A strong Wi-Fi signal tells you that a network is easy to receive. It does not tell you whether its wireless security settings are well configured.
The DSTIKE Wi-Fi Auditor is a portable 2.4 GHz Wi-Fi configuration inspection tool. It reads information advertised by nearby access points and displays authentication, encryption, Protected Management Frames (PMF), and observed Wi-Fi Protected Setup (WPS) information. You can inspect these settings without joining the network or entering its password.
Its purpose is to make wireless configuration easier to understand. A scan can highlight settings worth reviewing, but it cannot certify that a network is safe.
What can a Wi-Fi scan reveal?
Access points advertise information that helps compatible devices discover and connect to them. Wi-Fi Auditor examines that information and turns it into an on-screen assessment.
You can review the network name, access point identifier (BSSID), channel, received signal strength, and advertised security settings. This helps answer practical questions: Is your router allowing legacy encryption? Does it advertise WPA2, WPA3, or both? Is PMF optional or required?
Signal strength and security are separate measurements. For example, −45 dBm represents a stronger received signal than −80 dBm. Neither value tells you whether the router has a strong password or trustworthy internet access.
How to understand the configuration ratings
Wi-Fi Auditor displays a rating together with a reason and suggested action. These labels describe the configuration observed by the firmware; they are not the results of attempting to break into a network.
| Rating | What it means |
|---|---|
| HIGH RISK | An ordinary open wireless link, WEP, or weak or missing encryption was identified. |
| WEAK CONFIG | Legacy WPA or TKIP is allowed. |
| BASIC | WPA2-Personal with recognized AES-based encryption was observed. |
| MIXED MODE | The access point advertises both WPA2-Personal and WPA3-Personal. |
| STRONG CONFIG | The observed settings meet the firmware’s WPA3, encryption, and required-PMF criteria. |
| REVIEW | Settings need further evaluation, such as enterprise authentication or an inconsistent security configuration. |
| ENCRYPTED | OWE wireless encryption was observed, but access point identity remains unverified. |
| UNKNOWN | Information is incomplete, unsupported, inconsistent, or out of date. |
Read the explanation alongside the label. STRONG CONFIG does not verify who operates the access point, and BASIC does not mean a vulnerability has been demonstrated.
UNKNOWN also does not automatically mean dangerous. The device may be waiting for a complete broadcast or may have lost recent reception. Wait for an update, move closer, or start a new scan.
Why PMF and WPS deserve a closer look
Protected Management Frames help protect certain Wi-Fi management traffic, including deauthentication and disassociation frames. PMF Optional means protection is supported but is not required for every connection. PMF Required means the advertised configuration requires it. WPA3 requires PMF, but PMF does not protect against every kind of wireless disruption. Espressif explains PMF and WPA3 in its Wi-Fi security documentation.
Wi-Fi Auditor reports advertised settings. It does not establish which protection a particular connected phone actually negotiated.
WPS information needs similar care. An observed WPS advertisement is a reason to review the router’s setup options, not proof of an exploitable vulnerability. Conversely, “not observed” does not confirm that WPS is disabled.
A practical way to check your own router
Suppose your router appears with WEAK CONFIG and an explanation that TKIP is allowed. This is an illustrative example, not a reported test of a particular router.
-
Identify your access point. Check the network name and BSSID against your own equipment. Mesh systems may have several entries with the same name.
-
Read the assessment and security details. Review the reason, encryption settings, and PMF information together.
-
Review your router’s settings. If it allows legacy WPA or TKIP, consult its documentation for a supported configuration that avoids those legacy options while accommodating your devices.
-
Apply the change and rescan. Wait for the router’s Wi-Fi to return, then inspect the updated broadcast configuration.
This gives you a visible before-and-after check of what your router advertises. Password strength, router updates, and the security of connected devices still need separate attention.
Two displays and controls for standalone use
Wi-Fi Auditor combines an ESP32-WROOM-DA platform with two 1.3-inch SH1106 OLED displays. The current interface shows nearby access points on the left and details for the selected network on the right.
Move the rocker left or right to select an access point. Press it inward to cycle through Assessment, Security, Radio, and System pages. A dedicated scan button refreshes the access point list.
The firmware scans at startup, then listens for broadcasts to update entries already in the list. After moving to another location, press the scan button to discover additional access points.
An included 800mAh rechargeable battery and 3D-printed enclosure make the device portable. The physical battery switch controls whether the battery powers the device. Recharge through USB-C using a suitable 5V source; the onboard TP4056 charging circuit shows red while charging and green when charging is complete. Runtime varies with activity and settings.
For makers, the ESP32-WROOM-DA platform and 16MB flash also provide room for custom Arduino projects. Available functions depend on the firmware installed.
What should you know before using it?
It scans 2.4 GHz Wi-Fi only. Wi-Fi Auditor cannot inspect 5 GHz or 6 GHz networks. The module’s two antennas serve its 2.4 GHz radio; they do not provide dual-band operation. The current firmware defaults to channels 1–11, so access points on channels 12 or 13 may be absent.
Results are temporary. The current assessment firmware does not provide RTC or microSD recording. A new scan or power-off clears the results. Photograph the display if you need a record.
Configuration visibility has limits. A scan cannot establish password strength, verify access point identity, find every router vulnerability, or determine whether the internet connection is trustworthy. A familiar network name and a favorable rating are not enough to make that decision.
Wi-Fi Auditor is useful for makers, networking learners, and owners who want a clearer view of their router’s advertised settings. Use it on networks you own or have permission to assess.
Explore the DSTIKE Wi-Fi Auditor and its current specifications.