Wi-Fi Protected Setup (WPS) Isn’t Safe, We’ll Show you Why – Password Coach (2024)

The rationale behind the creation of WPS was to help non-technical folks quickly add devices onto their network without complex configuration. Whilst WPS does achieve this goal, WPS is horribly insecure. A router with WPS enabled is highly vulnerable. A successful attack on your router’s WPS function will reveal your network password in a matter of hours – regardless of how strong that password it. Again, there is no point putting a strong password on a weak network. Our next task is to disable WPS.

How to disable WPS on your wi-fi router?

The WPS option will be somewhere amongst the WIRELESS configuration options. All routers are different, so you’ll have to do some clicking. It might be considered an ADVANCED option on your router. It might also be labeled ‘Wi-Fi Protected Setup’ rather than WPS. Our goal here is to switch it off and otherwise disable it.

WPS comes in two flavours. There’s a PIN version and a Button version. The button version is much safer because it requires someone to press the WPS button on the router in order for WPS to be active. And it automatically switches off a few minutes later. The PIN version is always on, and so horribly risky. Your router may allow you to disable WPS altogether, or just disable the PIN version.

As a minimum, we need to disable the WPS PIN. The example above is taken from a TP-Link router, and shows that the WPS PIN method can be disabled, leaving the button method live. This is fine, as the button needs to be physically pressed in order for WPS to be temporarily switched on.

What will happen after you disable WPS on your wi-fi router?

WPS is a great example of the trade-off between convenience and security. WPS was designed with convenience in mind, which means that it also compromises your security. WPS works by allow us to join a wi-fi network without needing to know the network password. You simply push the WPS button on the router, join the network and you’re in. Unfortunately, WPS is horribly insecure and can be used as a means for attackers to gain access to your network. This is why we disable WPS. Once disabled, you’ll need to use the conventional password method to add additional devices to your wi-fi network (less convenient) but your router will no longer be vulnerable to a WPS attack (more secure).

Next up - Disable Universal Plug and Play

Wi-Fi Protected Setup (WPS) Isn’t Safe, We’ll Show you Why – Password Coach (2024)

FAQs

Why is WPS not safe? ›

An attacker within radio range can brute-force the WPS PIN for a vulnerable access point. The attacker can then obtain WEP or WPA passwords and likely gain access to the Wi-Fi network. Once on the network, the attacker can monitor traffic and mount further attacks.

Why is enabling WPS not recommended? ›

WPS works by allow us to join a wi-fi network without needing to know the network password. You simply push the WPS button on the router, join the network and you're in. Unfortunately, WPS is horribly insecure and can be used as a means for attackers to gain access to your network. This is why we disable WPS.

What is Wi-Fi Protected Setup WPS used for? ›

Wi-Fi Protected Setup (WPS) is a feature supplied with many routers. It is designed to make the process of connecting to a secure wireless network from a computer or other device easier.

Is it safe to press the WPS button on my router? ›

The WPS feature should be disabled when it is not in use to prevent cybersecurity threats or unwanted devices from connecting to your home network. The WPS feature can be turned off or disabled by logging into your router's settings, under Wireless Setup. Look for WPS and select “WPS Off”.

Is WPS good or bad for Wi-Fi? ›

Wireless networks with WPS enabled are highly vulnerable to cybersecurity threats. Attackers can easily target the WPS function to steal network passwords, regardless of how complex the password is. In essence, there is no point in creating a strong password in a weak network.

Is WPS app good or bad? ›

WPS office is among the power houses of word processing solution. The pros are quite exciting and the app is quite effective. I recommend it for all your business needs.

What is the difference between WPS and Wi-Fi? ›

The WPS does not handle the connection of Wifi but it handles the data sending between the client device(s) and the router. The WPS is a password-protected wireless network that supports the WPA (Wifi Protected Access Personal) or WPA2 (Wifi Protected Access2 Personal) security protocols.

Is WPS no longer supported? ›

Where is the WPS option on my phone? Due to security concerns Google has deprecated support for Wi-Fi Protected Setup authentication mode (WPS). WPS has been replaced by Wi-Fi Easy Connect, which offers a more secure option. Wi-Fi Easy Connect utilizes device-specific QR codes for connecting.

Is WPS outdated? ›

WPS is a word processing file type that was once the industry-standard. The file of choice for Microsoft Works, an early iteration of the software that would eventually become the Office suite, you may still encounter this outdated file in some environments.

What happens if I press WPS on my Wi-Fi? ›

The WPS button simplifies the connection process

Press the WPS button on your router to turn on the discovery of new devices. Then, go to your device and select the network you want to connect to. The device is automatically connected to the wireless network without having to enter the network password.

What happens if I press the WPS button on my Wi-Fi? ›

Press the WPS button on the router to establish a connection. Depending on the router and the home configuration, it may take a few minutes to connect. NOTES: Most routers have a light that flashes while the connection is established. Once a successful connection is made, select OK.

What is the difference between WPS and WPA2? ›

WPA2 uses a stronger encryption technology that's immune to most forms of hacking. WPS (Wi-Fi Protected Setup) is technology designed solely to automate the initial setup of a Wi-Fi connection. WPS doesn't use encryption — and can actually bypass whatever encryption might otherwise be in use!

How long should I hold the WPS button on my router? ›

Press the WPS button on the device you wish to connect. Within 120 seconds, press the WPS button on the wireless router. Note: You will need to press and hold the WPS button on the wireless router for about 2-3 seconds. After a short period of time, your device and the wireless router will be connected.

What will happen if I press the reset button on my router? ›

Note: Router reset will wipe out all of your customized settings. Router username and password will be reset to factory default values as shown on the router label. Personalized Wi-Fi settings will be deleted, including the Wi-Fi name and password you created.

How long does WPS last on router? ›

Did the WPS process time out? The WPS light will continue to flash and the router search for devices for up to 2 minutes. If it doesn't connect successfully in that time, it will usually reset and you will need to press it again to try a new connection.

Why was WPS removed? ›

There's a good chance you may have already used it if you have any smart devices in your home that connect to Wi-Fi. In short, your Android device no longer has a WPS button because the industry created a better, more secure replacement.

Top Articles
Latest Posts
Article information

Author: Greg O'Connell

Last Updated:

Views: 6169

Rating: 4.1 / 5 (62 voted)

Reviews: 85% of readers found this page helpful

Author information

Name: Greg O'Connell

Birthday: 1992-01-10

Address: Suite 517 2436 Jefferey Pass, Shanitaside, UT 27519

Phone: +2614651609714

Job: Education Developer

Hobby: Cooking, Gambling, Pottery, Shooting, Baseball, Singing, Snowboarding

Introduction: My name is Greg O'Connell, I am a delightful, colorful, talented, kind, lively, modern, tender person who loves writing and wants to share my knowledge and understanding with you.