Depending on the make and model of the router used in a network, reducing its range might be worth considering.

The attack therefore has limitations that are similar to those that KRACK has (see also our blog article „ The state of Wifi, ten months after KRACK“). In addition to this, an attacker needs to be physically close to the wifi network he wants to target. Setting a long password makes an attack of this kind economically non-viable. It would take substantially more time and computing power than most attackers have at their disposal. This ensures that any attacker would have a much harder time cracking the wifi password. A sufficiently strong password should be at least 20 characters long and consist of upper and lower case characters as well as digits and special characters. Currently, the only effective defense against attacks like this is to make the wifi password longer. This makes if quite plain that short passwords no longer offer enough protection. Granted, this is not necessarily a setup that you see every day, but it is certainly a far cry from requiring a hugely expensive supercomputer.

A powerful machine with four high-end graphics cards was used for this. In a test conducted by the hashcat developers, a password consisting of eight characters was cracked in less than a minute. Trying to derive the password from the input data becomes more difficult the longer the password is.

Wpa2 wordlist 2017