Abstract: A method and apparatus of securing a Wi-Fi network is disclosed, which uses a Wi-Fi Protection Device or “WPD” to: performing a network scan to detect all in-range Wi-Fi devices; identify any access points from among the list of all detected in-range Wi-Fi devices; identify any client devices from among the list of all detected in-range Wi-Fi devices; determine the access points to which each detected client device is connected; determine which access points are legitimate; and disconnect or prevent the connection between any clients that are connected to access points which have not been determined to be legitimate and the respective access point which has not been determined to be legitimate, preferably, by determining a similarity metric, which is an indication of a degree of similarity between the ESSID of an access point under consideration and the ESSID of one or more legitimate access points and by making that determination based on whether the similarity metric is above or below a specified threshold