Wi-Fi Protected Setup


Wi-Fi Protected Setup™ is an optional certification program based on technology designed to ease the setup of security-enabled Wi-Fi® networks in home and small office environments. Wi-Fi Protected Setup supports methods (pushing a button or entering a PIN) that are familiar to most consumers to configure a network and enable security.

Like all Wi-Fi CERTIFIED™ products, Wi-Fi Protected Setup products have industry-standard security features provided by Wi-Fi Protected Access®. Wi-Fi Protected Setup gives consumers an easier approach to set up a security-protected Wi-Fi connection, either between devices or in a network configuration. Additional devices can be easily added to a Wi-Fi Protected Setup network over time.

With Wi-Fi technology connecting a wider array of devices, a simpler, standardized, approach to network configuration and security enablement is crucial. Wi-Fi consumers are able to choose from a wide variety of product types and brands knowing that there is a straightforward method for adding these devices to their network.

Frequently Asked Questions

How does Wi-Fi Alliance help ensure product compatibility and a good user experience for certified products?

Compatibility and quality are achieved through testing of Wi-Fi products. Consumers should always look for the Wi-Fi CERTIFIED logo to ensure the best user experience possible.

Are Wi-Fi CERTIFIED products protected by security?

As of July 1, 2020, all new Wi-Fi CERTIFIED devices require WPA3. The only way to be sure that a product meets the latest security standards is to purchase only Wi-Fi CERTIFIED products.

How does Wi-Fi Protected Setup work?

There are two primary approaches to network setup within Wi-Fi Protected Setup: push-button and PIN entry. PIN entry is mandatory in all Wi-Fi Protected Setup devices, while push-button is optional and may also be found in some devices.

Push-button configuration (PBC): in some Wi-Fi Protected Setup networks, the user may connect multiple devices to the network and enable data encryption by pushing a button. The access point/wireless router will have a physical button, and other devices may have a physical or software-based button. Users should be aware that during the two-minute setup period which follows the push of the button, unintended devices could join the network if they are in range.

PIN entry: in all Wi-Fi Protected Setup networks, a unique PIN (Personal Identification Number) will be required for each device to join the network. A fixed PIN label or sticker may be placed on a device, or a dynamic PIN can be generated and shown on the device's display (e.g., a TV screen or monitor). The PIN is used to make sure the intended device is added to the network being set up and will help to avoid accidental or malicious attempts to add unintended devices to the network.

A registrar device (which could be an Access Point/wireless router, PC television, or other device) will detect when a new Wi-Fi device is in range, and prompt the user to enter the PIN, if he or she wishes to add the new device to the network. In this mode, Wi-Fi Protected Setup network encrypts data and authenticates each device on the network. The PIN entry method is supported in all devices.