---
title: LoRaWAN® Is Secure (but Implementation Matters)
description: LoRa Alliance® has updated and expanded our membership benefits to deliver increased business value to current and future members.
image: https://blog.lora-alliance.org/hubfs/blog-featuredimage-security.jpg
---
[](https://lora-alliance.org/)
- [LoRa Alliance®](https://lora-alliance.org/)
- LoRaWAN®
- [Certification](https://lora-alliance.org/lorawan-certification/)
- Membership
- [Products & Services](https://lora-alliance.org/showcase/)
- [Resources](https://resources.lora-alliance.org/)
### Topics
- Select a Topic
[IoT](https://blog.lora-alliance.org/tag/iot) [LoRaWAN®](https://blog.lora-alliance.org/tag/lorawan) [Security](https://blog.lora-alliance.org/tag/security) [Article](https://blog.lora-alliance.org/tag/article) [Blog](https://blog.lora-alliance.org/tag/blog)
# LoRaWAN® Is Secure (but Implementation Matters)
By [Regulatory Working Group](https://blog.lora-alliance.org/author/regulatory-working-group) on February, 4 2020
[mailto:?body=https://blog.lora-alliance.org/lorawan-is-secure-but-implementation-matters](mailto:?body=https://blog.lora-alliance.org/lorawan-is-secure-but-implementation-matters)
Securing an Internet of Things (IoT) deployment and keeping it safe and secure is not only a matter of choosing the right protocol, it relies on the implementation process as well as embracing best practices and industry standards.
LoRaWAN is by design very secure—authentication and encryption are, in fact, mandatory—but networks and devices can be compromised if security keys are not kept safe, not randomized across devices or if cryptographic numbers used once (nonces) are reused, as is shown by numerous blog posts. That’s why it is critical to look for LoRaWAN CertifiedCM devices to ensure the device has been tested against the standard and works as expected.
The LoRa Alliance has always kept security front and center in its development of the LoRaWAN specification and has been highly transparent about the protocol’s security features (see Figure 1). The LoRaWAN specification has been designed from the outset with security as an essential aspect, providing state-of-the-art security properties that meet the needs of highly scalable low-power IoT networks. Unlike many other IoT technologies, the LoRaWAN specification already offers dedicated end-to-end encryption to application providers.
#### The specification defines two layers of cryptography:
- Using a unique 128-bit application session key (AppSKey) shared end-to-end at the application level
AES algorithms are used to provide authentication and integrity of packets to the network server and end-to-end encryption to the application server. By providing these two levels, it becomes possible to implement “multitenant” shared networks without the network operator having visibility of the users’ payload data. The devices can be activated by Personalization on the production line or during commissioning, or can be over the air activated (OTAA) in the field. OTAA allows device sessions to be rekeyed if necessary.
LoRaWAN has all the fundamental building blocks required and used by any modern wireless communications technology, and does so at AES-128 strength. LoRaWAN’s inherent security, as provided in the specification, needs to be accompanied by secure implementation and secure deployment of these devices and/or networks to maintain the protocol’s built-in security mechanisms. It should be pointed out that this is true of all secure device implementations using any communication technology.
As stated above, LoRaWAN relies on symmetric cryptography, which requires sharing keys in a safe and secure way. To further aid with this process, LoRa Alliance members have developed:
LoRaWAN backend interfaces that isolate the storage of root keys in the join server, so that becomes a trusted player, regardless of network
#### Secure element solutions that provide additional hardware physical protection against tampering
To ensure device and network security, as with any technology, the best practice is always to use certified devices and work with proven and trusted service providers. LoRaWAN is no different, and end users can be confident in their deployment if they leverage resources that know how to correctly implement LoRaWAN solutions.
Security is a constantly moving target, with malicious actors continuously appearing, and LoRaWAN is always evolving to meet any new threats as well. Though LoRaWAN is inherently secure, the LoRa Alliance is constantly reviewing, designing and implementing security enhancements and best practices to ensure LoRaWAN stays ahead of the changing security landscape.
As such, and to assist the market in choosing the right implementation, the LoRa Alliance will publish a Recommended Practices document in the next month that will provide best practices for device makers to keep their devices secure. In addition, the Security Working Group, reporting to the LoRa Alliance Technical Committee responsible for the LoRaWAN specification, continuously reviews security aspects of technical specifications and documents. The Security Working Group consists of security experts from the LoRa Alliance membership and works with academia to review papers and discuss security challenges.
For more information about LoRaWAN security, please check out our updated [Security FAQs](https://lora-alliance.org/wp-content/uploads/2020/11/la_faq_security_0220_v1.2_0.pdf), which address the common questions about how the specification has implemented security features.
*LoRa Alliance®, LoRaWAN® and LoRaWAN CertifiedCM are registered trademarks.*
###### About The Author
[More from this author](https://blog.lora-alliance.org/author/regulatory-working-group)
###### Regulatory Working Group
#### Recommended Articles
[](https://blog.lora-alliance.org/best-of-2023)
###### [The Best of 2023](https://blog.lora-alliance.org/best-of-2023)
- December 21, 2023
[](https://blog.lora-alliance.org/how-lorawan-enables-smart-cities-of-the-future-stockermann-townsend-interview)
###### [How LoRaWAN® Enables Smart Cities of the Future: A Conversation with Will Townsend and Boris Stöckermann](https://blog.lora-alliance.org/how-lorawan-enables-smart-cities-of-the-future-stockermann-townsend-interview)
- August 17, 2023
[](https://blog.lora-alliance.org/reducing-food-deserts-with-lorawan-iot)
###### [LoRaWAN® Creates Sustainable Communities: Reducing Food Deserts with LoRaWAN IoT](https://blog.lora-alliance.org/reducing-food-deserts-with-lorawan-iot)
- June 21, 2023
#### Recommended Articles
#### Recommended Articles
#### Recommended Articles
#### Recommended Articles
Search Article
### Popular Posts
### Recent Post
### Recent Posts
[No Wires, No Waste: What the 'Water in India' Conference Revealed About LoRaWAN's Critical Role in India's Water Crisis](https://blog.lora-alliance.org/no-wires-no-waste-what-the-water-in-india-conference-revealed-about-lorawans-critical-role-in-indias-water-crisis)
- 4 February, 2020
[Understanding and Improving Your LoRaWAN® Coverage](https://blog.lora-alliance.org/understanding-and-improving-your-lorawan-coverage)
- 4 February, 2020
[How AI-Powered Zone-Level Tracking Captured Attention at MWC](https://blog.lora-alliance.org/how-ai-powered-zone-level-tracking-captured-attention-at-mwc)
- 4 February, 2020
[Powering the Future: How Energy Harvesting and LoRaWAN® Enable Battery-Free AI Vision](https://blog.lora-alliance.org/powering-the-future-how-energy-harvesting-and-lorawan-enable-battery-free-ai-vision)
- 4 February, 2020
[LoRaWAN® Takes Center Stage at Salon des Maires 2025: A Milestone for Connected Territories in France](https://blog.lora-alliance.org/lorawan-takes-center-stage-at-salon-des-maires-2025)
- 4 February, 2020
###### ABOUT THE ORGANIZATION
### LoRa Alliance®
The LoRa Alliance® is an open, non-profit association with the mission to support and promote the global adoption of the LoRaWAN® standard, the leading LPWAN.
-
-
-
-
### Topics
- [LoRaWAN® (23)](https://blog.lora-alliance.org/tag/lorawan)
- [LPWAN (13)](https://blog.lora-alliance.org/tag/lpwan)
- [IoT (12)](https://blog.lora-alliance.org/tag/iot)
- [LoRa Alliance® (11)](https://blog.lora-alliance.org/tag/lora-alliance)
- [Guest Blog (10)](https://blog.lora-alliance.org/tag/guest-blog)
- [Article (5)](https://blog.lora-alliance.org/tag/article)
- [Smart Cities (4)](https://blog.lora-alliance.org/tag/smart-cities)
- [Energy Harvesting (3)](https://blog.lora-alliance.org/tag/energy-harvesting)
- [Security (3)](https://blog.lora-alliance.org/tag/security)
- [AI (2)](https://blog.lora-alliance.org/tag/ai)
- [Analytics (2)](https://blog.lora-alliance.org/tag/analytics)
- [Benefits (2)](https://blog.lora-alliance.org/tag/benefits)
- [Blog (2)](https://blog.lora-alliance.org/tag/blog)
- [LoRaWAN World Expo (2)](https://blog.lora-alliance.org/tag/lorawan-world-expo)
- [Member Benefits (2)](https://blog.lora-alliance.org/tag/member-benefits)
- [Membership (2)](https://blog.lora-alliance.org/tag/membership)
- [People & Planet (2)](https://blog.lora-alliance.org/tag/people-planet)
- [Semtech (2)](https://blog.lora-alliance.org/tag/semtech)
- [Smart Agriculture (2)](https://blog.lora-alliance.org/tag/smart-agriculture)
- [Smart Buildings (2)](https://blog.lora-alliance.org/tag/smart-buildings)
- [Sustainability (2)](https://blog.lora-alliance.org/tag/sustainability)
- [press release (2)](https://blog.lora-alliance.org/tag/press-release)
- [technical release (2)](https://blog.lora-alliance.org/tag/technical-release)
- [A2A Smart City (1)](https://blog.lora-alliance.org/tag/a2a-smart-city)
- [Actility (1)](https://blog.lora-alliance.org/tag/actility)
- [Analyst (1)](https://blog.lora-alliance.org/tag/analyst)
- [Approved Standard (1)](https://blog.lora-alliance.org/tag/approved-standard)
- [BlueTooth (1)](https://blog.lora-alliance.org/tag/bluetooth)
- [Browan Communications (1)](https://blog.lora-alliance.org/tag/browan-communications)
- [Certification (1)](https://blog.lora-alliance.org/tag/certification)
- [Coverage (1)](https://blog.lora-alliance.org/tag/coverage)
- [Dryad (1)](https://blog.lora-alliance.org/tag/dryad)
- [EU (1)](https://blog.lora-alliance.org/tag/eu)
- [Europe (1)](https://blog.lora-alliance.org/tag/europe)
- [Everynet (1)](https://blog.lora-alliance.org/tag/everynet)
- [FUOTA (1)](https://blog.lora-alliance.org/tag/fuota)
- [India (1)](https://blog.lora-alliance.org/tag/india)
- [IoT Ventures (1)](https://blog.lora-alliance.org/tag/iot-ventures)
- [Israel (1)](https://blog.lora-alliance.org/tag/israel)
- [Italy (1)](https://blog.lora-alliance.org/tag/italy)
- [LCTT (1)](https://blog.lora-alliance.org/tag/lctt)
- [LoRa Alliance Membership (1)](https://blog.lora-alliance.org/tag/lora-alliance-membership)
- [LoRaWAN CertifiedCM (1)](https://blog.lora-alliance.org/tag/lorawan-certifiedcm)
- [LoRaWAN End Device (1)](https://blog.lora-alliance.org/tag/lorawan-end-device)
- [LoRaWAN Live (1)](https://blog.lora-alliance.org/tag/lorawan-live)
- [Massive Deployments (1)](https://blog.lora-alliance.org/tag/massive-deployments)
- [Membership Information (1)](https://blog.lora-alliance.org/tag/membership-information)
- [Middle East (1)](https://blog.lora-alliance.org/tag/middle-east)
- [Minol Zenner Group (1)](https://blog.lora-alliance.org/tag/minol-zenner-group)
- [Netmore (1)](https://blog.lora-alliance.org/tag/netmore)
- [Network Flexibility (1)](https://blog.lora-alliance.org/tag/network-flexibility)
- [SenRa (1)](https://blog.lora-alliance.org/tag/senra)
- [Smart Utilities (1)](https://blog.lora-alliance.org/tag/smart-utilities)
- [Smart Water (1)](https://blog.lora-alliance.org/tag/smart-water)
- [Unidata (1)](https://blog.lora-alliance.org/tag/unidata)
- [Utilities (1)](https://blog.lora-alliance.org/tag/utilities)
- [Wi-Fi (1)](https://blog.lora-alliance.org/tag/wi-fi)
- [ZENNER (1)](https://blog.lora-alliance.org/tag/zenner)
- [asset tracking (1)](https://blog.lora-alliance.org/tag/asset-tracking)
- [bui (1)](https://blog.lora-alliance.org/tag/bui)
- [safety (1)](https://blog.lora-alliance.org/tag/safety)
- [scale (1)](https://blog.lora-alliance.org/tag/scale)
- [smart industry (1)](https://blog.lora-alliance.org/tag/smart-industry)
see all
LoRa Alliance®
39221 Paseo Padre Pkwy, Suite J
Fremont, CA 94538
Important Links
- [Home](https://lora-alliance.org/)
- [LoRaWAN®](https://lora-alliance.org/about-lorawan/)
- [Certification](https://lora-alliance.org/lorawan-certification/)
- [Membership](https://lora-alliance.org/become-a-member/)
- [Products](https://lora-alliance.org/showcase/)
- [Resources](https://resources.lora-alliance.org/)
[+1 510-492-4044](tel:+15104924044)
[admin@lora-alliance.org](mailto:admin@lora-alliance.org)
LoRa Alliance®
39221 Paseo Padre Pkwy, Suite J
Fremont, CA 94538
Copyright © 2022 LoRa Alliance® | [Terms of Use](https://lora-alliance.org/terms-of-use/) | [Privacy & Cookie Policy](https://lora-alliance.org/privacy-policy/)
-
-
-