WSP Function - To Enable or Not To Enable?

I came across a post recently in which the 'postee' suggested you'd need to be insane to have the WSP Function enabled on your router. Now I consider myself sane - well at least compared with someone like, say Trump D - and I've always had the function enabled.

Now maybe its the underpants on my head that not only protect me from the harmful 5G stuff but also protects me from problems arising from the WSP button.

What am I missing?

Try this for one:
https://www.howtogeek.com/176124/wi-fi-protected-set...

Thanks for the reply

I've read numerous articles like that but already knew the possibilties. Hardly seems worth questioning ones sanity though.

From my experience I've never had a router that allows for a Pin Number and in order to press the button someone would have to enter my house and find the router - which I'd know about.

Also my router signal is not visible outside my house.

In reply to a post by Spuriousfish:

From my experience I've never had a router that allows for a Pin Number and in order to press the button someone would have to enter my house and find the router - which I'd know about.

Also my router signal is not visible outside my house.

I've had 2, now older routers that used PIN WPS. It is possible that ISP issued routers have had firmware updates to remove this functionality.

As to signal, I find my 2.4 GHz is accessible from a long way outside my flat, so I often disable it, and use 5 GHz only.

1 of the 1st things I do with a new router is disable WPS and upnp.

Apple don't implement it on any devices for a reason.
Google removed it from Android 9 onwards for a reason.

The PIN part of WPS has more serious bugs that can be exploited at any time without needing to push a button.

Push button WPS is also deemed insecure.
There are numerous free programs available that can constantly scan for WPS being activated.

First thing I do with a new router is change the SSID and both the wifi and admin passwords.

Google removed it from Android 9 onwards for a reason.

WPS and WPS Pin both still available on my Android 10 phone.

The PIN part of WPS has more serious bugs that can be exploited at any time without needing to push a button.

Only if you can get a signal from the router and the router supports PIN access

Push button WPS is also deemed insecure.

Only if you let people push the button. And since a good number of routers I've come across had the SSID and Passwords on them, having a push button isn't making it any more insecure.. Which is why I have rule #1 - change them.


I can manage people and there are times when I find it convenient to use WPS. I don't see this as a big security risk. Others may see it differently.

In reply to a post by Spuriousfish:

WPS and WPS Pin both still available on my Android 10 phone.

I'm curious, which phone is it?

Its a Realme 6. My Samsung Tablet also on 10 doesn't have those functions.

I'd heard that Google had dropped it on 9 but also reports that it would make a comeback.

There's also Wifi Easy Connect which I haven't looked into yet but my BT Router has the QR code on it already.

It was dropped in Android 9 and WiFi Easy Connect is it's replacement.

In reference to source.android.com/devices/tech/connect/wifi-easy-connect:

Android 10 introduces support for the Wi-Fi Easy Connect protocol, also known as the device provisioning protocol (DPP). Wi-Fi Easy Connect was introduced by the Wi-Fi Alliance (WFA) as an alternative to Wi-Fi Protected Setup (WPS). WPS was deprecated in Android 9.

Realme (never heard of them tbh) may have added WPS themselves.

Realme split out of the Oppo Company - Chinese but then what isn't these days. A very good phone in my opinion.

https://www.gsmarena.com/realme_6-10113.php