# Missing Puzzle Pieces of LoRaWAN® Security

> Johan Stokking, Tech Lead of The Things Network and CTO of The Things Industries talks about LoRaWAN Security . Do you encounter any of the below points? Hoist

- Type: Global update from The Things Network
- Author: TheThings Network
- Published: 2018-10-03
- Updated: 2026-10-06
- Web page: https://www.thethingsnetwork.org/article/missing-puzzle-pieces-of-lorawan-security

Johan Stokking, Tech Lead of The Things Network and CTO of The Things Industries talks about **LoRaWAN Security**.

Do you encounter any of the below points? Hoist the red flag and double check the credibility of the partner or service you are working with.

**LoRaWAN Security Red Flags**

1. **Use of ABP.** _Not secure, keys cannot be changed, must be shared with network operator_
2. **Keys printed on paper or sent by email.** _Keys should not be visible (use Hareware Secure Modules/HSM), paper trail is impossible to clear_
3. **Unable to choose a Join Server or operate your own.** _Platform lock-in, potentially unsafe storage of end device root keys_
4. **Unable to choose an Application Server or operate your own.** _Application data may get compromised_
5. **Same keys for multiple end devices.** _End devices need unique keys_
6. **Hardcoded keys in end device.** _End devices should use a HSM_

Learn more by viewing the [full webinar](https://www.youtube.com/watch?v=6IDaUxhEgaI), Johan will share some tips to discover security flaws and to boost the secure your deployment.

Links:
[**Webinar**](https://www.youtube.com/watch?v=6IDaUxhEgaI)

[Forum discussion](https://www.thethingsnetwork.org/forum/t/ama-missing-puzzle-pieces-of-lorawan-security/18006)

[LoRa Alliance Security White Paper](https://lora-alliance.org/resource-hub/lora-alliance-security-whitepaper)

![file](https://www.thethingsnetwork.org/media/md_editor/image-1538560355517.large.png)