NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

Woodcutter's avatar
Woodcutter
Aspirant
Jun 07, 2019
Solved

WPS Security Leak

How to turn off WPS? - all articles read indicate this should be off as it can be a security issue otherwise?

 


  • James721 wrote:

    WPS can not be disabled in Netgear routers. ...That said WPS will still function if the physical button is pressed on the router itself. 


    The UI says "WPS Settings (disabled when smart connect is enabled)", also here the WPS is still indicated in the beacon, and the WPS button appears to remain workable.

     


    James721 wrote:

    And yes another poor design by Netgear. 


    Agree.

8 Replies

  • WPS can not be disabled in Netgear routers. You can disable the pin number for connecting to WPS. That said WPS will still function if the physical button is pressed on the router itself. And yes another poor design by Netgear. 

    • schumaku's avatar
      schumaku
      Guru

      James721 wrote:

      WPS can not be disabled in Netgear routers. ...That said WPS will still function if the physical button is pressed on the router itself. 


      The UI says "WPS Settings (disabled when smart connect is enabled)", also here the WPS is still indicated in the beacon, and the WPS button appears to remain workable.

       


      James721 wrote:

      And yes another poor design by Netgear. 


      Agree.


  • Woodcutter wrote:

    How to turn off WPS? - all articles read indicate this should be off as it can be a security issue otherwise?


    The only real problem withut physical access is the brute force possibility many consumer devices didn't had a protection mechanism up to some years ago.

     

    Everything you want to know about is nicely explained here -> How do NETGEAR Home routers defend WiFi Protected Setup PIN against brute force vulnerability?

     

    Are your visitors having physical access to your router? So they have access to the WPS button, too. If you want to prohibit this option - disable WPS completely. Further on, the router reset button which can be abused, too. And finally your visitors are able to plug any computer to an Ethernet port. Think about it. The question is always a balance between commodity and risk.

     

    Along with Android 9 release , Google depreciated WPS - no more WPS support to establish a connection.

  • > How to turn off WPS? [...]

     

       Visit http://netgear.com/support , put in your model number, and look
    for Documentation.  Get the User Manual.  Read.  Look for "Specify WPS
    Settings" (or "WPS").

     

    > [...] all articles read [...]

     

       Thanks for the helpful links.

    • Woodcutter's avatar
      Woodcutter
      Aspirant

      Read manual, did not resolve my question on how to turn off WPS. But thanks for your suggestion.