Modern Routers Can Become Wi-Fi Surveillance Tools
Wi-Fi technology is almost everywhere: in homes, offices, cafes, hotels, and public spaces. However, new research draws attention to a potential major privacy risk: modern routers could become Wi-Fi surveillance tools, capable of identifying and tracking people without the help of video cameras and even without them carrying a phone or other connected device.
The discovery comes from researchers at the Karlsruhe Institute of Technology and is based on how modern Wi-Fi technology works.
How does Wi-Fi signal-based person identification work?
Routers compatible with Wi-Fi 5 (802.11ac) and newer versions use a technology called beamforming, designed to optimize connection speed and stability. For this process, connected devices send technical information called Beamforming Feedback Information (BFI) back to the router.
The problem is that this data travels through the air and, according to the research, can be passively intercepted by other nearby equipment.
When a person moves through the space covered by the Wi-Fi network, their body and movements modify the propagation of radio waves. These changes create a unique pattern, a “fingerprint” based on gait and movement, sufficient for identification.
More worryingly, the method does not require network access, Wi-Fi password, or compromising the router.
Wi-Fi surveillance technology can identify people with 99.5% accuracy
In tests conducted on 197 participants, researchers achieved an identification rate of approximately 99.5%, successfully recognizing the same person when they re-entered the monitored area.
Practically, if a system were previously trained to associate a person’s gait pattern with their identity, subsequent monitoring could be done without a smartphone, smartwatch, or other devices on them.
This completely changes the paradigm of digital surveillance. Until now, discussions about tracking mainly focused on mobile phones, cookies, or video cameras. The new approach would allow direct identification simply by presence in a Wi-Fi-covered space.
What are the implications?
Experts warn that the technology could have serious implications for privacy:
- employee monitoring in office spaces;
- analyzing foot traffic in stores and shopping centers;
- identifying visitors in public spaces;
- collecting behavioral data without consent;
- use in invisible surveillance systems.
Moreover, researchers argue that any location with modern routers, cafes, airports, or hotels, could theoretically become a passive identification point.
How can Wi-Fi surveillance technology evolve in the future?
Currently, ordinary users have limited options. Since the mechanism is integrated into modern Wi-Fi standards, simply changing the password or using a VPN does not eliminate the risk.
Researchers recommend introducing additional protection measures for BFI data in future Wi-Fi standards, including their encryption.
Until then, users can adopt a few preventive measures:
- Constant firmware updates for the router;
- Disabling unused functions;
- Using separate networks for IoT devices;
- Avoiding unnecessary connections to public networks.
More than just internet access equipment
The discovery shows that Wi-Fi routers are no longer just equipment for internet access, but can become unexpected sources of data collection about human behavior.
As wireless technologies evolve, the discussion about security must go beyond passwords and classic encryption. In the future, protecting privacy could also mean controlling how radio signals describe our presence and movements.
Sources: www.kit.edu, publikationen.bibliothek.kit.edu
