Wi-Fi AKM Suites
An interactive table of every Wi-Fi AKM suite: what each one is, which hash and features it uses, where it's advertised, and which ones common WPA2 and WPA3 setups use.
How to use this tool controls and what to look for
Search or filter the table of AKM suites, then check which suites common WPA2 and WPA3 setups advertise.
Controls to change
- Search: find a suite by number, name or feature, for example 8, SAE or FT.
- Fast Transition (802.11r) only: show only the 802.11r suites.
- Hide deprecated and draft: keep only suites in use today.
- What does my network advertise?: in section 2, pick a network setup and see which suites it advertises and which one each kind of client chooses.
What to look for
- Each suite selector, such as 00-0F-AC:8, names one way of authenticating and deriving keys.
- Transition modes advertise several AKMs at once, so older and newer clients can each pick one they know.
- The FT versions of each suite add 802.11r, and some suites move from SHA-256 to SHA-384.
About this tool
Every protected Wi-Fi network lists one or more AKM (Authentication and Key Management) suites in its beacons: the method used to authenticate and derive keys. This interactive table covers every suite from PSK and 802.1X to SAE, OWE, FILS and SAE-EXT-KEY, with filters, sorting and details, and shows which ones common WPA2 and WPA3 setups advertise.
What you'll learn
- What each AKM suite selector (such as 00-0F-AC:8) stands for
- Which suites WPA2, WPA3, Enhanced Open and WPA3-Enterprise 192-bit use
- Which suites add 802.11r Fast Transition or SHA-256/384 key derivation
- How transition modes work by advertising several AKMs
Common questions
What is an AKM suite?
Authentication and Key Management suite: the entry in a network's RSN element that says how clients authenticate and how keys are derived, such as PSK, SAE or 802.1X.
Which AKM does WPA3-Personal use?
SAE, 00-0F-AC:8. Wi-Fi 7 networks often add SAE-EXT-KEY (00-0F-AC:24), and transition mode also lists PSK (00-0F-AC:2) for WPA2 devices.
Where can I see a network's AKM suites?
In a packet capture of a beacon or probe response, in the RSN Information element, which lists the ciphers, the AKM suites and the RSN capabilities.
Free for private and educational use. This interactive model is a simplified teaching aid and may contain mistakes. It is provided as is, without warranty. Use it to understand the concepts, not as a substitute for a site survey, vendor documentation or professional design advice.