Disable WiFi Protected Setup (WPS) on Your Router

Yes, you should disable WPS (Wi-Fi Protected Setup) on your router unless you actively use a legacy device that requires it. WPS has known security flaws that can let an attacker guess your network PIN in hours, and disabling it removes that risk without affecting normal Wi-Fi use.

What Is WPS and Why Does It Matter?

WPS was introduced in 2006 as a way to make connecting devices to a Wi-Fi network easier. Instead of typing a long passphrase, you could press a button on the router or enter a short PIN. The standard has three main methods:

• Push-button (PBC): Press a physical or virtual button on the router, then press a similar button on the device within a short window.
• PIN entry: Enter an 8-digit PIN printed on the router label into the device.
• Near-field communication (NFC): Tap a device against the router (rarely used).

The problem is that the PIN method is insecure. The PIN is validated in two halves, so an attacker only needs to guess the first 4 digits and then the last 4 digits. With only 11,000 possible combinations for the first half and 1,000 for the second, a determined attacker can brute-force the PIN in a few hours using free tools. Once they have the PIN, they can recover your WPA2 passphrase and join your network.

How to Disable WPS on Your Router

The exact steps depend on your router model, but the general process is similar across most brands. You will need to access the router’s configuration page, usually by typing its IP address into a web browser. Common addresses are 192.168.0.1, 192.168.1.1, or 192.168.2.1. You can also find the IP in your device’s network settings (often listed as “Default Gateway”).

1. Connect a computer or phone to your Wi-Fi network (or use an Ethernet cable).
2. Open a web browser and enter your router’s IP address.
3. Log in with the administrator username and password. If you never changed them, check the router label or the manual for defaults (often “admin” / “admin” or “admin” / “password”).
4. Look for a section named Wireless, Wi-Fi, or Security. Under that, find WPS or Wi-Fi Protected Setup.
5. Select Disable or uncheck the box that says “Enable WPS”.
6. Save or apply the changes. The router may reboot.

If you cannot find the WPS option, try these alternatives:

• Check the router manual or the manufacturer’s support site for your model.
• Look under “Advanced Settings” or “Wireless Settings” – some routers hide it there.
• If your router is provided by your internet service provider, you may need to contact them to disable WPS remotely.

Why Disabling WPS Is Recommended

In 2011, security researcher Stefan Viehböck disclosed the PIN brute-force vulnerability (now known as the WPS PIN attack). The attack exploits the way the PIN is checked. Because the router responds differently when the first half is correct, an attacker can determine the first 4 digits quickly, then the last 4. This can be done in under 10 hours, and sometimes in less than 4 hours with optimized tools.

Many routers also lack proper lockout mechanisms. Even if a router locks after a few failed attempts, an attacker can often bypass that by waiting or spoofing MAC addresses. Some routers have been found to not lock at all.

Once the PIN is known, the attacker can retrieve the WPA2 passphrase, defeating the encryption that protects your network. This means they can read your traffic, use your internet connection, and potentially access devices on your LAN.

What About WPA3 and WPS?

WPA3, the newer Wi-Fi security standard, includes a feature called Wi-Fi Easy Connect (also known as Device Provisioning Protocol, DPP). This is a different, more secure method of onboarding devices. However, many routers that support WPA3 still also support the older WPS PIN method for backward compatibility. If your router offers WPA3, you should still disable the legacy WPS PIN option.

Some routers have a “WPS” toggle that only affects the PIN method, while the push-button method remains active. Even push-button WPS has a weakness: if an attacker is physically near your router, they could press the button and connect without knowing the passphrase. However, that requires physical access, which is a much higher bar than a remote attack. Still, many security experts recommend disabling all WPS methods if you don’t use them.

How to Connect Devices Without WPS

If you disable WPS, you will need to connect devices the traditional way: by entering the Wi-Fi passphrase. That is straightforward for most devices – just select your network and type the password. For devices without a screen (like some printers or smart home gadgets), you may need to use their companion app or a web interface to enter the passphrase. Some devices also support Wi-Fi Easy Connect (DPP) if they are WPA3-capable.

If you have a device that absolutely requires WPS and you cannot configure it otherwise, you have a few options:

• Enable WPS temporarily, connect the device, then disable it again.
• Use an Ethernet cable for that device if possible.
• Check if the device supports a setup mode via USB or Bluetooth.

Common Misconceptions About WPS

“My router is safe because WPS is off by default.” Not necessarily – many routers ship with WPS enabled. Always check your router’s settings.

“The WPS button on the side is just a button, it’s not a security risk.” The button itself is not the risk, but the PIN method that often accompanies it is. If the PIN is enabled, the button can be used to trigger a PIN exchange that is vulnerable.

“I use WPA3, so I don’t need to worry about WPS.” WPA3 does not automatically disable WPS. If your router has WPS PIN enabled, it may still be vulnerable, even if you use WPA3 for the actual connection.

Frequently Asked Questions

Q: How do I know if my router has WPS enabled?
A: Log into your router’s admin page and look for the WPS section. If you see an option to enable or disable it, that means it is likely enabled by default. You can also check the router label – many routers with WPS have a button or an icon.

Q: Will disabling WPS slow down my Wi-Fi?
A: No. WPS only affects how devices join the network, not the speed of the connection. Your Wi-Fi speed and range will be unchanged.

Q: Can I still connect my printer without WPS?
A: Yes. Most printers allow you to enter the Wi-Fi password directly via the printer’s control panel or a web interface. Check the printer’s manual for the exact steps.

Q: What if my router doesn’t have a WPS disable option?
A: Some older or ISP-provided routers may not expose the option. Try updating the router firmware – sometimes the option appears after an update. If not, contact your ISP or consider replacing the router.

Q: Is it safe to use WPS if I live in a low-crime area?
A: The attack is remote and automated, so it does not require physical proximity. Anyone within Wi-Fi range can attempt it. Disabling WPS is a simple step that eliminates a known risk, regardless of where you live.

Related

• Recover Missing or Deleted Bookmarks in Microsoft Edge
• Monitor AI Inference: Latency, Throughput & GPU
• Different Ringtone Per SIM on iPhone iOS 17