What does WPS stand for?
WPS stands for Wi-Fi Protected Setup. A convenience feature that joins a device to Wi-Fi with a button press or an eight-digit PIN instead of the passphrase. The PIN method can be brute-forced in hours because it is validated in two halves, so WPS should be disabled.
WPS was created so that people could join a Wi-Fi network without typing a long passphrase: press a button on the router, or enter an eight-digit PIN. The PIN method has a design flaw. The router confirms the two halves of the PIN separately, so an attacker needs at most about 11,000 guesses instead of 100 million, and a successful guess reveals the network's real passphrase. For that reason the standard hardening advice is to disable WPS.
WPS in practice: an example
A home router has WPA2 with a strong passphrase, but WPS is on by default. An attacker in range runs a tool that tries PINs one after another; some hours later the router hands over the passphrase, and its strength made no difference.
What WPS is confused with
WPS vs WPA: what is the difference?
WPA, WPA2 and WPA3 are the security protocols that encrypt Wi-Fi. WPS is only a convenience feature for handing a device the key. Turning WPS off does not weaken the encryption. What WPA stands for
WPS vs PSK: what is the difference?
The pre-shared key is the passphrase itself. WPS is a shortcut for delivering it to a new device without typing it. What PSK stands for
Which exams cover WPS?
WPS is on the official CompTIA acronym list for one of the four exams covered here.
- Network+ N10-009: on the acronym list, not tied to one objective.
Each number is a CompTIA exam objective and the name in brackets is its domain. The exam puts the term in a scenario; it does not ask you to recite the expansion.
Check yourself: two practice questions
Written by CertSprint for this page. They are not taken from any exam.
1. A router uses WPA2 with a 20-character random passphrase. Which setting could still let a nearby attacker recover that passphrase?
- WPS with PIN entry enabled
- A hidden SSID
- A 5 GHz channel
- DHCP enabled
Show the answer
A. WPS with PIN entry enabled. The WPS PIN can be brute-forced in a small number of attempts, and the router then discloses the passphrase, whatever its length.
2. What is the recommended setting for WPS on a business access point?
- Disabled
- Enabled with a shorter PIN
- Enabled on the guest network only
- Enabled with the PIN printed on the wall
Show the answer
A. Disabled. The PIN weakness is in the protocol design, so it cannot be configured away. Disabling WPS removes the attack.
Sources: CERT/CC VU#723755: WiFi Protected Setup (WPS) PIN brute force vulnerability; NIST glossary: Wi-Fi Protected Setup; Wi-Fi Alliance: Security. The acronym and its expansion come from CompTIA's official acronym lists, linked from each exam glossary above. The explanation, example and questions are CertSprint's own, checked against these sources on 11 November 2026.