The invention provides a wireless access authentication method and device. The method comprises: receiving an access point detecting request from a terminal, wherein the access point detecting request carries a service set identifier (SSID) and user characteristic information; according to the access point detecting request, querying a user authentication list about an authentication mode identifier corresponding to the user characteristic information; after querying about the authentication mode identifier corresponding to the user characteristic information, distributing a virtual basic service set identifier (BSSID) and returning detection response information carrying the authentication mode identifier and the virtual BSSID to the terminal in order that the terminal uses an authentication mode matching the authentication mode identifier to perform authentication according to the virtual BSSID. The wireless access authentication method and device cannot leak the information of an access point provider and is good in safety.