Why having a guest network is a good idea

When someone visits and wants to get online, what do you do? Give them your password? No, you shouldn't. Why?

You might be using the same password elsewhere, you risk a MitM (Man-in-the-middle) attack, you don't know who else the password will be shared with, and I could go on. The solution? Set up a guest network. Fortunately even standard access points now have this feature — look for Síť pro hosty or Guest Network.

The ideal setup isolates guests in a separate VLAN with its own DNS (to block access to malware, P2P, and similar harmful sites — because you're responsible for what a connected person does). The approach that works well for me is generating single-use codes (valid for eight hours). The user enters the code in a Captive portal and they're connected. Simple and effective access control.