My apartment building is changing internet providers, and the new provider plans to install a network that will have a single SSID for the entire building. Each tenant will be given a unique password that is supposed to make it so each unit is separated on the network from every other unit. For comparison purposes, our old internet provider gave each unit a unique SSID.
One of the "benefits" of the change is that we should be able to access Wi-Fi anywhere in the building without switch from our "home" network to a guest network. However, it seems to me that putting everyone under the same SSID could be a security and privacy issue.
My question is therefore: is it possible to have a single SSID + multiple password network setup where each user is securely isolated from other users, and are there any extra precautions recommended for such a setup?
Yes, it is possible if you are using 802.1x for authentication. The RADIUS server can specify a VLAN for the user/port. If it is different for each user then the router can have ACLs that prevent inter-VLAN traffic or simply not route between them.