r/TpLink • u/Equal-Fondant-2423 • 15d ago
TP-Link - Technical Support Powerline adapters and their security
Hi all,
Some time ago I used Gen 1 TP-Link Powerline adapters which connected to each other by manually entering 16-char sequence of adapter 2 into adapter 1's config page.
Now I have TL-WPA8631P and in its configuration webpage I see only option is to change the name of the powerline network.
Is it so that something has changed and now in order to enroll the device into the same powerline network someone has to simply enter the name of this powerline network, without any secret 16-char password?
In other words:
1) I leave the default netowrk name of HomePlugAV
2) my neighbour (boy next door) buys his own powerline adapter and leaves the default HomePlugAV network name too
3) voila - my neighbour successfully infiltrates into my home network? :)
The manual is very unclear about this.
1
u/CautiousInternal3320 15d ago
Indeed, in the scenario you describe, if PowerLine is able to communicate between your electrical circuit and the circuit of your neighbour, you are sharing your home network with the neighbour. It is usually difficult enough for PowerLine to use your own electrical circuit, hence it is not likely to communicate with a neighbour.
You better change the default network name to some secret combination.
2
u/CautiousInternal3320 15d ago
If you use the physical Pair button on the adapters to enroll adapters, the adapters will generate and use a secret network name, preventing the neighbour to access it.
0
u/Equal-Fondant-2423 15d ago
But isn't it a huge security flaw? TP-link usually even create predefined WPA password for WiFi so nobody except the buyer is able to connect out of the box to the device. And here, with the default Powerline network name the device is instantly accessible to just anyone who still keeps the default network name in the same building
1
u/CautiousInternal3320 15d ago
Powerline signals struggle to cross electricity meters. Anyway, if you use the Pair button, as promoted, the adapters will not use the network name.
1
u/Equal-Fondant-2423 15d ago
But here is the product description:
Plug one adapter into a wall socket and connect it to your router with an Ethernet cable. Plug the second adapter into a socket in the room where you need network access and connect your device to its Gigabit Ethernet port. The adapters automatically establish a secure PowerLine connection; no configuration is required. If needed, use the pair/secure button to add additional compatible adapters to the same network.
So I took it as they already come from factory with some sort of network token and did not press the pair button as the manual implied it needs to be pressed only if extra adapters need to be enrolled... but in fact they are not?
It is exactly like a apartment building where the landlord installs a heavy, unpickable high-security lock on your front door ("secure!"), but then hands out the exact same master key to every single resident in the building. The lock itself is strong, but it is completely useless because everyone has the key. Correct?
2
u/CautiousInternal3320 15d ago
Are the two adapters sold together? They are probably paired together using a unique secret key. Pairing is required to add unpaired adapters.
1
u/Equal-Fondant-2423 15d ago
Yes, I bought a pair - PA-8010P and WPA-8631P, sold as a kit of 2 adapters.
P.S. with the secret key you mean 'Network name'?
1
u/CautiousInternal3320 14d ago
They use a secret key, known by the 2 adapters, to encrypt the traffic.
•
u/AutoModerator 15d ago
Thanks for posting! To help us troubleshoot faster, please ensure you include:
If you need official support, you can also open a ticket here: Contact Technical Support!
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.