--- title: How to Decrypt WPA2-PSK Packets in Wireshark | IPTel description: How to decrypt WPA2-PSK Wi-Fi captures in Wireshark — capturing the 4-way handshake, entering the key and avoiding common gotchas. image: https://blog.iptel.com.au/hubfs/Blogs/How%20to%20Decode%20PSK%20with%20Wireshark/How%20to%20decrypt%20Psk%20Wi-fi%20with%20Wireshark%20(Instagram%20Post%20(Square))-feature.jpg --- [![IPTellogo-byline-2020-dark-v2-pnd-optimised-500 (1)](https://blog.iptel.com.au/hs-fs/hubfs/IPTellogo-byline-2020-dark-v2-pnd-optimised-500%20(1).png?width=200&height=59&name=IPTellogo-byline-2020-dark-v2-pnd-optimised-500%20(1).png "IPTellogo-byline-2020-dark-v2-pnd-optimised-500 (1)")](https://iptel.com.au) - [Home](https://iptel.com.au/) - [Solutions](https://iptel.com.au/solutions) Technologies - [Cisco Access Manager](https://iptel.com.au/technologies/cisco-access-manager) - [Cisco Catalyst Center](https://iptel.com.au/technologies/cisco-catalyst-center) - [Cisco Meraki](https://iptel.com.au/technologies/cisco-meraki) - [Cisco SDA Fabric](https://iptel.com.au/technologies/cisco-sda-fabric) - [Cisco Spaces](https://iptel.com.au/technologies/cisco-spaces) - [Everpure Storage](https://iptel.com.au/technologies/everpure-storage) - [Industrial IoT](https://iptel.com.au/technologies/industrial-iot) - [LAN](https://iptel.com.au/technologies/lan) - [Security and Cisco ISE](https://iptel.com.au/technologies/security-and-cisco-ise) - [ThousandEyes](https://iptel.com.au/technologies/thousandeyes) - [Virtualisation](https://iptel.com.au/technologies/virtualisation) - [Wi-Fi](https://iptel.com.au/technologies/wi-fi) Services - [Backup Assure](https://iptel.com.au/services/backup-assure) - [Cisco Network Upgrades](https://iptel.com.au/services/cisco-network-upgrades) - [Cisco URWB](https://iptel.com.au/services/cisco-urb) - [Cisco Webex Calling](https://iptel.com.au/services/cisco-webex-calling) - [Eco-Friendly Network Refresh](https://iptel.com.au/services/eco-friendly-network-refresh) - [Network Equipment Supply](https://iptel.com.au/services/network-equipment-supply) - [Splunk](https://iptel.com.au/services/splunk) - [Wi-Fi Assurance Review](https://iptel.com.au/services/wi-fi-assurance-review) - [Wi-Fi Surveys](https://iptel.com.au/services/wi-fi-surveys) - [Industries](https://iptel.com.au/industries) Education and Healthcare - [Education and Campuses](https://iptel.com.au/industries/education) - [Healthcare and Clinical](https://iptel.com.au/industries/healthcare) - [Hospital Wi-Fi Onboarding](https://iptel.com.au/services/hospital-wi-fi-onboarding-cisco-ise) - [Aged Care](https://iptel.com.au/industries/aged-care) Enterprise - [Enterprise Networks](https://iptel.com.au/industries/enterprise) Industrial - [Mining and Camps](https://iptel.com.au/industries/mines) - [Utilities](https://iptel.com.au/industries/utilities) Retail & Warehousing - [Retail](https://iptel.com.au/industries/retail-and-stores) - [Warehousing](https://iptel.com.au/industries/warehousing) Entertainment - [Stadiums](https://iptel.com.au/industries/stadiums) - [Hospitality](https://iptel.com.au/hospitality-and-hotels) - [MSP](https://iptel.com.au/managed-services) Meraki - [Meraki Access](https://iptel.com.au/managed-services/meraki-access-and-security) - [Meraki Security and SD-WAN](https://iptel.com.au/managed-services/meraki-sd-wan) Cisco - [Cisco Campus Access](https://iptel.com.au/managed-services/cisco-campus-access) - [Cisco SD-WAN](https://iptel.com.au/managed-services/cisco-sd-wan) - [Cisco ISE](https://iptel.com.au/managed-services/cisco-ise) Security and Collaboration - [Security Service Edge](https://iptel.com.au/managed-services/security-service-edge) - [Meeting Rooms](https://iptel.com.au/managed-services/meeting-rooms-as-a-service) - [Webex Calling](https://iptel.com.au/managed-services/webex-calling) Data Centre and More - [AI Infrastructure](https://iptel.com.au/managed-services/ai-infrastructure) - [Non-Cisco Devices](https://iptel.com.au/managed-services/non-cisco-device-management) Free Assessment - [Managed Services Assessment](https://score.iptel.com.au/managed-network-services) - [Equipment](https://iptel.com.au/services/network-equipment-supply) Equipment Supply - [Network Equipment Supply](https://iptel.com.au/services/network-equipment-supply) - [Buy Cisco Equipment](https://iptel.com.au/services/cisco-equipment-supply) - [Buy Meraki Equipment](https://iptel.com.au/services/meraki-equipment-supply) Get Pricing - [Get a Hardware Quote](https://iptel.com.au/services/network-equipment-supply#hardware-quote) - [Wi-Fi AP Estimator](https://iptel.com.au/resources/wifi-access-point-estimator) - [Blog](https://blog.iptel.com.au) - [Resources](https://iptel.com.au/resources) Free Resources - [Top Wi-Fi Secrets](https://iptel.com.au/top-8-wi-fi-secrets) - [Cisco SDA Fabric](https://iptel.com.au/the-cios-guide-to-sda-fabric) - [Catalyst Center Enablement](https://iptel.com.au/cisco-catalyst-center-enablement) Assessments - [ASD Essentials Assessment](https://score.iptel.com.au/asd-essentials-network-assessment) - [Cloud AI Assessment](https://score.iptel.com.au/cloud-ai-assessment) - [Collaboration Assessment](https://score.iptel.com.au/collaboration-assessment) - [Managed Services Assessment](https://score.iptel.com.au/managed-network-services) - [Network Assessment](https://score.iptel.com.au/network-assessment) - [Security Assessment](https://score.iptel.com.au/security-assessment) - [Splunk Assessment](https://score.iptel.com.au/splunk-assessment) Tools - [Automating Meraki](https://www.automatingmeraki.com) - [MAC Address Converter](https://iptel.com.au/resources/mac-address-converter) - [ThousandEyes Option Tool](https://score.iptel.com.au/thousandeyes) - [Wi-Fi AP Estimator](https://iptel.com.au/resources/wifi-access-point-estimator) Demos and Design - [Request a Meraki Demo](https://iptel.com.au/free-meraki-demo) - [FREE Meeting Room Design](https://iptel.com.au/schedule-meeting-room-design-session) - [Catalyst Center Enablement](https://iptel.com.au/cisco-catalyst-center-enablement) - [About](https://iptel.com.au/about-us) IPTel Solutions - [About us](https://iptel.com.au/about-us) - [Job Applications](https://careers.iptel.com.au/job-application) - [Privacy Policy](https://iptel.com.au/privacy-policy) - [Careers Blog](https://careers.iptel.com.au) Contact Us - [Contact Us Form](https://iptel.com.au/contact-us) - [Email Us](mailto:sales@iptel.com.au) Customer - [Customer Feedback](https://iptel.com.au/customer-feedback) - [Customer Referral](https://iptel.com.au/customer-referral) - [Terms and Conditions](https://iptel.com.au/terms-and-conditions) News Stories - [Project Guardian uses Networking Infrastructure as a Sensor](https://www.dailytelegraph.com.au/news/nsw/transport-for-nsw-launches-worldfirst-sensor-trial-to-stop-rail-and-bridge-trespassers/news-story/8dc52e8fbca4c471da408e670cf0163e) - [IPTel partners for monitoring for Meeting Rooms as a Service](https://www.commsbusiness.co.uk/content/news/highlight-partners-with-iptel-solutions) - [Webex Monitoring with Highlight](https://itbrief.co.uk/story/highlight-iptel-add-webex-monitoring-for-meeting-rooms) - [ITBrief with Meeting Room Monitoring](https://itbrief.com.au/story/highlight-iptel-add-webex-monitoring-for-meeting-rooms) - [Cisco Webex Meeting Rooms Monitoring](https://telconews.co.uk/story/highlight-iptel-add-webex-monitoring-for-meeting-rooms) - [IPTel adopts Highlight](https://itbrief.com.au/story/iptel-adopts-highlight-to-enhance-managed-services) - [Highlight MSP Upgrade](https://datacentre.solutions/news/71753/iptel-solutions-upgrade-with-highlights-service-platform) - [Cisco 360](https://www.crn.com.au/news/2026/networking/aussie-partners-react-cisco-360) - [DP World Transformation](https://www.cisco.com/site/us/en/about/case-studies-customer-stories/dp-world.html) - [Cisco Managed Services](https://www.arnnet.com.au/article/1251771/how-partners-can-take-a-leap-of-faith-with-managed-services.html) - [Project Delivery Excellence](https://channellife.com.au/story/cisco-honours-top-nz-partners-cisco-live) - [Great Place to Work](https://greatplacetowork.com.au/companies/iptel-solutions/) - [Wi-Fi Doesn't have to be Unreliable](https://www.techpartner.news/feature/iptel-wi-fi-doesnt-have-to-be-unreliable-494069) Buying from IPTel - [Buying Panels](https://iptel.com.au/professional-supply-panels) - [IPTel Store](https://store.iptel.com.au) - [Request a Quote](https://iptel.com.au/request-a-quote) - [Managed Services](https://iptel.com.au/managed-services-enquiry) Case Studies - [DP World Video](https://blog.iptel.com.au/hubfs/Case%20Studies/DP%20World_Case_Study.mp4) - [DP World](https://blog.iptel.com.au/dp-world-case-study) - [Backup Assure](https://blog.iptel.com.au/backup-assure-a-disaster-recovery-case-study) [Contact Us](https://iptel.com.au/contact-us) [Blog](https://blog.iptel.com.au) This is a search field with an auto-suggest feature attached. - There are no suggestions because the search field is empty. ## How to Decrypt PSK Packets Captured with Wireshark July 24, 2026 During fault finding with WLAN networks, there comes a point where you just have to take it down to the lowest level. Sometimes it is because you have a bug and you need to see the exact behaviour of devices in the network, in order to work out where the issue lies. ![How to decrypt Psk Wi-fi with Wireshark](https://blog.iptel.com.au/hs-fs/hubfs/Blogs/How%20to%20Decode%20PSK%20with%20Wireshark/How%20to%20decrypt%20Psk%20Wi-fi%20with%20Wireshark.png?width=2240&height=1200&name=How%20to%20decrypt%20Psk%20Wi-fi%20with%20Wireshark.png) Having worked on quite a lot of bugs, this is something that every WLAN engineer will eventually have to do. Omnipeek is a powerful sniffer tool, which we use for these scenarios. It's not the cheapest tool though, so as an alternative, using Wireshark is a great option. Wireshark has been around for quite a long time, morphing from Ethereal (can you remember that far back?) to what we know and love as Wireshark today. Related reading - [Wi-Fi Phone Dropouts](https://blog.iptel.com.au/wifi-phone-dropouts) - [Wi-Fi Assurance Review](https://blog.iptel.com.au/wifi-assurance-review) --- ## Wireshark Packet Captures ![Wireshark logo](https://blog.iptel.com.au/hs-fs/hubfs/Imported_Blog_Media/wireshark_logo.png?width=265&height=74&name=wireshark_logo.png) Of course packet captures aren't for the faint of heart - you'll capture millions of packets and often can be looking for a needle in a haystack. That elusive failure in a sequence of packets - hard to spot, but sometimes you have to dig really deep to find the root cause. Apart from needing adapters which can do monitor mode (many cannot), you'll likely need one per channel you're trying to sniff - which means a few if you're debugging 5GHz. Related reading - [Wi-Fi Predictive Designs](https://blog.iptel.com.au/wifi-predictive-design-wifi-heatmaps) - [Wi-Fi Design Technical Requirements](https://blog.iptel.com.au/wi-fi-design-technical-requirements) - [Wi-Fi Design Business Requirements](https://blog.iptel.com.au/wi-fi-design-business-requirements) --- ## PSK Decode Gotchas Once you've got the sniff, though, you can look at the outer headers. That's going to tell you how the device is roaming, how it is communicating and if anything obvious is occurring at that level. Sometimes though, you really need to see inside the packet trace. For example, when decoding a voice sniff, being able to replay it to hear the moment a dropout occurs helps to isolate the section of the trace leading up to that event. The decode itself is fairly easy but there are a couple of gotchas: 1\. You have to capture the full 4-way handshake of the client, as that's where the session key (the PTK) for that client is derived from the PMK, the nonces and the MAC addresses. If you only capture data after the handshake has happened, you can't decrypt any of it. 2\. Wireshark can only keep track of a limited number of associations in a capture, so if a lot of associations are being captured at once, it may fail to decode the client you are after. You can get around this by exporting just this client's packets to a separate file (including the 4-way handshake) and then try again. This page tells you the general process (and where you type in the PSK in Wireshark): [https://wiki.wireshark.org/HowToDecrypt802.11](https://web.archive.org/web/20190307172519/https://wiki.wireshark.org/HowToDecrypt802.11) Related reading - [5 ways Catalyst Center solves your challenges](https://info.iptel.com.au/cisco-dna) - [Wi-Fi Pre-deployment Surveys](https://blog.iptel.com.au/wireless-pre-deployment-surveys) - [Recessed Ceiling Tiles](https://blog.iptel.com.au/recessed-ap-installation) - [Wi-Fi vs 5G](https://blog.iptel.com.au/cisco-private-5g) --- ## Capture ALL Packets over the Air One other gotcha is that you can't capture everything over the air with Wireshark on Windows using the standard WinPcap drivers (that ship with Windows Wireshark). This is because WinPcap can't put a wireless NIC in monitor mode. Other options are: - Third party pcap drivers that work with Windows Wireshark such as Npcap or AirPcap - Using Wireshark on OSX or Linux Using other packet capture tools (to capture the packets and later open in Wireshark) such as: - Omnipeek for Windows (more expensive) - Microsoft Network Monitor 3.4 (free to download) - OSX Wireless Diagnostics Sniffer (built in to OSX) - Kismet on Linux Related reading - [Cisco Catalyst Center Assurance](https://blog.iptel.com.au/blog/cisco-catalyst-center-assurance) - [5 Ways Catalyst Center Solves your Challenges](https://info.iptel.com.au/cisco-dna) --- ### What We've Learnt about PSK Packets Captured with Wireshark Wireshark is a great, free tool - what's not to like! For newbies, there's a lot in there though - but that's true for any sniffer tool. When doing captures, you will be presented with mountains of data to sift through. Careful logging when taking sniffs of just what you're after will help zero in on the relevant packet exchanges you're looking for though. If you've got the money, Omnipeek is a paid-for tool that's a bit of an industry standard. Either way, you'll need the correct adapters to be able to sniff all the traffic over the air, so do the research first and get the right ones for the tool you're using. Happy sniffing! Please [contact us](https://iptel.com.au/contact-us) should you need any assistance.   Related reading - [Cisco AI Analytics in operation](https://blog.iptel.com.au/cisco-ai-analytics-in-operation) - [Cisco Machine Learning and AI](https://blog.iptel.com.au/cisco-machine-learning-and-ai) --- ## Wireshark PSK Decryption: FAQs ### What Do I Need to Decrypt WPA2-PSK Traffic in Wireshark? The passphrase and SSID (or the derived PSK) and a capture that includes the client's complete 4-way EAPOL handshake. ### Why Won't Wireshark Decrypt My Capture? The most common reason is a missing or incomplete 4-way handshake. Each client derives its own session keys, so the capture must include that client's handshake — for example, by capturing as it connects. ### Where Do I Enter the Key in Wireshark? In the IEEE 802.11 protocol preferences, enable decryption and add a wpa-pwd (passphrase and SSID) or wpa-psk key. ### Can WPA3 or 802.1X Traffic Be Decrypted the Same Way? Not with the passphrase alone. WPA3-SAE and 802.1X keys can't be derived from a passphrase, so this method applies to WPA2-Personal. ### Need Help With Your Wi-Fi? Our [Wi-Fi survey and design team](https://iptel.com.au/services/wi-fi-surveys) designs, surveys and fixes enterprise Wi-Fi across Australia, and the free [AP Estimator](https://iptel.com.au/resources/wifi-access-point-estimator) gives you a first AP count. If that would be useful, [get in touch with the IPTel team](https://iptel.com.au/contact-us) or email [sales@iptel.com.au](mailto:sales@iptel.com.au). #### Related Articles ###### [Wi-Fi Troubleshooting Part 2: Evidence for a Wi-Fi Review](https://blog.iptel.com.au/how-to-gather-evidence-for-a-wifi-review-part-2) June 3, 2026 ###### [Troubleshooting with Cisco Catalyst Center](https://blog.iptel.com.au/troubleshooting-with-cisco-catalyst-center) Sept 11, 2025 ###### [Wi-Fi Design 101](https://blog.iptel.com.au/wi-fi-design-101) June 8, 2026 Free tool ### How Many Wi-Fi Access Points Do You Need? Work out APs, PoE and switch ports floor by floor, using the same survey grades our Cisco wireless engineers design to. Takes under a minute. [Try the AP Estimator →](https://iptel.com.au/resources/wifi-access-point-estimator?utm_source=blog&utm_medium=cta&utm_campaign=ap-estimator) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Mark McSherry", "url" : "https://blog.iptel.com.au/author/mark-mcsherry" }, "dateModified" : "2026-10-03T07:35:52.884Z", "datePublished" : "2026-07-24T04:16:38.000Z", "headline" : "How to Decrypt WPA2-PSK Packets in Wireshark | IPTel", "image" : [ "https://blog.iptel.com.au/hubfs/Blogs/How%20to%20Decode%20PSK%20with%20Wireshark/How%20to%20decrypt%20Psk%20Wi-fi%20with%20Wireshark%20(Instagram%20Post%20(Square))-feature.jpg" ], "mainEntityOfPage" : { "@id" : "https://blog.iptel.com.au/how-to-decrypt-psk-packets-captured-with-wireshark", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.iptel.com.au/hubfs/IPTel_Solutions_February2020%20-%20Header%20SiteMap/Images/IPTellogo-byline-2020-dark-v2.png" }, "name" : "IPTel Solutions Pty Ltd" } } ```