diff --git a/src/config.c b/src/config.c
index 59a8f36e8a314017b80c40c872ef51123639835f..2ba370292a3c5b191ef5f5d8dd66ab694d528a93 100644
--- a/src/config.c
+++ b/src/config.c
@@ -1039,8 +1039,14 @@ static int cntlr_config_get_credentials(struct controller_config *c,
 		if (!strncmp(sec, "sae-mixed", 9)) {
 			cred->sec |= BIT(WIFI_SECURITY_WPA3PSK);
 			cred->sec |= BIT(WIFI_SECURITY_WPA3PSK_T);
-		} else if (!strncmp(sec, "sae", 3)) {
-			cred->sec |= BIT(WIFI_SECURITY_WPA3PSK);
+		} else if (!strncmp(sec, "sae", 3)
+#if (EASYMESH_VERSION > 2)
+			   || !strncmp(sec, "dpp", 3) ||
+			   !strncmp(sec, "dpp+sae", 3) ||
+			   !strncmp(sec, "sae+dpp", 3)
+#endif
+			   ) {
+			cred->sec |= BIT(WIFI_SECURITY_WPA3PSK); /* TODO: how do we properly transfer DPP encryption */
 		} else if (!strncmp(sec, "psk-mixed", 9)) {
 			cred->sec |= BIT(WIFI_SECURITY_WPAPSK);
 			cred->sec |= BIT(WIFI_SECURITY_WPA2PSK);