# What is 802.1X, and does a small office need it?

802.1X is a standard that makes a device prove its identity before a switch port or Wi-Fi network lets it in, usually with a certificate or a user name and password checked by an authentication server. A device that fails gets no access, or lands in a restricted guest network. It is the strongest way to stop unknown devices from simply plugging in, and for Wi-Fi it replaces one shared password with per-user or per-device credentials, so that a leaver's access can be revoked on its own. It needs switches and access points that support it, an authentication server, which is often included in cloud identity or firewall products, and some care with printers and devices that cannot authenticate. Many small offices start with 802.1X on Wi-Fi only and port security on wired ports. NetSenX does not enforce network access; its network map shows the devices seen on monitored segments, on every plan, which helps you find the ones your access control missed.

FAQ: [Zero trust, identity and segmentation](https://netsenx.com/en/faq/zero-trust) · https://netsenx.com/en/faq/what-is-802-1x-and-does-a-small-office-need-it

## Read next

- https://netsenx.com/en/detect-lateral-movement-c2-beaconing
- https://netsenx.com/en/what-is-ndr

## Related questions

- [Is multi-factor authentication enough to stop account takeover?](https://netsenx.com/en/faq/is-mfa-enough-to-stop-account-takeover)
- [Does a partial MFA rollout count for insurers and auditors?](https://netsenx.com/en/faq/does-a-partial-mfa-rollout-count)
- [Which MFA methods resist phishing?](https://netsenx.com/en/faq/which-mfa-methods-resist-phishing)
- [What is MFA fatigue, or push bombing?](https://netsenx.com/en/faq/what-is-mfa-fatigue-or-push-bombing)
- [Who holds admin rights in our company, and how do we check?](https://netsenx.com/en/faq/how-to-find-out-who-has-admin-rights)