If you know the PSK, how do you decrypt WPA/WPA2 traffic in Wireshark?

• A. Edit the Windows registry to enable WPA decryption
• B. Configure the 802.11 decryption key (WPA-PSK) in Wireshark’s 802.11 settings so it can decrypt the frames
• C. Install a VPN driver and decrypt through VPN
• D. Use SSL decryption settings

Answer: (B)

Decryption of WPA/WPA2 traffic in Wireshark relies on supplying the pre-shared key (PSK) so Wireshark can derive the per-session keys from the 4-way handshake. When you know the PSK for a WPA‑PSK network, you configure that key in Wireshark’s 802.11 decryption settings. With the handshake captured, Wireshark uses the PSK (along with the network SSID) to compute the Pairwise Transient Key and decrypt the data frames. Without providing the PSK in the 802.11 settings, the frames stay encrypted.

Other options don’t fit because editing the Windows registry doesn’t feed a Wireshark decryption key, a VPN driver won’t decrypt the wireless frames, and SSL decryption tools are for application-layer encryption like HTTPS, not the WPA/WPA2 layer.