Bug 419179

Summary:	Create password protected hotspot instead of one without security
Product:	[Plasma] plasmashell	Reporter:	sk.griffinix
Component:	Networks widget	Assignee:	Jan Grulich <jgrulich>
Status:	RESOLVED FIXED
Severity:	major	CC:	auxsvr, irchaika, jgrulich, justin.zobel, kdedev, leonvincenterd, nate, postix
Priority:	NOR
Version First Reported In:	master
Target Milestone:	1.0
Platform:	unspecified
OS:	Linux
Latest Commit:		Version Fixed In:	6.4.0
Sentry Crash Report:
Bug Depends on:	449265
Bug Blocks:

Description sk.griffinix 2020-03-24 12:10:25 UTC

SUMMARY
From plasma version 5.18, the applet has a nice feature as a button to enable hotspot, instead of manually creating one. However, hotspot so created has no security. Ideally it should have wpa/wpa2 personal security with a random password

STEPS TO REPRODUCE
1. open plasma-nm applet
2. click on hotspot
3. check hotspot for security

OBSERVED RESULT
hotspot is not secure

EXPECTED RESULT
should have wpa/wpa2 personal security with a random password

SOFTWARE/OS VERSIONS
Windows: 
macOS: 
Linux/KDE Plasma: 
(available in About System)
KDE Plasma Version: 
KDE Frameworks Version: 
Qt Version: 

ADDITIONAL INFORMATION

Comment 1 Jan Grulich 2020-03-24 12:12:26 UTC

The password for the hotspot can be configured in KCM.

Comment 2 sk.griffinix 2020-03-24 12:14:20 UTC

(In reply to Jan Grulich from comment #1)
> The password for the hotspot can be configured in KCM.

surely it can be. But hotspot without security shouldn't be the default

Comment 3 Nate Graham 2020-04-15 15:17:51 UTC

Agreed, it should have a random password by default and display that password to the user when first created.

Comment 4 sk.griffinix 2020-04-15 15:28:11 UTC

(In reply to Nate Graham from comment #3)
> Agreed, it should have a random password by default and display that
> password to the user when first created.

If possible, the password along with qr code. Its another feature in plasma i love

Comment 5 Justin Zobel 2020-11-19 23:33:09 UTC

Confirmed still not available in 5.20.3.

Comment 6 Justin Zobel 2020-11-19 23:39:54 UTC

Raised to VHI due to this being a potential security issue, exposing a user's current network to no others with no authentication.

Comment 7 sk.griffinix 2021-09-21 19:42:49 UTC

So any changes expected in nearby future? 

Just to add, if one edits the hotspot connection created by clicking on 'hotspot' button to have some security, then disabling and enabling hotspot connection by clicking on the 'hotspot' button again creates a connection with no security

Comment 8 Nate Graham 2022-01-21 05:23:56 UTC

*** Bug 435136 has been marked as a duplicate of this bug. ***

Comment 9 sk.griffinix 2022-01-28 21:03:48 UTC

Also depends on Bug 449265

Comment 10 Nate Graham 2022-01-29 03:25:29 UTC

Good catch.

Comment 11 Ben Cooksley 2024-12-23 18:25:56 UTC

Bulk transfer as requested in T17796

Comment 12 TraceyC 2025-04-24 20:18:48 UTC

This looks like it's been fixed in git-master so the fix should be available in 6.4.0
What I currently see when I create a hotspot on my laptop running git-master is that it's set to WPA/WPA2 Personal, with a password
I can connect to it with my Android phone using that password (I used its QR code, a newer feature)