Wi-Fi password sharing security
Apple devices that support Wi-Fi password sharing use a mechanism similar to AirDrop to send a Wi-Fi password from one device to another.
When a user selects a Wi-Fi network (requestor) and is prompted for the Wi-Fi password, the Apple device starts a Bluetooth Low Energy (BLE) advertisement indicating that it wants the Wi-Fi password. Other Apple devices that are awake, in close proximity, and have the password for the selected Wi-Fi network connect using BLE to the requesting device.
The device that has the Wi-Fi password (grantor) requires the Contact information of the requestor, and the requestor must prove their identity using a process that’s similar to AirDrop. After identity is proven, the grantor sends the requestor the passcode, which can be used to join the network.
Organizations can restrict the use of Wi-Fi password sharing for devices or apps being managed through a mobile device management (MDM) solution.