@Solla-topee My router is setup to use WPA2+AES but RE450 extender still broadcasting TKIP... Any firmware updates or something??

Having experienced the "Weak Security" IOS 14 issue and it taking me a painfully long time to figure out it was the RE450 that was the issue, I have now fixed the problem.

Once I realised that the extender was the problem, I set about trying to figure out why - I naively thought the extender just took in the signal, amplified it and then broadcast an identical but stronger signal. Not so, it applied its own security. Up until that point I had only ever used Tether and it didn't give any information. I then went into the extender via the web interface via the extender's IP address (the factory default is 192.168.0.254), and whilst some basic settings were accessible, I didn't see anything about encryption.

I then thought about a firmware update, mine is a V2 extender and its firmware was from 2016. I updated the latest version,  Version 1.0.5 Build 20200914, and now more settings, including security were available. The first thing I noticed was that the extended signals were given different names to those used in the router. In the past the two frequencies from extender had the same names as those from the router. The names I see for the extender signals are TP-Link_Extender_5Ghz and TP-Link_Extender_2,4GHz. I set the security to WPA2-PSK and entered passwords for both (I used the same password I use for the router's wifi).

I then went onto my iPhone and looked at the wifi settings. The two new extender signals had been found and so I chose one and connected to it, but - WEAK SECURITY again.

I checked the signal security type for the extender's signal via Windows 10, and it showed that it was indeed WPA2 AES. So why was it being flagged as weak security?

In desperation I got the extender to re-scan the networks and re-chose the extender from the list of wireless signals that were found - you'll know you've done that because you'll need to reset the passwords for the extender's signals. I then did an extender reboot from within the web interface - the web interface will drop out when the reboot executes, but you then just enter the extender's IP address again to re-establish it. 

Hey presto! I now have 4 wifi signals, 2.5GHz and 5.0Ghz from both router and extender, and none of them report weak security. So the RE450 will definitely do the job.

Happy days!

TEST REPORT

I have a new RE450 v3 with a UK power plug.

I followed these instructions and still get the issue.

My Archer V1600 router was always set to WPA2/AES only (never auto of TKIP)

I am using different SSID (network name) for the the extended network and the router.

I have reconnected the extender to the router with both web and app interface.

On the iPAD, I get weak security warning, using "WPA/WPA2 (TKIP)". 

On Windows 10 laptop, network properties show "WPA2-Personal.

When I connect to the extender admin interface via either app or web there is no option to set security to WPA2 or AES on the extender.

DISCUSSION

How can a user test the statement "apple devices prefer to use the AES or TKIP when both are available"?

I believe this is a serious shortcoming that needs a simple firmware update:  Add WPA2/AES only as the default with TKIP as an option enabled on the App or Web Interface.

Since hardly anyone should still be setting up a network using TKIP, this should no longer be the default but available as an not-recommended option for older devices.

@intotecho 

Hi, Have you tried to the beta firmware for the RE450 v3:

https://community.tp-link.com/en/home/forum/topic/241928

Thank you very much and wait for your reply.

@SJB993 I've updated the firmware, but I'm not seeing any additional security settings. Where did you find them? In the app or website? And how did you navigate to them?

@OSHolivia 

Hi, the new firmware would strictly follow the encryption method of the main router.

So you might just need to set up the main router to be AES only and after re-configure the RE450 via web UI, It would us AES only as well.

Thank you!

@EnzoA 

When selecting market Sweden this firmware version does not show up.(https://www.tp-link.com/se/support/download/re450/v3/#Firmware)

Is the firmware different for different markets or can I use the one in the link?

@TP-Link I have a RE450 V2 with the newest Firmware and the main network is set to WPA2(PSK,AES) only and my device is still broadcasting TKIP, so this problem is still not fixed as of 2021. How many more years do you need to fix this? 10? 15 maybe? maybe you should consider firing all your developers if they don't fix such serious vulnerabilities.

@AlexCouto Some of my devices, like my iPhones, will not connect to my new TP-Link AC1750 Wi-Fi Range Extender (RE450 v3.0). It gives the message "WPA/WPA2 (TKIP) is not considered secure". For your info, I have upgraded to firmware version 1.0.2 Build 20201203 Rel. 80349(6583). The RE450 is extending a TP-Link TL-WR941HP | 450Mbps High Power Wireless N Router using firmware 2.0.2 Build 20191125 Rel. 54756. On this router, I have already set the encryption to "AES" and did a clean setup of the extender. Please explain how to fix it. Thanks.