> For the complete documentation index, see [llms.txt](https://documentation.hak5.org/wifi-pineapple-pager/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://documentation.hak5.org/wifi-pineapple-pager/pineapple-evil-wpa.md).

# Pineapple Evil WPA

The passphrase for a WPA network is meant to be kept secret, but often, is not. In many environments, the PSK is posted publicly - either accidentally, or as a semi-public guest network.

### Enabling EvilWPA mode  <a href="#enabling-evilwpa-mode" id="enabling-evilwpa-mode"></a>

EvilWPA is configured via `PineAP` > `Evil WPA`.

Use EvilWPA to match the passphrase and encryption type of the target access point.

<figure><img src="/files/rfnXwXIfVLL0J6RvGNKp" alt="PineAP EvilWPA Configuration"><figcaption><p>PineAP EvilWPA Configuration</p></figcaption></figure>

### Partial handshake capture  <a href="#partial-handshake-capture" id="partial-handshake-capture"></a>

EvilWPA mode also allows *partial handshake* capture.

Typically, packets from both devices (the access point and the client) are required for attempting to crack a WPA handshake.

EvilWPA allows partial handshake capture - capturing only the handshake sent by the client - for use in a *PMKID* attack.

Partial PMKID handshake data captured will be saved in `/root/loot/handshakes/`.

<br>