This article introduces a relatively low to medium difficulty attack, aiming to harvest every WiFi key (passphrase) stored in machines running MS Windows or Linux OS. The assault requires a maximum of two user clicks and capitalizes on native command-line utilities, which do not require administrator rights. Obviously, given that the opponent learns the passphrase, the attack directly threatens the security of any WPAx-enabled network. Through alternative real-life examples, we showcase how fatal such a minor oversight may prove as well as the available options at the attacker's end.