- What Is WPS and How Does It Work?
- What Does WPS Mean?
- How Does WPS Work?
- What Are the Benefits of WPS?
- What Are the Disadvantages to WPS?
- Should I Use WPS?
- What is Wifi Protected Setup (WPS), & is it Safe?
- What is Wi-Fi Protected Setup (WPS)?
- What can you do with Wi-Fi Protected Setup (WPS)?
- Which devices work with Wi-Fi Protected Setup (WPS)?
- Why Wi-Fi Protected Setup (WPS) Is Insecure?
- Security Risk with WPS Push Button Configuration
- Security Risks with WPS PIN Code
- WPS PIN Code is Mandatory
- How to Disable Wi-Fi Protected Setup (WPS)?
What Is WPS and How Does It Work?
Jennifer Allen has been writing about technology since 2010. Her work has appeared in Mashable, TechRadar, and many more publications.
- Routers & Firewalls
- The Wireless Connection
- Network Hubs
- ISP
- Broadband
- Ethernet
- Installing & Upgrading
- Wi-Fi & Wireless
WPS stands for Wi-Fi Protected Setup.
What Does WPS Mean?
WPS is a method of setting up a secure Wi-Fi network at home with the minimum of effort. It typically involves pressing down the WPS button on your router to activate it.
The WPS button on many routers was created by the Wi-Fi Alliance in 2006. Its aim was to help home users who didn’t know much about network security, set up their home wireless networks safely and securely. While many users might have wondered ‘what does the WPS button do?’, it was a far simpler process for set up than having to dive into complicated network settings elsewhere.
How Does WPS Work?
In the past, users had to know the network name they wanted to connect to (also known as an SSID) as well as the password (sometimes referred to as a WPA-PSK key). This took time and often required entering quite a long string of information.
Nowadays, most routers include a WPS button on the device so you simply press the button to begin pairing. It works a lot like pairing a Bluetooth device, saving you the hassle of having to enter complex settings.
Some older models of routers may use a PIN instead with users having to enter a PIN number on devices to pair them up. Newer devices may also include near field communication methods so you simply hold your smartphone (for instance) next to a router to quickly pair the devices together.
What Are the Benefits of WPS?
There are a number of benefits to WPS providing you know what is the WPS button and how it works.
- It’s straightforward. Many routers and networks require you to enter long passphrases to join existing networks. Via WPS, you can simply press a button and join within seconds. It’s much more straightforward than having to type long passwords in.
- It’s novice-friendly. Setting up a network should be simple nowadays and WPS has made it even simpler, so you don’t need to have expert knowledge on how to get started.
- It’s quick. Trying to add multiple devices to your network? Tap the WPS button and you’re good to go for everything from your PC to your smartphone or smart TV.
What Are the Disadvantages to WPS?
WPS is a very useful way of setting up a home network fast, but it’s not perfect. Here’s what you need to know about the disadvantages.
- It’s not 100% secure. In the past, there have been brute-force attacks that have led WPS to be open to attack. It’s unlikely you’ll be a victim, but it’s why many people disable WPS entirely.
- Anyone can activate it. If someone has physical access to your router, they can easily activate WPS right down to the PIN often being displayed on the top of the router. It might only be activated for a few minutes but that can make all the difference. You need to have the device stored somewhere securely.
- It doesn’t work with WEP security protocol. WEP is the oldest security protocol out there. It’s been superseded by WPA2 but some users with old network hardware might still need to use WEP. It doesn’t play nicely with WPS so don’t expect to be able to use the WPS button.
Should I Use WPS?
If you’re worried about security then the absolute best solution is to buy a router that doesn’t have WPS support. Even with it disabled, certain devices still keep it activated without your knowledge.
However, for most users, WPS is very useful. It saves the time and hassle involved in entering long passwords to connect to a network, and it’s ideal for novices that aren’t very experienced with home network setups.
Whatever you decide to do, make sure to disable WPS once you’ve finished setting everything up. That way, things are mostly as safe as they can be. The vast majority of users will never have a problem using WPS or face any hacking risks on their home networks.
What is Wifi Protected Setup (WPS), & is it Safe?
If you ever configured a wireless router by yourself, you should have come across the term WPS. Short for Wi-fi Protected Setup, it is usually provided as a physical button on your WiFi router and can be used to grant easy access to your WiFi network.
But when we talk about easy access, the question of security automatically comes to mind.
So with that being said, for this article, we have put together a detailed read on everything you need to know about WPS or Wi-Fi Protected Setup.
We will talk about what WPS is, whether it makes connecting to your wireless network much more convenient and whether it is secure for day-to-day use.
So without further ado, let’s get started:
What is Wi-Fi Protected Setup (WPS)?
Short for Wi-Fi Protected Setup, WPS is a wireless network security standard designed to make connections between your router and wireless devices quicker and more convenient.
You can find it as a physical button on the back or bottom of your router. Pressing it will enable WPS mode, which will let you easily connect your various devices with your router using the WPS password, a.k.a. WPA-PSA key.
The WPS technology is built on top of the WPA Personal and WPA2 Personal security protocols. It allows wireless devices to connect with your wireless network using a password that’s encrypted using the security mentioned above protocols.
It doesn’t use the older and currently deprecated WEP security protocol.
What can you do with Wi-Fi Protected Setup (WPS)?
Here is a list of situations where Wi-Fi Protected Setup (WPS) can simplify and shorten the connection process:
- WPS Push Button Configuration – Pressing the WPS button on your router, you can enable discovery mode for a new client device. After allowing it, pick up one of your wireless devices and select the network name to connect to it. You won’t need to enter the network password, and the device will get automatically connected.
- Connect Multiple Devices – WPS allows you to connect multiple devices with your wireless router quickly. Many WPS-enabled wireless devices like printers and range extenders also have a WPS button on them. Just press the WPS button on these wireless devices as well as on your WiFi router. All devices will automatically connect without having you input any additional data. They will also automatically connect in the future without you needing to press the WPS button.
- WPS Pin Code – Every WPS-enabled wireless router also has an automatically generating PIN code (a.k.a. WPA-PSA Key) that the user can’t change. You can find it inside the WPS configuration page in your router settings. When connecting a wireless device with your router, you can use this PIN code for authentication purposes.
- WPS Client PIN Code – Similar to the WPS PIN Code generated by your router, some WPS-enabled wireless devices also generate an eight-digit PIN called the Client PIN. You can copy and paste this Client PIN into your router’s wireless configuration page, and the device will get automatically connected to your wireless network.
Note: The process of setting up and using WPS is the same for all routers, but it may look different depending on how the router manufacturer created the UI/UX design.
Which devices work with Wi-Fi Protected Setup (WPS)?
Apart from wireless routers, plenty of other devices in the market come with WPS support.
The most commonly seen of these devices are modern wireless printers. They have a dedicated WPS button for quickly and effortlessly connecting to your router.
Then we have Wi-Fi Range Extenders and Repeaters, which also has a built-in WPS feature.
And finally, a few higher-end Laptops, tablets, smartphones, and 2-in-1 devices comes with WPS support – generally implemented at a software level with no physical buttons.
Why Wi-Fi Protected Setup (WPS) Is Insecure?
Despite having “Protected” in its name, WPS is generally considered unsafe and a potential security risk. This is because of the methods by which devices can connect to WPS-enabled routers.
Security Risk with WPS Push Button Configuration
The simple and convenient way of accessing WPS-enabled routers is by using the Push Button configuration. This is likely what most people would be using.
It would help if you pushed a physical button on the router or a software button in the router network setup area. This will enable WPS-login for a couple of minutes. During this time, you can connect to the wireless network without needing to enter the network password.
As you can imagine, this makes connecting to your wireless network super convenient. But at the same time, if a person/individual gets physical access to your router, they can easily access your network without knowing the network password.
Security Risks with WPS PIN Code
The WPS PIN Code method generates a random eight-digit PIN as a security code to connect to your wireless network.
The problem is, the WPS system doesn’t check this eight-digit code at once. Instead, the router divides it into two four-digit chunks and checks them separately. It will first check the first four digits, and if that’s accurate, it will check the last four digits.
This makes the entire system super vulnerable to brute force attacks. For example, a four-digit code only has 10,000 possible combinations. And so, the two following four-digit codes have 20,000 possible combinations. However, if there were a complete eight-digit code, there would have been 200 billion combinations, making it much more challenging to crack.
What’s more worrying is that many consumer routers don’t even “time out” the user connection after entering the wrong WPS PIN. This gives the hacker potentially unlimited retries to guess the correct four-digit code first, and when they have it, move on to the last section.
WPS PIN Code is Mandatory
The push-button connect option is more secure between the above two methods since it makes it super difficult to hack your wireless network remotely.
But that being said, the less secure PIN authentication method is made mandatory by the Wi-Fi Alliance – the organization that owns the Wi-Fi trademark(Wi-Fi logo).
As such, router manufacturers are mandated to include a PIN-based authentication method, making your router prone to remote hacking.
How to Disable Wi-Fi Protected Setup (WPS)?
So now that you know what Wi-Fi Protected Setup (WPS) is and its security issues, you might want to disable it to protect your wireless network. But, unfortunately, well, it isn’t as straightforward.
Some WiFi router manufacturers remove the option to disable WPS out of the box. And so, if you buy these routers, you will be stuck with the potential security risk.
That being said, some routers do provide users with the option to disable WPS. Now depending on the manufacturer, the exact steps to disable the option will be different. However, if it exists, you should find the WPS enable/disable the option in the router backend dashboard.
After logging in, the necessary settings should be inside the Wi-Fi Protected Setup (WPS) section. Of course, the most crucial thing is locating and disabling the PIN-based authentication option. But at the same time, if you find an option that allows you to disable WPS altogether, we recommend doing it.
Yes, WPS does offer a lot of conveniences when it comes to connecting multiple devices to your wireless network. And disabling PIN-based authentication also removes significant security vulnerabilities.
However, making your network vulnerable to a push of a button is also a scary thought. For example, suppose you are out on vacation, and someone broke into your home. Just by pressing a button on your router, they will now have complete access to your home network.
As such, to ensure utmost security, we recommend keeping WPS disabled.
Hedayat S
Hedayat is the new Editor-in-Chief of Rottenwifi and has been writing about computer networking since 2012. Hedayat’s strong background in computer science helped him cement his position in the ever-expanding tech blogging world. As a network engineer, systems administrator, and systems analyst during his decade-long career in Information Technology, he has a passion for the internet & technology in his DNA.
Blog.rottenwifi.com is a participant in the Amazon Services LLC Associates Program which means we may get paid commissions on editorially chosen products purchased through our links to retailer sites. All names, logos, brands, and images are trademarks or copyrighted materials of their respective owners. Amazon and the Amazon logo are trademarks of Amazon.com, Inc., or its affiliates.