PPSK and iPSK guides
Per-user and per-device pre-shared keys: what each vendor calls them and how to run them.
In short
PPSK, iPSK, DPSK and MPSK are vendor names for one idea: a single SSID where every user or device gets its own pre-shared key. The RADIUS server maps each key to an identity and a VLAN, so you can revoke one person without changing the password for anyone else. Purple calls this xPSK.
All 9 guides
Frequently asked questions
What is the difference between PPSK and iPSK?
Mostly the name. Cisco calls it iPSK, Ruckus calls it DPSK and HPE Aruba calls it MPSK. Each gives users or devices their own key on a shared SSID.
When should I use per-user keys instead of 802.1X?
When devices cannot run 802.1X, such as games consoles, smart TVs and IoT devices, or when residents need to bring any device without installing a profile. That is why multi-tenant buildings use them.
How do you revoke a single key?
Remove or disable it on the RADIUS server. Purple binds each key to an identity and revokes it from cloud RADIUS, so nobody else has to reconnect.
Do per-user keys work with WPA3?
It depends on the vendor, because WPA3-Personal uses SAE rather than the WPA2 handshake. The per-device PSK comparison guide lists support vendor by vendor.