My neighbor hacked my WPA2-personal wifi network in 1 second from his iPhone

[Bfred]

Just chilling and sharing a beer with him, and he then askied me if he could use my wifi network. He lives across the street. I tell him I can set up a guest network on my RT-AC88U to which he replies 'oh don't worry I can get your wifi password just like this on my iPhone' and with 2 clicks (maybe 3) he just sent me my password. He said it's an iPhone feature but doesn't work with all Wifi networks. The RT-AC88U doesn't support WPA3 (I also have a RT-AX88U but obviously the AC88U is the weakest link) but appart from that I really don't know where this is coming from.
I am surprised this is even possible but.. why not. No point in changing the password as he (and anybody else with an iPhone apparently) can get the new password in no time. He is not a hacker. He told me he installed nothing specific on his phone.
How can I fix that?
Thank you.

 

[bennor]

First, welcome. Second, I'd be leery of his claims. It may help for context if you post the firmware version your routers are running. You indicated two different router models, how are the routers setup? Are you using AiMesh or some other configuration?

Given the right software tools and time it is possible to crack a WiFi password but its not something that is typically done (on a properly secured network with a strong password) in one or two clicks in a minute or two on an iPhone.

 

[Bfred]

Sure. Sorry for not sharing as I assume you thought it'd be the latest. So the RT-AC88U is running version 386.14_2 and the RT-AX88U version 3004.388.9_2 . No AiMesh activated. Long passphrase with spaces and special characters.
Additionally there was no ill intent from his side and it just popped up in the conversation like this, which is why I believe he did it in seconds from his phone....iPhone should I say ;-)
The AX-88U is setup on the ground floor as a router and currently connected to my ISP. The AC-88U is on the 2nd floor and setup in AP mode. There is an ethernet cable connecting the 2.
I have some 'servers' with fixed IP addresses and DHCP running from .100 to .180 . Only 2 people live here and only Linux computers run, 2 mobiles phone (1 android 1 iOS).

 

[Tech9]

He said it's an iPhone feature

Apple iPhone 19 Pro Max or better on iOS 28 or newer.

 

[bbunge]

Apple iPhone 19 Pro Max or better on iOS 28 or newer.

iOS 28? iPhone 19? The future of things to come - maybe? Maybe not!.

As another user said... WPA2 can be hacked (I have done it once) but it is not easy...