How to Disable WPS and Why It Is Risky

This guide will help you understand the security risks of Wi-Fi Protected Setup (WPS) and walk you through the steps to disable it on your home router. You'll learn how to access your router's admin panel, locate the WPS setting, and turn it off to improve your network's security.

Note: Steps may vary by device and router model. This guide focuses on safe, general methods.

Quick Answer

Find your router's IP address (often 192.168.1.1 or 192.168.0.1).
Enter it into a web browser and log in with your admin credentials.
Navigate to the Wireless, Wi-Fi, or Security settings menu.
Look for a setting labeled "WPS," "Wi-Fi Protected Setup," or "Push Button."
Switch the setting from "Enabled" to "Disabled."
Save or apply the changes. Your router may restart.

If you can't find the setting or log in, follow the detailed diagnostic and step-by-step guide below.

What you need

Before you start

A computer or phone connected to your Wi-Fi network.
Your router's admin login (username/password).
Your router's IP address (gateway address).
Physical access to your router (to check the label for info).
10-15 minutes of uninterrupted time.

Good to know

WPS is often enabled by default on many consumer routers.
Disabling WPS does not affect your normal Wi-Fi password.
Some devices (like older printers) might use WPS for easy setup.
You cannot disable WPS on some ISP-provided combo units.
The router admin page looks different across brands.
Changes might cause a brief network restart.

Diagnose the issue in 2 minutes

Is your goal to improve general security?
- Yes: Proceed to disable WPS. It's a recommended best practice.
- No, you're troubleshooting a connection problem: WPS is rarely the cause. Check for interference or incorrect Wi-Fi passwords.
Are you unsure if WPS is enabled on your router?
- Check for a physical WPS button (often labeled).
- Log into your router admin panel and look for the setting (see steps below).
Quick Checks:
Check 1: Find router IP. Run `ipconfig` (Windows) or look in network settings.
Check 2: Can you log in? Try default credentials on router label.
Check 3: Navigate menus. Look for "Wireless," "Wi-Fi," or "Security."
Check 4: Find "WPS" or "Push Button" toggle.

Step-by-step guide

Step 1 — Find your router's gateway IP address

This address is the "door" to your router's settings page.

Windows: Open Command Prompt, type ipconfig, and look for "Default Gateway."
macOS: Open System Settings > Network > Wi-Fi > Details... > TCP/IP. Find "Router."
General: Common addresses are 192.168.1.1, 192.168.0.1, or 10.0.0.1.

What you should see: A series of numbers like 192.168.1.1

Step 2 — Access the router admin page

Open a web browser and enter the IP address you found.

Type the IP (e.g., 192.168.1.1) into the browser's address bar and press Enter.
A login page will appear. Enter the admin username and password.
If you never changed it, check the router's label for the default login.

What you should see: Your router's configuration dashboard or home screen.

Step 3 — Locate the Wireless or Wi-Fi settings

Menus have different names, but the setting is usually under Wi-Fi configuration.

Look for tabs or menus labeled: Wireless, Wi-Fi, Wireless Settings, or Network.
You might need to find an "Advanced" settings section.
Navigate through these menus. The WPS setting is often on a main Wi-Fi page or a sub-page.

What you should see: Options related to your Wi-Fi network name (SSID), security type, and password.

Step 4 — Find the WPS setting

Scan for specific terminology related to Wi-Fi Protected Setup.

Look for: WPS, Wi-Fi Protected Setup, WPS Push Button, or WPS PIN.
The setting is often a toggle switch (Enable/Disable) or a checkbox.
It might be in a separate "WPS" tab or section within the Wireless settings.

What you should see: A control that clearly states "Enable WPS" or similar.

Step 5 — Disable WPS

Turn the WPS function off.

Change the toggle, radio button, or checkbox to Disabled or Off.
If there are two methods (Push Button and PIN), ensure both are disabled.
Do not change any other settings like your Wi-Fi password or security mode.

What you should see: The WPS status clearly showing as "Disabled" or "Off."

Step 6 — Save and apply changes

This step is crucial; otherwise, your changes will be lost.

Click a button labeled Save, Apply, OK, or Submit.
Your router may process for a moment and restart. Your internet connection will drop briefly.
Wait 1-2 minutes for the router to fully reboot before using the internet again.

What you should see: A confirmation message and your router's lights cycling.

Common fixes by symptom

Symptom: Can't find the WPS setting in router admin

Likely causes: Menu naming differences; ISP-locked router; very old router firmware.

Safe fixes: Look for an "Advanced" tab; search for "WPS" in your router's help documentation; check under "Security" instead of "Wireless."

When to stop: If you're certain the setting doesn't exist, your router may not support it or your ISP may have removed the option.

Symptom: Forgotten router admin password

Likely causes: Default password was changed and not recorded.

Safe fixes: Try common defaults (admin/password); check router label; perform a factory reset (this will erase all custom settings).

When to stop: If a factory reset is not an option, you may need to contact your ISP or the router manufacturer.

Symptom: Internet drops after disabling WPS

Likely causes: Coincidental router reboot; unrelated IP/DHCP issue.

Safe fixes: Power cycle your modem and router; renew your device's IP address; wait a few minutes for the network to stabilize.

When to stop: If the internet does not return after 10 minutes, proceed with general internet troubleshooting.

Symptom: A specific device (like a printer) won't connect after WPS is off

Likely causes: The device was previously connected using the WPS PIN or button method.

Safe fixes: Reconnect the device using the standard Wi-Fi password method. You may need to reset the device's network settings.

When to stop: If the device lacks a standard Wi-Fi setup interface, consult its manual for non-WPS connection methods.

Quick reference

Table A: Common Router Setting Locations for WPS

Router Brand (Common)	Typical Menu Path
Netgear	Advanced > Advanced Setup > Wireless Settings
TP-Link	Advanced > Wireless > WPS
ASUS	Advanced Settings > Wireless > WPS
Linksys	Wireless > Wi-Fi Protected Setup
ISP Combo Units	Often under Gateway > Connection > Wi-Fi

Table B: Safe Baseline Wi-Fi Security Settings

Setting	Recommended Configuration	Reason
Wi-Fi Security Mode	WPA2-Personal (AES) or WPA3	Strong, modern encryption. Avoid WEP or WPA(TKIP).
WPS	Disabled	Eliminates a known vulnerability vector.
Router Admin Password	Unique, strong password	Prevents unauthorized changes to your network.
Guest Network	Enabled for visitors/IoT	Isolates untrusted devices from your main network.
Firmware Updates	Set to auto-update if available	Patches security flaws and improves stability.

Mind map summary

Disable WPS (Why & How)
|
+-- Why It's Risky
|   |
|   +-- Design Flaw: PIN is 8 digits, but last digit is a checksum.
|   +-- Vulnerability: Attackers can brute-force the PIN relatively easily.
|   +-- Persistent Risk: Even after failed attempts, the router remains vulnerable.
|   +-- Backdoor Effect: Bypasses strong WPA2 password security.
|
+-- How to Disable
|   |
|   +-- Access Router Admin
|   |   +-- Find Gateway IP (ipconfig / network settings)
|   |   +-- Log in (defaults on router label)
|   |
|   +-- Navigate to Setting
|   |   +-- Look in: Wireless / Wi-Fi / Security / Advanced
|   |   +-- Find: "WPS", "Wi-Fi Protected Setup"
|   |
|   +-- Take Action
|       +-- Toggle to "Disabled" or "Off"
|       +-- Save/Apply Settings
|       +-- Router may restart.
|
+-- After Disabling
    |
    +-- Normal Wi-Fi: No change for existing devices.
    +-- New Devices: Must use standard Wi-Fi password.
    +-- Security: One major vulnerability removed.
    |
    +-- Next Best Practices
        +-- Use WPA2/WPA3 with strong password.
        +-- Enable Guest Network for IoT.
        +-- Change router admin password.
        +-- Enable firmware updates.

Troubleshooting checklist

Device

Can you access other websites? (Check connectivity)
Have you renewed your IP address? (ipconfig /release, /renew)
Did you try forgetting the network and reconnecting with the password?

Router

Have you power-cycled the router? (Unplug for 30 seconds)
Did you successfully save the WPS-disabled setting?
Is your router's firmware up to date?
Are you using the correct admin login?

ISP & Network

Is your modem online (check lights)?
Has your ISP reported an outage?
Are other devices in the home experiencing the same issue?

When to escalate

If you've gone through the checklist and the issue persists, it might be time to seek further help.

Trigger: You cannot log into your router admin even after a factory reset.
- What to collect: Router model number, serial number, any error messages.
Trigger: Your ISP-provided router/gateway has no option to disable WPS.
- What to collect: The exact model of your ISP device, your account number.
Trigger: Internet connectivity fails broadly after making changes and doesn't recover.
- What to collect: Note all settings you changed; have a device ready to connect via Ethernet for troubleshooting.

FAQ

What is WPS, exactly?

Wi-Fi Protected Setup (WPS) is a feature created to make connecting devices to a secure Wi-Fi network easier. Instead of typing a long password, you could push a button on the router or enter an 8-digit PIN. However, a flaw in the PIN method makes it vulnerable to brute-force attacks.

Is the WPS button on my router the same risk?

The physical button (Push Button method) is generally more secure than the PIN method, but disabling WPS entirely turns off both methods. This is the safest approach, as it removes the feature completely.

Will disabling WPS break my current Wi-Fi connections?

No. Devices already connected to your Wi-Fi using the standard password will remain connected. Only the "easy connect" feature for new devices is removed.

My router only has WPA3. Do I still need to disable WPS?

If your router offers WPS as an option alongside WPA3, it is still advisable to disable it. The WPS vulnerability is independent of the main Wi-Fi security protocol.

What if I need WPS to connect a specific device?

Temporarily enable WPS, connect the device, then immediately disable WPS again. This minimizes the window of vulnerability. Consider upgrading to a device that supports standard Wi-Fi setup.

I have a mesh system. Where do I disable WPS?

You typically manage mesh systems through a mobile app. Look for "Wi-Fi settings," "Advanced settings," or "Security" within the app for a WPS toggle. The setting might be on the main router unit.

Does WPS affect my internet speed?

No. WPS is only an authentication method. It does not influence your connection speed, latency, or signal strength.

Is there a modern replacement for WPS?

Yes. Wi-Fi Easy Connect (also called Device Provisioning Protocol or DPP) is a more secure replacement developed by the Wi-Fi Alliance. It uses QR codes or NFC tags. Check if your newer router supports it.

Sources and references

Wi-Fi Alliance documentation on Wi-Fi Protected Setup (WPS).
US-CERT Vulnerability Note on WPS PIN brute-force vulnerability.
Academic research papers on wireless network security protocols.
Manufacturer support documentation from Netgear, TP-Link, ASUS, and Linksys.
National Institute of Standards and Technology (NIST) guidelines on wireless security.
Industry analysis from cybersecurity organizations like SANS Institute.
Wi-Fi Alliance materials on Wi-Fi Easy Connect (DPP).

Menu

How to disable WPS and why it is risky

AI Assistant

Was this tool helpful?