Disabling WPS on Xiaomi routers: full security instructions

Modern users often don’t even think about what hidden features work in the background of their home equipment. Xiaomi Mi Router and their more powerful Pro or AX series counterparts have activated fast-connection technology by default. This feature, known as WPS (Wi-Fi Protected Setup), is designed to simplify the lives of beginners, allowing you to connect gadgets with the simple press of a button. However, it is this “simplicity” that becomes the Achilles heel of your home network, opening doors to attackers.

Xiaomi smart appliance owners should understand that the standard WPS It's based on outdated encryption protocols that are easily bypassed by modern pentesting tools. WPS vulnerable to brute-force attacks that can restore PIN-If you value your personal data and want to prevent unauthorized access to traffic, disabling this option is a mandatory step in the initial security setting.

In this guide, we will take a closer look at the process of deactivating a feature through the web interface and the Mi Wi-Fi mobile application. You will learn how to find the right settings in the confusing firmware menu, how the global and Chinese versions of the interface differ, and what alternative protection methods are worth using instead. Your network security begins with understanding which services are running on the router right now.

Why you should turn off WPS on your router

Technology WPS The Wi-Fi Alliance was developed back in 2007 with the good intentions of allowing people who don't know complex passwords and encryption to easily connect devices to the network. PIN-code (virtual or physical) that, when entered, allows the device to access without entering the primary Wi-Fi password. However, over the years, critical vulnerabilities have been discovered in the architecture of this protocol that have not been fixed at the hardware level in many chipsets.

The main problem lies in the method of verification. PIN-Instead of going through all the possible 8-digit combinations, an attacker can attack the first and second halves of the code separately, drastically reducing the number of login attempts required. For modern Xiaomi routers, which often act as the control center of the smart home, the presence of such a security hole is unacceptable. WPS A hacker can not only steal your traffic, but also gain access to local devices such as your computer. IP-camera NAS-storage.

Also, many users don't know that the function can be activated even without their knowledge, especially after updating the firmware or resetting the settings to factory ones. Network security depends on the number of ports and services open. By disabling unused services, you reduce what's called the "attack surface." Even if you've never used a WPS button on the router housing, the software part can continue to broadcast the pairing readiness signals while waiting for the connection.

⚠️ Attention: Use WPS It makes your network vulnerable even if you have a complex password on your main Wi-Fi network. WPS.

There is a common misconception that if you hide the name of the network (SSID) or use filtering by MAC-addresses, then WPS It's not. It's not. It's at a lower level, and it often ignores these standby restrictions. The only sure way to protect the network perimeter is to completely deactivate the service in the router settings.

Preparation for setting up router security

Before making changes to the configuration of Xiaomi Router, you need to ensure a stable connection with the device. It is best to configure by connecting to the router via a LAN cable to prevent communication breakage during the change in Wi-Fi settings. If this is not possible, make sure that your device (smartphone or laptop) is connected to the wireless network you plan to protect.

You will need access to the admin panel. For Xiaomi routers, the standard address is 192.168.31.1 or the domain name miwifi.com. Enter this address in the address bar of any modern browser. It is important to use current browser versions such as Chrome, Firefox or Safari, as older versions may not display the scripts of the configuration interface correctly.

You will need an administrator password to log in. It often matches the Wi-Fi password by default, unless you changed it when you first set up. In some cases, especially on Chinese firmware, you may need to link to your Mi Account account via a mobile app. Make sure you have access to the phone the router is registered to in case you need to confirm your actions.

If you forget the administrator password, you will have to reset to the factory settings by clamping the Reset button on the device body on the device. 5-10 After that, the router will go back out of the box, and you can set up new credentials. Remember, the reset will delete all your current settings, including network names and statics. IP-address.

Step-by-step: disabling through the web interface

The interface of the Xiaomi web router configurator may vary depending on the firmware version (Chinese or global) and device model. However, the logic of the settings search remains similar. After successfully logging in at 192.168.31.1, you need to find the section responsible for setting up the wireless network.

In the classic interface, look for the Settings or Common Settings tab. Inside this section should be the Wi-Fi Settings option or just Wi-Fi. Scroll down to the WPS-related block. In global firmware, this switch is often at the bottom of the Wi-Fi settings page or in the Advanced subsection.

You'll see a switch that says Enable WPS or just WPS. By default, it's in the ON (On). Click on it to change the state on OFF (Switched off). Once you change the slider's position, be sure to press the Save or Apply button at the bottom of the page to save the changes. The router can briefly restart the Wi-Fi module and the connection will be interrupted for a few seconds.

• 🔹 Search section: Go to the "Settings" menu" → "Wi-Fi" → "Additional settings".
• 🔹 Deactivation: Find the switchboard WPS and put it in the "Off" position".
• 🔹 Save: Click the "Apply" button and wait for the page to update.
• 🔹 Check: Make sure the indicator is WPS Main screen status has gone out or changed status.

In some firmware versions (especially the early ones), the WPS setting can be made into a separate Advanced → WPS menu. If you don't see the switch on the home Wi-Fi settings page, carefully examine the side menu or tabs at the top of the screen. Xiaomi's interface often hides technical details under the "More" button or similar navigation element.

💡

If you can’t find a WPS setting in the web interface, try switching the interface language to English. In the English version of the menu, the structure is often more logical, and the items you want are where you expect them to be, following the standard Wi-Fi Alliance documentation.

Managing WPS function through mobile application

For many users, managing the Xiaomi ecosystem is easier via a smartphone, with the official Mi Wi-Fi app (for the global market) or MI Wi-Fi (for China) giving full access to the router’s settings, a method that is especially relevant if you don’t have a computer on hand or want to check the settings remotely.

Run an app on your smartphone that is connected to or accessed via the Internet (remote control must be enabled). On the home screen, select your router from the list of devices. Next, go to the Settings section, which is usually indicated by the gear icon or located in the bottom menu.

In the settings list, look for Wi-Fi Settings. Inside this menu, look for the WPS option. Unlike the web interface, here the change is often instantaneous, but sometimes you need confirmation of action. If you are using the Chinese version of the application, look for characters that match the WPS, or use the built-in screen translator if it is available on your system.

⚠️ Note: When managing through the mobile application, make sure you have the latest version of the software installed. In older versions of the Mi Wi-Fi application, some security settings may have been hidden or not work properly due to changes in the software. API router.

It is worth noting that the functionality of the application may be limited depending on the region in which your Mi Account is registered. If you do not see the WPS switch, try changing the region in the settings of the application itself (usually this is done in the user profile), but remember that this may affect the operation of other smart devices in the house.

Features of firmware: Chinese vs Global version

Owners of Xiaomi routers often face interface differences due to the origin of the device. Chinese versions of routers (CN Version) have richer functionality and frequent updates, but their interface is entirely in Chinese. Global versions (Global) are adapted for the international market, but may have a stripped-down feature set.

In Chinese firmware, a WPS shutdown can be in a section that literally translates as "Security" or "Extended Wi-Fi settings." The path often looks like: Common Settings → Wi-Fi Settings → WPS. However, the characters can be confusing. The key character for a search is a combination denoting WPS, or a graphic icon that resembles the two arrows that form a circle.

Global firmware, by contrast, follows the more standard logic described above. However, they are more likely to have bugs when the switch is visually turned off, but the service continues to work in the background. In such cases, it is recommended to perform a full restart of the device after changing the settings.

If you own the Chinese version and can’t understand the menu, there is the option of installing third-party firmware (like OpenWrt or Pandora), but this requires technical skills and deprives the device of warranty. For most users, it is safer to stay on stock firmware by carefully studying the location of the switches.

Alternative methods of protecting Wi-Fi networks

After disabling WPS, your network will become much safer, but the protection process does not end there. WPS technology is only one of the attack vectors. To create a reliable security perimeter on Xiaomi Mi Router routers, we recommend using a comprehensive approach that includes modern encryption standards and a strict password policy.

First of all, make sure you choose the right type of security. In the Wi-Fi Settings, the Encryption or Security field should select the WPA2-PSK option or, even better, WPA3-PSK if your devices support this standard. Avoid using outdated WEP protocol or mixed WPA/WPA2 mode, as these may contain vulnerabilities.

Password protection is also critical: Passwords should be long (at least 12 characters), contain different register letters, numbers and special characters. Don't use easily guessed combinations such as birth dates or simple sequences. Regular password change (every 3-6 months) is also good practice, although it can be inconvenient for a home network with many devices.

• 🔐 Default password change: Never leave a factory password on the router's admin.
• 📡 Shutdown WPS: As we have already seen, this is a mandatory step.
• 👁️ Disable Remote Control: If you don’t need access to your router from the outside, turn off this feature.
• 🔄 Firmware Update: Watch out for Xiaomi updates closing security holes.

Another useful measure is the Guest Network, which allows you to create a separate access point with limited access to your main LAN, so guests, friends or smart home devices with questionable security (such as cheap IoT light bulbs) are better connected to the guest segment, and if one of these devices is hacked, the main network with your personal data will remain safe.

Frequently Asked Questions (FAQ)

💡

Disabling WPS is a basic but critical step in setting up any router, including Xiaomi models, which closes one of the most well-known vulnerabilities, making your network unavailable for simple automated attacks.