive the keys. Filter, sort and click any suite to see what it is, where it's used and whether it's current.

What an AKM suite is

AKM stands for Authentication and Key Management. The AP lists the AKMs it accepts in the RSN element of its beacons and probe responses; the client picks one and repeats it in its association request. The AKM decides how the client proves itself (a passphrase, SAE, 802.1X, nothing at all for OWE), which hash the key derivation uses, and whether 802.11r Fast Transition is used. Each suite is written as a 4-byte selector: an organisation identifier (OUI) and a number. IEEE suites use 00-0F-AC, so WPA3-Personal's SAE is 00-0F-AC:8.

1 · All AKM suites

Authentication
Show
  

2 · What does my network advertise?

Pick a common setup to see which AKMs the AP lists, and which one each kind of client chooses. Click a suite to jump to it in the table.

Notes