Every end-user device is given a unique PPSK WPA2 encryption key and operates in its own secure bubble, all on the same SSID.