# Huge security vulnerability **URL:** \ **Category:** Sensors\ **Created:** [October 21, 2022, 3:52am UTC](https://community.purpleair.com/t/huge-security-vulnerability/2474 "2022-10-21T03:52:23Z")\ **Posts on this page:** 12\ **Page:** 1
**Author:** ![MichaelC](https://avatars.discourse-cdn.com/v4/letter/m/82dd89/32.png) [@MichaelC](https://community.purpleair.com/u/MichaelC)\ **Post date:** [October 21, 2022, 3:52am UTC](https://community.purpleair.com/t/huge-security-vulnerability/2474/1 "2022-10-21T03:52:23Z")
My sensor is showing and updating on the map, and I also have a network PurpleAir-xxxx on my network list. I can connect to the PurpleAir network, and get the PurpleAir config screen which says “WiFi Connected Looking good!” I’m not using 192.168.4.0 subnet. My network to which the sensor is successfully connected has internet access, which is why the sensor shows on the map. (And the map shows signal strength “good”) **Anyone in range, therefore, can connect to my sensor and tamper with the settings, easily knocking it offline, for example.** ---
**Author:** ![Ashley\_PurpleAir](https://sea2.discourse-cdn.com/flex020/user_avatar/community.purpleair.com/ashley_purpleair/32/1661_2.png) [@Ashley\_PurpleAir](https://community.purpleair.com/u/Ashley_PurpleAir)\ **Post date:** [December 6, 2022, 9:40pm UTC](https://community.purpleair.com/t/huge-security-vulnerability/2474/2 "2022-12-06T21:40:21Z")
Hello Michael, The PurpleAir-\*\*\*\* network should become unavailable after the device has bee configured to WiFi. Feel free to email us with your device ID so we can investigate further. Thank you ---
**Author:** ![MichaelC](https://avatars.discourse-cdn.com/v4/letter/m/82dd89/32.png) [@MichaelC](https://community.purpleair.com/u/MichaelC)\ **Post date:** [December 7, 2022, 5:47pm UTC](https://community.purpleair.com/t/huge-security-vulnerability/2474/3 "2022-12-07T17:47:03Z")
It is behaving correctly now. Thank you. ---
**Author:** ![RonTiv147](https://avatars.discourse-cdn.com/v4/letter/r/cdc98d/32.png) [@RonTiv147](https://community.purpleair.com/u/RonTiv147)\ **Post date:** [December 26, 2022, 10:01pm UTC](https://community.purpleair.com/t/huge-security-vulnerability/2474/4 "2022-12-26T22:01:00Z")
Hello, I am searching the Community for answers to problems I am having setting up a new PA II. I am not sure if this thread has anything to do with the issue but I read that “the PA network should become unavailable after the device has been configured to WiFi.” Both screenshots show that my WiFi and the PA II “Network” are both active, and I assume are connected. However, I have not received any data from the outdoor unit. My question is whether the “PurpleAir Network” is “unavailable” as you wrote? If I click on the PA WiFi it is labeled “unsecured network” but I still see no data, so I revert back to my secure network “Tivoli-V”. I am not sure if this could be a reason I am not receiving any data. Thanks Ron ![One](https://us1.discourse-cdn.com/flex020/uploads/purpleair/original/2X/7/7c1ee31ce2495c652ab1b1755c1cfdef6b69c881.jpeg) ![Two](https://us1.discourse-cdn.com/flex020/uploads/purpleair/original/2X/3/34620c92072eb1d6d32d5d28558020ed3c4861ac.jpeg) ---
**Author:** ![Ashley\_PurpleAir](https://sea2.discourse-cdn.com/flex020/user_avatar/community.purpleair.com/ashley_purpleair/32/1661_2.png) [@Ashley\_PurpleAir](https://community.purpleair.com/u/Ashley_PurpleAir)\ **Post date:** [December 27, 2022, 7:55pm UTC](https://community.purpleair.com/t/huge-security-vulnerability/2474/5 "2022-12-27T19:55:28Z")
Hello Ron, Welcome to the PurpleAir community! I’m sorry that you’re having issues connecting to the Wi-Fi. Once you have connected your sensor to Wi-Fi, your PurpleAir\*\*\*\* network will no longer appear in your list of available networks. If you have an Eero router, I would recommend reviewing this article: [Trouble connecting with an Eero router](https://community.purpleair.com/t/trouble-connecting-with-an-eero-router/1411) If you are not using an Eero router, are there any security settings that could affect the sensor’s ability to connect? If you still have issues, please contact our support team at [contact@purpleair.com](mailto:contact@purpleair.com) with your device ID number. ---
**Author:** ![PokAlice](https://avatars.discourse-cdn.com/v4/letter/p/9e8a1a/32.png) [@PokAlice](https://community.purpleair.com/u/PokAlice)\ **Post date:** [June 5, 2023, 4:39pm UTC](https://community.purpleair.com/t/huge-security-vulnerability/2474/6 "2023-06-05T16:39:02Z")
In the theoretical scenario where my WiFi goes down, and the purpleair can be connected to directly after X number of minutes, my concern is whether someone connected to the sensor directly would then have the ability to extract my main network WiFi password from the PurpleAir device. Is PurpleAir able to comment? Thanks ---
**Author:** ![Ethan](https://sea2.discourse-cdn.com/flex020/user_avatar/community.purpleair.com/ethan/32/177_2.png) [@Ethan](https://community.purpleair.com/u/Ethan)\ **Post date:** [June 5, 2023, 5:03pm UTC](https://community.purpleair.com/t/huge-security-vulnerability/2474/7 "2023-06-05T17:03:21Z")
If the PurpleAir-\*\*\*\* network has appeared, the device has deleted its previous WiFi connection settings and reverted to the default. This means that your SSID and password would not be on the device and could not be extracted. There is also no connection between the PurpleAir-\*\*\*\* network and the network that your device is configured to. ---
**Author:** ![PokAlice](https://avatars.discourse-cdn.com/v4/letter/p/9e8a1a/32.png) [@PokAlice](https://community.purpleair.com/u/PokAlice)\ **Post date:** [June 5, 2023, 5:14pm UTC](https://community.purpleair.com/t/huge-security-vulnerability/2474/8 "2023-06-05T17:14:48Z")
Hi Ethan - Thanks for that information, that is reassuring! ---
**Author:** ![PokAlice](https://avatars.discourse-cdn.com/v4/letter/p/9e8a1a/32.png) [@PokAlice](https://community.purpleair.com/u/PokAlice)\ **Post date:** [June 5, 2023, 5:22pm UTC](https://community.purpleair.com/t/huge-security-vulnerability/2474/9 "2023-06-05T17:22:42Z")
Sorry one further question on this - does this mean that if my WiFi network is unavailable for more than 10 minutes and the purple air network becomes available again I would have to re enter my WiFi password in the purple air settings for it to reconnect again? I’m thinking that has to be the case if it erases the previous WiFi configuration? ---
**Author:** ![Ethan](https://sea2.discourse-cdn.com/flex020/user_avatar/community.purpleair.com/ethan/32/177_2.png) [@Ethan](https://community.purpleair.com/u/Ethan)\ **Post date:** [June 5, 2023, 7:15pm UTC](https://community.purpleair.com/t/huge-security-vulnerability/2474/10 "2023-06-05T19:15:35Z")
You have that correct: if the sensor disconnects, the network information will need to be re-entered. ---
**Author:** ![PokAlice](https://avatars.discourse-cdn.com/v4/letter/p/9e8a1a/32.png) [@PokAlice](https://community.purpleair.com/u/PokAlice)\ **Post date:** [June 5, 2023, 9:37pm UTC](https://community.purpleair.com/t/huge-security-vulnerability/2474/11 "2023-06-05T21:37:30Z")
Thanks for confirming. ---
**Author:** ![Mark\_from\_Pittsburgh](https://sea2.discourse-cdn.com/flex020/user_avatar/community.purpleair.com/mark_from_pittsburgh/32/231_2.png) [@Mark\_from\_Pittsburgh](https://community.purpleair.com/u/Mark_from_Pittsburgh)\ **Post date:** [March 8, 2024, 3:40pm UTC](https://community.purpleair.com/t/huge-security-vulnerability/2474/12 "2024-03-08T15:40:38Z")
Has this always been the case? I have generally felt that PurpleAir monitors seem to remember network information and re-attach after even an extended power outage. How would that be possible if they “forget” the credentials when disconnected? Thanks for your insights! Best, Mark