HomeCybersecurityWPA2 vs WPA3: Offline Dictionary Attack vs SAE Handshake

WPA2 vs WPA3: Offline Dictionary Attack vs SAE Handshake

Capture a WPA2 4-way handshake and a WPA3 SAE (dragonfly) exchange for the same password, then watch an offline cracking attempt: WPA2 lets an attacker guess millions of passwords per second entirely offline, while WPA3's SAE handshake cannot be verified offline at all and only allows slow, throttled, detectable live guesses against the network.

Cybersecurity3DModerate60 FPS
wpa2-vs-wpa3-offline-dictionary-attack-vs-sae-handshake ↗ Open standalone

Capture a handshake from a WPA2 network and a WPA3 network protected by the same password, then watch what an attacker can actually do with it. WPA2's captured 4-way handshake lets a cracking rig guess millions of passwords per second entirely offline. WPA3's SAE handshake gives the attacker nothing to check offline at all — every guess has to be tried live, one at a time, against the real access point, which is slow and detectable.

⚙ Under the hood

Capture a WPA2 4-way handshake and a WPA3 SAE (dragonfly) exchange for the same password, then watch an offline cracking attempt: WPA2 lets an attacker guess millions of passwords per second entirely offline, while WPA3's SAE handshake stalls at 0% because it cannot be verified offline at all, leaving only slow, throttled, detectable live guesses against the real access point.

wifi securitywpa3wpa2sae handshakedragonfly key exchangeoffline dictionary attackwireless network securitypassword cracking

3D · Three.js / WebGL renderer · 60 FPS target · runs fully client-side, no install

What did you find?

Add reproduction steps (optional)