@Solla-topee 

Firmware version: 1.0.1 Build 20190124 Rel. 56886
Hardware version: RE450 v3.0

It is very annoying to see "weak security" next to the wifi network name on iOS14. I understand the auto security mode by default (with TKIP support) but after the first configuration setup, it should be the user to choose whether TKIP is enabled or disabled. It's very frustrating not being able to set AES encryption only.

You say that “IOS devices would still prefer the secure encryption method WPA2+AES, instead of TKIP when connecting to the range extenders”, so why does my iPhone still show “weak security”? When I press the “i” icon right next to network name, it says “WPA/WPA2 (TKIP) is not considered secure. If this is your Wi-Fi network, configure the router to use WPA2 (AES) or WPA3 security type”. So, it's clearly choosing to negotiate TKIP. This is all very confusing.

PS: And yes, my router is set to WPA2+AES only.

@AlexCouto I'm in the same situation....please refer to me if you find a solution.

@Aion As stated before i'm in the same situation...as soon as i have upgraded my iphone to IOS14 i had the same problem...and yes my router is set to WPA2+AES only, too

Infact when my phone is connected directly to the wifi without TP-Link extender i do not have this annoying message about security

Hope someone can solve the problem

@LucaItaly I returned the RE450 to Amazon and I bought the DECO M3 pack (01 x DECO M4R and 01 x DECO M3W extender). It's a mesh network instead of a router-repeater setting. My internet speeds at my daughter's room - close to the M3W - is around 50 Mbits instead of 5 or 6 Mbits when I was using the RE450. And now I have only WPA2-AES on all network (thanks to the beta firmware for this DECO kit - https://community.tp-link.com/en/home/forum/topic/227662).

@AlexCouto I just bought the RE450 yesterday and I'm having the exact same issue.  It connects to my router using WPA2-AES but anything I connect to the RE450 connects with WPA-TKIP which is unacceptable.  There is no way under the sun for the end user to control the security in the Wifi and TP-Link seems to prefer to use TKIP by default.  I've made a decision to return mine to Amazon.  Such a waste of time.  You'd think by year 2020 a network company would know how to make wifi work.  Very disappointed in TP-Link.  I'm also reading that the extender RE-220 is having the exact same issue.  

Solla-topee wrote

Our Range Extenders use Auto security mode by default, which supports WPA2+AES, and TKIP to be compatible with the devices that only support old encryption methods. If the Apple devices detect that the wireless connection a weak encrypted network,  'the weak security' would show up there. But in fact, IOS devices would still prefer the secure encryption method WPA2+AES, instead of TKIP when connecting to the range extenders, and users do not need to worry about the potential security issue.

@Solla-topee 

Your argument is flawed. Since the wireless extender still broadcasts using TKIP, attackers can still break into the network and access unencrypted data packets. TKIP option compromises the security of the entire network. I am appalled that TP-link sells products in 2020 with TKIP enabled by default. 

TKIP can be an option if customers have older devices, but the default configuration has to be delivered to be a secure one. At the bare minimum, AES option should be available for customers to enable. 

Are you rolling out firmware upgrades that enable AES option for the extended network? Or should I and all your customers who care for wifi security just give up and throw this equipment into the trash? 

@saisrujan Fortunately since I bought the RE450 last week, I was able to return it and get every penny back.  I won't buy anymore TP-Link wifi stuff.  Especially when they condone the TKIP protocol and blame it on the router.  I'm using a router than is defined for WPA2-AES only and the extender connects ok to it BUT it re-broadcasts using TKIP.  It has nothing to do with the source router.  
 

anyway I'm glad this was a quick and easy big to find so that I could return it.  

Dear @Solla-topee

I (but I think all of us) completely agree with @saisrujan .

I own a RE200 repeater and I'm in the very same situation.

I already asked a few times what the development timeline for an updated firmware is, but no answer yet.

So, please tell us by when we should expect a fix (because as said several times this definitely is a problem of the repeater) or if we should trash our equipment, as @saisrujan says.

Because, I want to stress this, our networks have been exposed for a long time (and until Apple released iOS v.14, we just didn't know it - maybe just a few of us did, using some network sniffer programs).

KR