Understanding Wi-Fi Sense
Sharing Wi-Fi Usually Meant Sharing the Secret
Giving another person access to a wireless network traditionally required giving that person the network password.
Once disclosed, the password was no longer exclusively under the network owner’s control. It could be written down, stored on another device, repeated to someone else, or retained long after the original visit.
Windows 10 introduced a different approach.
Access and Knowledge of the Password Did Not Have to Be the Same Thing
Wi-Fi Sense was designed so another compatible device could receive access to a shared wireless network without displaying the underlying Wi-Fi password to the person using that device.
A Wireless Network Could Be Shared Through a Contact Group
Wi-Fi Sense allowed Windows 10 users to share access to selected password-protected wireless networks with groups of contacts.
The feature worked with supported contact relationships associated with services such as Outlook.com and Skype. Instead of manually communicating the wireless password, the network owner could choose to make access available through Wi-Fi Sense.
The recipient could connect without being told the password.
The Password Was Not Displayed to the Contact
Microsoft documented that people receiving access to a network through Wi-Fi Sense did not see or receive the network password itself.
Saving a Wi-Fi Password Did Not Immediately Give It to Everyone
The feature attracted attention partly because of concerns that wireless credentials might automatically be distributed to contacts.
That was not how Microsoft described the sharing process. A password-protected network had to be deliberately selected for sharing before contacts could receive access through Wi-Fi Sense.
The network owner still made the decision.
Knowing a Network Was Not the Same as Sharing It
Wi-Fi Sense did not automatically turn every wireless network stored on the computer into a network available to the user’s contacts.
Windows Handled the Connection Information Behind the Scenes
A recipient’s computer still needed enough information to authenticate with the wireless access point.
Wi-Fi Sense handled that process without presenting the password as ordinary readable information to the recipient. Microsoft described the shared password as being stored and transferred through encrypted mechanisms associated with the service.
The user received connectivity rather than the visible secret.
The Computer Could Know What the Person Did Not
A device can possess information required to complete an authentication process without providing that information through the user interface as a password the person can read and repeat.
The Guest Was Not Supposed to Receive the Entire Home Network
Connecting to a home wireless network can potentially mean more than reaching the Internet.
Computers, printers, shared folders, network storage, and other devices may also exist behind the same router. Microsoft therefore distinguished Wi-Fi Sense shared access from ordinary unrestricted participation in the local network.
The intent was Internet access.
Sharing Wi-Fi Did Not Mean Sharing Every Computer
Microsoft stated that contacts receiving a network through Wi-Fi Sense could use its Internet connection but would not receive access to other computers, devices, files, or intranet resources on the shared network.
You Could Not Necessarily Pick One Individual From the Group
The convenience of contact-based sharing came with an important limitation.
Microsoft’s implementation worked with supported groups of contacts rather than functioning like a conventional guest list where every individual could always be selected separately.
That made the choice of group important.
A Contact Category Could Include More People Than Expected
Sharing with a supported contact group could make the network available to qualifying members of that group, so users needed to understand who belonged to the group before enabling sharing.
Shared Access Was Not Designed to Become an Endless Chain
One obvious concern was whether a contact receiving network access could then automatically share the same network with another set of contacts.
Microsoft documented that a network received through Wi-Fi Sense was not recursively shared onward through the recipient’s own contact relationships.
The original sharing decision remained significant.
The Share Did Not Keep Multiplying
A network made available to one user’s contacts through Wi-Fi Sense was not intended to propagate automatically from those contacts to another generation of contacts.
Corporate Authentication Was Not Treated Like a Home Password
Business wireless networks frequently use authentication systems more sophisticated than a single shared password.
Enterprise environments may identify individual users or devices through 802.1X authentication and centralized credentials. Microsoft excluded those networks from the ordinary Wi-Fi Sense sharing model.
Not every wireless connection was eligible.
802.1X Networks Could Not Be Shared This Way
Microsoft documented that enterprise wireless networks using 802.1X authentication were not available for Wi-Fi Sense contact sharing.
Windows Could Help Find Suggested Open Hotspots
The feature was not limited to sharing protected networks between contacts.
Wi-Fi Sense could also help Windows connect to suggested open wireless hotspots collected through Microsoft’s service. The idea was to reduce the amount of manual network selection required while a device moved between locations.
Wireless connectivity could become more automatic.
Windows Could Recognize Connectivity Opportunities
Wi-Fi Sense included functionality for connecting to suggested open hotspots in addition to networks that had been deliberately shared through supported contacts.
Automatic Connectivity Did Not Make an Open Network Private
An open wireless hotspot remains fundamentally different from a properly secured private network.
Microsoft cautioned users about performing sensitive activities over open networks because other people may be able to connect to the same infrastructure and the network itself may not provide the protections expected from a trusted private connection.
Convenience did not eliminate network security.
Connected Did Not Mean Trusted
Automatic connection to an open hotspot could provide Internet access, but users still needed to consider whether that network was appropriate for activities involving sensitive or personal information.
Not Every Wireless Signal Was Treated Equally
A computer may see several wireless networks at the same location.
Windows could consider information such as previously used networks, password protection, and other connection characteristics when deciding which available network should receive preference.
Automation still involved selection.
Familiar and Protected Networks Could Take Priority
Wi-Fi Sense operated within Windows networking behavior that could favor known or protected connections rather than treating every visible hotspot as equally desirable.
The Sharing Intelligence Lived Outside the Access Point
The wireless router did not need to understand Outlook contacts or Skype relationships.
From the router’s perspective, a compatible device still authenticated to the wireless network. The additional logic controlling who could receive connection information existed through Windows and Microsoft’s Wi-Fi Sense service.
The feature operated above ordinary Wi-Fi authentication.
An Existing Network Could Gain a New Sharing Method
Wi-Fi Sense did not require homeowners to replace ordinary wireless access points simply to use contact-based network sharing on supported Windows devices.
Convenient Sharing Reduced the Need to Choose an Easy Wireless Password
People sometimes choose simple Wi-Fi passwords partly because guests need to type them.
A complicated sequence can be frustrating to dictate across a room or enter on multiple devices. A system that supplies network access without revealing the password reduces that particular convenience pressure.
The secret can remain a secret.
A Password Does Not Need to Be Human-Friendly When Humans Do Not Need to Type It
Removing routine manual entry can make it more practical to retain a longer wireless password without repeatedly communicating that password to visitors.
Convenience Required Trust in Another Service
Wi-Fi Sense reduced direct disclosure between people, but it did not eliminate credential handling.
Microsoft’s service became involved in storing and distributing the protected connection information required for eligible contacts to join shared networks.
The trust relationship changed rather than disappeared.
Not Showing the Password Is Not the Same as Never Handling It
The network credential still had to be processed and delivered securely so authorized devices could connect, which meant users were trusting the service architecture responsible for protecting that information.
A Wireless Network Could Be Excluded From Wi-Fi Sense
Microsoft provided a naming convention that network operators could use when they did not want a wireless network participating in Wi-Fi Sense.
Including _optout in the network’s SSID signaled that the network should be excluded from the service.
The network name itself could communicate the preference.
The SSID Could Carry an Opt-Out Signal
Microsoft documented that adding _optout to a wireless network name could prevent that network from participating in Wi-Fi Sense.
Administrators Did Not Have to Accept Automatic Wireless Sharing
Enterprise administrators often need predictable networking behavior across managed computers.
Microsoft provided management mechanisms for disabling Wi-Fi Sense and related automatic hotspot functionality on Windows 10 systems. Organizations could therefore prevent the feature from becoming part of their managed wireless environment.
Consumer convenience did not override enterprise policy.
Wi-Fi Sense Could Be Centrally Controlled
Windows 10 provided administrative configuration options that allowed organizations to disable automatic connections to suggested hotspots and networks shared through Wi-Fi Sense.
Contact-Based Wi-Fi Sharing Did Not Become a Permanent Windows Feature
Windows 10 continued changing after its original release.
Microsoft later removed the ability to share Wi-Fi networks with contacts through Wi-Fi Sense. Other Wi-Fi Sense functionality continued for a time, but the contact-sharing model associated with the original Windows 10 release did not remain intact.
Not every new feature becomes permanent.
Windows Features Can Reflect a Particular Moment
Wi-Fi Sense is useful historically because it shows how Microsoft was experimenting with making network connectivity more automatic during the original Windows 10 period, even though parts of that approach were later discontinued.
Giving Someone Connectivity Did Not Have to Mean Giving Them the Credential
Wi-Fi Sense approached an old networking problem from an unusual direction.
People frequently needed temporary access to a wireless Internet connection, but providing that access traditionally required revealing the same shared password used by every other device on the network.
Windows attempted to separate those two actions.
A guest could receive the connection without receiving the secret used to create it.
Wi-Fi Sense Tried to Make Wireless Access Shareable Without Making the Password Public
Windows 10’s original Wi-Fi Sense implementation allowed users to deliberately share access to selected password-protected wireless networks with supported groups of contacts. Microsoft documented that recipients could connect without being shown the Wi-Fi password itself. The feature could also help Windows connect to suggested open hotspots.
The distinction between network access and local network access was important. Microsoft stated that contacts using a shared network received Internet connectivity but were not given access to the owner’s other computers, devices, files, or intranet resources. Enterprise networks using 802.1X authentication were also excluded from this form of sharing.
The contact-sharing portion of Wi-Fi Sense would not become a lasting Windows feature, but in 2015 it represented an unusual attempt to solve a familiar problem: allowing another person onto a wireless network without requiring the network owner to disclose the password directly.
