What Is Wi-Fi WPS? How to Use It and Its Security Risks

The router's WPS button is convenient, but worth understanding the security tradeoff too.

What is WPS?

Short for Wi-Fi Protected Setup, a standard feature that lets a device join a Wi-Fi network with a button press or a PIN instead of typing a full password.

The button (PBC) method

Pressing the WPS button on both the router and the device within about two minutes of each other connects them automatically β€” the most common method, often seen on printers and smart speakers.

The PIN method

Connects by entering an 8-digit PIN displayed on the router or device, used on some devices where a screen or button isn't convenient to operate.

Known security vulnerability

Security researcher Stefan ViehbΓΆck disclosed a design flaw in the PIN method in 2011: because the 8-digit PIN is verified in two separate halves, it could be brute-forced in a relatively short time under the flawed original design.

Recommended approach

Turning off the WPS PIN method in the router's admin page β€” or disabling WPS entirely if it's not regularly used β€” is the safer choice. Newer routers apply mitigations like lockouts after repeated failures, but disabling it fully remains the more reliable option.

A caution about physical access

WPS is convenient, but anyone with physical access to the router can attempt a button-press connection. In spaces with frequent visitors or where security matters, leaving WPS off by default and enabling it only when needed is a reasonable approach.

Router status lights can confirm activity too

The router's WPS indicator light typically blinks during a connection attempt β€” a separate guide to router LED indicator meanings covers what different colors and patterns signal.

For a broader home network security check

Beyond WPS, changing the admin password and reviewing the encryption standard in use are worth checking too β€” a complete home network security guide walks through the full checklist.

Frequently Asked Questions

Does turning off WPS break Wi-Fi connectivity?

No β€” WPS is only a convenience feature for connecting, so turning it off just means typing the password directly still works normally.

Are all routers affected by the WPS PIN vulnerability?

It depends on the manufacturer, model, and firmware version. Many current firmware versions apply mitigations like a temporary lockout after repeated failures, but checking the manufacturer's own advisory is the most accurate way to know.