How should guest Wi-Fi be secured?

Keep guests isolated from internal systems and apply appropriate access and usage controls.

Answer

Guest Wi-Fi should use a separate network or VLAN with client isolation and firewall rules that block internal resources. Use current encryption, a managed password or guest portal, bandwidth controls when needed, and logging consistent with organizational policy. Never place guests on the same trusted network as servers or administrative devices.