Service Set Identifier (SSID) is the name that identifies a wireless network (WLAN) so client devices can discover it and connect. Configured on the wireless access point, an SSID can be broadcast openly or kept hidden, and every device joining that WLAN must know and select the matching SSID to associate.
Key takeaways
- An SSID is the human-readable name broadcast by a wireless access point.
- Devices join a WLAN by selecting the SSID that matches their network.
- An SSID can be broadcast openly or hidden from casual network scans.
- Corporate and guest Wi-Fi typically use separate SSIDs for isolation.
- Versa lets you set SSID, security protocol, and broadcast per interface.
On this page: Why it mattersHow it worksTypesSSID & VersaFAQ
Why is an SSID important?
Every wireless network needs a way for devices to find it among the signals in range, and the SSID is that identifier. A clear SSID naming scheme – separating corporate Wi-Fi from guest Wi-Fi – lets users and IT staff quickly identify which network to join or troubleshoot. The SSID is also the first control point in wireless access: broadcasting it eases onboarding but announces the network’s presence, while hiding it adds only a thin layer of obscurity. SSIDs anchor policy too – access points bind security protocol, RADIUS authentication, and routing instance to a specific SSID, keeping guest devices off the internal network.
What is an SSID?
An SSID is a case-sensitive string of up to 32 characters that an access point includes in its 802.11 beacon frames. Client devices scan for these beacons, list the SSIDs they hear, and let the user pick which one to join, then authenticate using whatever protocol the network requires – open, WEP, or a WPA variant – exchanging the passphrase or RADIUS credentials tied to that SSID.
One access point can advertise several SSIDs at once over shared radio hardware, creating multiple logical WLANs – a corporate SSID and a guest SSID, say – each with its own security settings and routing instance. The SSID is distinct from the BSSID, the MAC address of the radio serving it; one SSID can map to many BSSIDs across several access points.
Types of SSID
SSIDs aren’t a single fixed thing – how one is configured changes what it does. Broadcast SSID is advertised in beacon frames so it appears in every nearby device’s network list; this is the default, user-friendly option. Hidden SSID omits the name from beacon frames, requiring a device to already know it; this adds minor obscurity but not real security, since the SSID still appears in association requests to anyone monitoring traffic. Corporate and guest SSIDs are a deployment pattern rather than a protocol variant: one maps to an enterprise routing instance, a second to an isolated guest instance reaching only the internet. Multi-AP SSID reuses the same name across several access points so a device roams between them, distinguished underneath by each AP’s unique BSSID.
SSID & Versa
Versa configures SSIDs as part of the wireless LAN interface workflow. In Concerto, configuring a Wireless LAN interface means setting the SSID (1–32 characters), choosing whether to broadcast it, and selecting a security protocol – WEP, WPA/WPA2, or WPA3 – with Enterprise mode pointing at a RADIUS profile. The interface also ties the SSID to a Wi-Fi radio and routing instance, with a guest-only toggle.
The simplified Configure Dashboard exposes the same idea for smaller deployments: appliances present separate Corporate and Guest Wi-Fi toggles, each with its own SSID, passphrase, broadcast setting, and security mode.
Titan Mobile appliances ship with Wi-Fi activation built in: an unconfigured appliance advertises a default SSID, VERSA-ZTP-Wi-Fi, that a technician’s phone joins to reach setup before Corporate and Guest SSIDs are configured for production.
Frequently asked questions
What is the difference between an SSID and a BSSID?
The SSID is the human-readable network name a user selects, such as Corporate or Guest. The BSSID is the MAC address of the specific radio broadcasting that SSID. One SSID can map to many BSSIDs when several access points advertise the same network name for roaming.
Can two access points share the same SSID?
Yes – this is standard practice for roaming. Multiple access points broadcast the same SSID so a device moves between them without re-associating or re-entering credentials, while each access point keeps its own unique BSSID to distinguish it on the wire.
Does hiding an SSID make a network more secure?
Only marginally. A hidden SSID doesn’t appear in a casual device scan, but it’s still transmitted in the clear during association, so anyone monitoring wireless traffic with the right tools can recover it. Strong encryption and authentication, not SSID visibility, provide real security.
How many characters can an SSID contain?
Up to 32 characters, per the IEEE 802.11 standard. SSIDs are case-sensitive and can mix letters, numbers, and most special characters, though very unusual characters can cause compatibility issues with some older client devices. Most deployments keep names short and descriptive for easier recognition.
Why do corporate networks use separate SSIDs for guests?
A separate guest SSID lets an access point route guest traffic to its own routing instance and out to the internet only, keeping it off the internal network. It also lets IT apply a different security mode, passphrase, and bandwidth limit than the corporate SSID uses.
More on SSID
If you want to learn more, these are sources we trust.
| NIST CSRC Glossary: Service Set Identifier |
|---|
| NIST’s formal definition of the Service Set Identifier as used in federal wireless network security guidance. |
Related terms
If you’re reading about SSID, these are worth looking at next.
| Wireless LAN | SD-WAN | Branch |
|---|---|---|
| The wireless network a device joins by selecting its SSID – devices sharing an SSID belong to the same WLAN. | The software-defined WAN fabric that carries traffic from a branch’s Wi-Fi, and its SSIDs, out to the internet, cloud, or other sites. | A site running a VOS device where LAN interfaces, including wireless SSIDs, are configured and connected to the wider network. |