Turn off WPS after connecting home Wi-Fi devices

Wi-Fi Protected Setup, or WPS, can simplify connecting a device by button or PIN. It is a convenience feature separate from the normal WPA2/WPA3 network password. If you do not need the shortcut, disabling it removes another joining path without changing the Wi-Fi name.

Before you start​

Make sure you know the normal network password before changing the setting. Check whether a printer or other device can reconnect through its standard Wi-Fi setup.

Do it step by step​

1. Open the router's local administrative page or official app. Find WPS in Wi-Fi, Wireless or Advanced settings; layout depends on the manufacturer.
2. Record whether button pairing, PIN pairing or both are enabled. Do not assume hiding a physical WPS button also disables the feature in software.
3. Turn WPS off and save. If the router offers separate controls by band or network, check each relevant band and guest network.
4. Disconnect one ordinary phone and reconnect using the network name and normal Wi-Fi password. This confirms the regular WPA connection remains available.
5. If an older device fails, consult its manufacturer's instructions for manual Wi-Fi enrollment rather than leaving WPS permanently on. Recheck the router after a firmware update or reset.

Check the result​

WPS should read Off in the admin interface while devices continue to join with the normal password. A pairing button press should no longer start WPS enrollment.

If something goes wrong​

Some provider-managed routers hide the control; ask the provider whether WPS is enabled and how to disable it. Avoid resetting the whole router just to find the switch.

Know the limit​

WPS is not the same as Wi-Fi encryption or the router admin password. CISA recommends turning it off, and ASUS documents button and PIN connection methods as examples. CISA router hardening advice ASUS WPS feature description