Field notes, powered by ewusOS

The shared Wi-Fi password is the problem, not the plan

Almost every shared building runs on one Wi-Fi password. It is the cheapest thing to set up and the most expensive thing to live with.

What the shared password actually costs

One password for a building is not an access policy. It is the absence of one. Everything that goes wrong afterwards traces back to the same root: the network cannot tell one person from another, so it cannot do anything per person.

  • Somebody moves out and their access leaves with nobody. The password is already on their phone, and on whoever they shared it with.
  • A neighbour connects. There is no way to notice, because there is nothing to compare against.
  • One person saturates the line and the only visible fact is that the internet is slow for everyone.
  • A resident asks for a faster plan and there is no unit to attach it to.

Changing the password fixes none of it. It resets the clock and starts the same cycle, and it punishes everyone for one person's behaviour.

Why the usual fixes do not hold

The two common responses are a captive portal that asks for a phone number once, and a router that limits how many devices can connect. Both fail for the same reason: they act on a device, not on a person.

Modern phones make this worse rather than better. Phones now randomise their hardware address between networks, which quietly breaks any system that treats an address as an identity. A person with a phone, a laptop and a tablet is three unrelated strangers to that kind of system, and the same person tomorrow may be three different strangers again.

What changes when the person is the unit

If the network knows a person, the awkward questions get ordinary answers. Their plan follows them across every device they own. Their access ends when their tenancy ends, without anyone remembering to remove it. A device nobody recognises is visible, because there is a list of people it does not belong to.

This is the model EWUS AnyB is built on: one identity per resident rather than one password per building, with approvals on whichever channel the resident already uses. It runs on the gateway itself, so the rules apply to everything joining through it.

Where EWUS actually is. The gateway described here is pre-certification: there is no stock, no pre-orders and no availability date, and nothing on this site is a photograph of finished hardware. What is described is what ewusOS is built to do. If it fits a problem you have, the waiting list is the only thing on offer today.

See EWUS AnyB →

Next: Running Wi-Fi in a PG: what actually breaks →

All field notes →