What is staff WiFi?
Definition
Staff WiFi is an employee-only wireless network that authenticates each user or device individually, usually with 802.1X, and is isolated from guest and payment networks. Where guest WiFi is designed for low-friction sign-up, staff WiFi is designed around identity: who is connecting, from which device and with what access.
Staff WiFi explained
Many staff networks still run on a shared password, which fails as soon as someone leaves or the password travels. A secure staff network replaces it with 802.1X on WPA2-Enterprise or WPA3-Enterprise, backed by a RADIUS server connected to the organisation’s identity provider. Each person signs in with their own credential, or their managed device connects with a certificate.
Identity makes the rest possible. RADIUS can place different roles on different VLANs, so head office staff, store staff and contractors see only what they need. Disabling someone in the directory removes their WiFi access at the same time. Accounting logs show who was connected and when, which supports compliance audits.
Segmentation from the guest network is non-negotiable. Staff and guest SSIDs should map to separate VLANs with firewall rules between them, so a guest device can never reach staff systems or point-of-sale traffic. Personal and IoT devices that cannot use 802.1X can go on per-device keys rather than weakening the main staff network.
Need more than a definition?
Talk to our team about how Purple combines guest WiFi, captive portals, RADIUS, and analytics into a single platform that runs on the access points you already own.