Reviews from 2014 and 2015 highlighted significant security flaws in how Xfinity (then often referred to as Comcast) managed Wi-Fi credentials:

: A common concern was that "xfinitywifi" signals were often broadcast from residential routers without the homeowner's explicit knowledge, though they were technically kept separate from the home's private data. Default Admin Credentials

: A major review on Computerworld warned that the username and password used for public Wi-Fi hotspots were the same as those for managing your Comcast billing and email accounts. This created a high potential for abuse if login info was stolen at a hotspot.

: The "Automatic Sign-In" feature recognized devices after one login, but experts warned that "MAC address spoofing" could allow attackers to impersonate users on the network without needing their password.

Allow Xfinity WiFi Gateway Admin Tool online access using the Xfinity app

In 2015, Xfinity's Wi-Fi login system was noted for its security risks and variable performance, particularly regarding the use of a single set of credentials for multiple services.