WPS Push Button Security

[bmcelvan]

Does disabling WPS by PIN in the firmware of my r6900 (costco version of the netgear r7000) router make using WPS with the push button secure? (Won't it only answer requests after the button has been pushed?)

If it is still insecure even with PIN disabled, what else can be done?

thx

 

[bill001g]

You need the feature totally disabled. Some devices used to say they disabled it but did not. A good indication is if when you look for avail networks you see it says WPS Avail. You want it to not say that on your connection.

Technically it should be on or off if it follows the standard. This is what caused the issue in the first place. If it will let you use the button by standard it must also take the PIN. So it is a all or nothing thing. Now that does not mean a vendor has implemented something non standard.

I would not even think to use it, leave it disabled. It is mostly a feature for lazy people who do not want to key in a password. There are a tiny number of devices that only work with WPS enabled router but I would never buy one of those.

The security risk is too high to even think to leave WPS on.

 

[bmcelvan]

I know this is late but thank you