Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.

To disable WPS on most AT&T gateways, connect locally, open the gateway’s Wi‑Fi settings, enter the Device Access Code, find the WPS control under Advanced Options, switch it to Off, and save. The exact menu depends on whether you have a BGW320, BGW210, Pace 5268AC, or an All‑Fi Hub. Disabling WPS does not disable Wi‑Fi or remove your existing network password.

This guide reflects AT&T interface guidance checked August 18, 2026. Firmware can rename, move, or hide the WPS control, so identify your equipment before changing anything.

What WPS does—and why you may want it off

WPS (Wi‑Fi Protected Setup) is an optional enrollment feature. A compatible device can join your wireless network by pressing the gateway’s WPS button, entering a WPS PIN, or starting WPS pairing from the device, instead of typing the Wi‑Fi passphrase.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

WPS is separate from your SSID, Wi‑Fi password, and WPA encryption mode. If nobody in your home uses push-button or PIN pairing, leaving WPS enabled adds convenience you do not need. The Federal Trade Commission recommends disabling WPS, along with unnecessary remote management and UPnP, as part of securing a home network. That reduces one enrollment path; it does not, by itself, make a network secure or imply that every current gateway is vulnerable.

#1 Best Overall
Sale
TP-Link AX1800 WiFi 6 Router (Archer AX21 V5)
  • DUAL-BAND WIFI 6 ROUTER: Wi-Fi 6(802.11ax) technology achieves faster speeds, greater capacity and reduced network congestion compared to the previous gen. All WiFi routers require a separate modem. Dual-Band WiFi routers do not support the 6 GHz band.
  • AX1800: Enjoy smoother and more stable streaming, gaming, downloading with 1.8 Gbps total bandwidth (up to 1200 Mbps on 5 GHz and up to 574 Mbps on 2.4 GHz). Performance varies by conditions, distance to devices, and obstacles such as walls.
  • CONNECT MORE DEVICES: Wi-Fi 6 technology communicates more data to more devices simultaneously using revolutionary OFDMA technology
  • EXTENSIVE COVERAGE: Achieve the strong, reliable WiFi coverage with Archer AX1800 as it focuses signal strength to your devices far away using Beamforming technology, 4 high-gain antennas and an advanced front-end module (FEM) chipset
  • OUR CYBERSECURITY COMMITMENT: TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement.

First identify the device broadcasting your Wi‑Fi

AT&T supplies several gateway families, and they do not all expose identical menus:

  • Arris BGW210‑700
  • Humax/Nokia BGW320
  • Pace 5268AC
  • AT&T All‑Fi Hub (including CGW450), used with some fiber and Internet Air service
  • Older U‑verse gateways such as the NVG599, NVG589, and Pace 5031

Find the model on the front or rear label, in the gateway’s local settings page, or in Smart Home Manager. AT&T maintains separate documentation for gateway families in its user-guide index.

If a separate ASUS, TP‑Link, Netgear, Eero, Linksys, access point, or mesh system broadcasts the network, disable WPS on that device too. Turning it off only on the AT&T gateway does not turn it off on downstream equipment.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Before changing the setting

  1. Connect to the AT&T gateway’s Wi‑Fi, or plug a computer into it by Ethernet.
  2. Locate the Device Access Code, normally printed on the gateway label. This is different from your Wi‑Fi password.
  3. Write down the current Wi‑Fi name (SSID) and password.
  4. Identify any extender or mesh node that may have its own WPS function.
  5. Do not press the red factory-reset button. Disabling WPS never requires a reset.

Disable WPS on an AT&T All‑Fi Hub or CGW450

For current All‑Fi equipment, AT&T’s documented route is:

Rank #2
Sale
TP-Link BE6500 Dual-Band WiFi 7 Router (BE400)
  • 𝐅𝐮𝐭𝐮𝐫𝐞-𝐑𝐞𝐚𝐝𝐲 𝐖𝐢-𝐅𝐢 𝟕 - Designed with the latest Wi-Fi 7 technology, featuring Multi-Link Operation (MLO), Multi-RUs, and 4K-QAM. Achieve optimized performance on latest WiFi 7 laptops and devices, like the iPhone 16 Pro, and Samsung Galaxy S24 Ultra.
  • 𝟔-𝐒𝐭𝐫𝐞𝐚𝐦, 𝐃𝐮𝐚𝐥-𝐁𝐚𝐧𝐝 𝐖𝐢-𝐅𝐢 𝐰𝐢𝐭𝐡 𝟔.𝟓 𝐆𝐛𝐩𝐬 𝐓𝐨𝐭𝐚𝐥 𝐁𝐚𝐧𝐝𝐰𝐢𝐝𝐭𝐡 - Achieve full speeds of up to 5764 Mbps on the 5GHz band and 688 Mbps on the 2.4 GHz band with 6 streams. Enjoy seamless 4K/8K streaming, AR/VR gaming, and incredibly fast downloads/uploads.
  • 𝐖𝐢𝐝𝐞 𝐂𝐨𝐯𝐞𝐫𝐚𝐠𝐞 𝐰𝐢𝐭𝐡 𝐒𝐭𝐫𝐨𝐧𝐠 𝐂𝐨𝐧𝐧𝐞𝐜𝐭𝐢𝐨𝐧 - Get up to 2,400 sq. ft. max coverage for up to 90 devices at a time. 6x high performance antennas and Beamforming technology, ensures reliable connections for remote workers, gamers, students, and more.
  • 𝐔𝐥𝐭𝐫𝐚-𝐅𝐚𝐬𝐭 𝟐.𝟓 𝐆𝐛𝐩𝐬 𝐖𝐢𝐫𝐞𝐝 𝐏𝐞𝐫𝐟𝐨𝐫𝐦𝐚𝐧𝐜𝐞 - 1x 2.5 Gbps WAN/LAN port, 1x 2.5 Gbps LAN port and 3x 1 Gbps LAN ports offer high-speed data transmissions.³ Integrate with a multi-gig modem for gigplus internet.
  • 𝐎𝐮𝐫 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐂𝐨𝐦𝐦𝐢𝐭𝐦𝐞𝐧𝐭 - TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement.
  1. Open the hub’s settings while connected to its network.
  2. Select Home Network, then Wi‑Fi.
  3. Enter the Device Access Code when requested.
  4. Select Advanced Options.
  5. In the 2.4 GHz and 5 GHz wireless sections, look for WPS, Enable WPS, WPS Enable, or Wi‑Fi Protected Setup.
  6. Set the control to Off or Disabled for every radio where it appears.
  7. Select Save and wait for the gateway to apply the change.

AT&T’s current All‑Fi instructions verify the Home Network > Wi‑Fi > Advanced Options path, but the published page does not show a WPS switch on every firmware release. If you do not see one, follow the troubleshooting section rather than changing unrelated security settings.

Disable WPS on a BGW320

On many BGW320 firmware versions, the control is available at:

  1. Browse to http://192.168.1.254.
  2. Choose Home Network > Wi‑Fi.
  3. Enter the Device Access Code.
  4. Open Advanced Options and inspect the wireless configuration for WPS.
  5. Set WPS to Off or Disabled for each applicable band, then select Save.

This path is firmware-dependent, not guaranteed for every BGW320 release. AT&T’s BGW320 support page confirms the physical WPS button and its indicator behavior, but it does not document a permanent disable control for every software version.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Disable WPS on a BGW210 or Pace 5268AC

  1. Open http://192.168.1.254 from a device connected to the gateway.
  2. Select Home Network > Wi‑Fi.
  3. Enter the Device Access Code.
  4. Open Advanced Options (or the equivalent wireless settings page).
  5. Find WPS, WPS Enable, or Wi‑Fi Protected Setup.
  6. Disable it for every available radio and select Save.

AT&T publishes separate guides for the BGW210 and Pace 5268, so labels and placement can differ by firmware. Do not change WPA security, SSID, or Wi‑Fi Operation unless you intend to change how devices connect.

Rank #3
TP-Link AC1200 WiFi Router Dual Band Wireless Internet Router (Archer A54)
  • Dual-band Wi-Fi with 5 GHz speeds up to 867 Mbps and 2.4 GHz speeds up to 300 Mbps, delivering 1200 Mbps of total bandwidth¹. Dual-band routers do not support 6 GHz. Performance varies by conditions, distance to devices, and obstacles such as walls.
  • Covers up to 1,000 sq. ft. with four external antennas for stable wireless connections and optimal coverage.
  • Supports IGMP Proxy/Snooping, Bridge and Tag VLAN to optimize IPTV streaming
  • Access Point Mode - Supports AP Mode to transform your wired connection into wireless network, an ideal wireless router for home
  • Advanced Security with WPA3 - The latest Wi-Fi security protocol, WPA3, brings new capabilities to improve cybersecurity in personal networks

Internet Air customers

Internet Air uses an All‑Fi Hub and Smart Home Manager rather than assuming the older BGW interface. Open the hub settings or Smart Home Manager, look for Home Network > Wi‑Fi > Advanced Options, and inspect each wireless section for WPS. AT&T’s Internet Air self-install guide describes Smart Home Manager and All‑Fi equipment. If WPS is not exposed, use AT&T’s current help flow or support channel.

How to confirm WPS is disabled

  • Reopen the settings page and verify that WPS says Off or Disabled.
  • Check both 2.4 GHz and 5 GHz sections.
  • Existing devices remain connected or can reconnect with the normal Wi‑Fi password.
  • The SSID remains visible and both bands remain available unless you separately changed those settings.
  • On a spare WPS-capable device, a push-button pairing attempt fails rather than joining automatically.

The BGW320’s light indicates current pairing activity, failure, or an inactive state. An unlit indicator means WPS is not actively pairing at that moment; it does not by itself prove that WPS has been permanently disabled. Do not use the household’s only internet-dependent device for testing, and do not factory-reset the gateway because a WPS attempt fails.

What disabling WPS does not change

Setting What it controls Change it when disabling WPS?
WPS Push-button or PIN enrollment Yes, if unused
Wi‑Fi Operation Whether wireless radios broadcast No
SSID Network name No
WPA2/WPA3 Encryption and authentication Review separately
Device Access Code Gateway administration Protect separately
Remote management and UPnP Remote administration and automatic port mapping Review separately

If there is no WPS option

  1. Confirm the gateway model and whether a third-party router or mesh system is actually broadcasting your SSID.
  2. Use the local gateway page, not only Smart Home Manager; the app may expose fewer advanced controls.
  3. Check both radio sections and expand Advanced Options.
  4. Save any change, reopen the page, and check again.
  5. If firmware still provides no control, contact AT&T. Do not alter unrelated security settings or reset the gateway solely to remove WPS.

Some firmware may link WPS to hidden-SSID options. If the interface reports a conflict, disable WPS and save first, then configure the optional SSID setting. Hiding a network name is not a substitute for WPA encryption.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Common problems

Devices stopped connecting

Disabling WPS normally does not disconnect devices that use the Wi‑Fi password. Confirm the SSID and password, verify the appropriate band is enabled, reboot the device, and forget/re-add the network. An old device configured only through WPS may need normal password setup.

Rank #4
Sale
UeeVii WR3000K WiFi6 AX3000 WiFi Router
  • WiFi 6 with 6-Antenna Design: Equipped with WiFi 6 and a 6-antenna design, this gigabit router enhances signal coverage and data efficiency; The high-speed router supports 2.4G and 5.8G dual-band for stable, smooth connections anywhere in your home
  • Four-Sided Heat Dissipation Design: To ensure optimal cooling, the internet router uses a four-sided heat dissipation design; This design helps the gaming wifi router stay cool under high loads, extending its service life and ensuring stable connectivity
  • Versatile Use in Multiple Scenarios: This long range wifi router works well at home and with bridges, APs, and other equipment; It offers a reliable network solution for internet browsing, home entertainment, or office work
  • Comprehensive Network Security: The ethernet router provides multiple security features, including WPS, WPA/WPA2/WPA3 encryption, SSID hiding, guest network, and anti-DDOS protection, ensuring safe and secure internet use for you and your family
  • One-Click WPS & MESH Function: The network router supports one-click WPS for fast, secure wireless connections and MESH for easy network expansion, eliminating blind spots and covering your home in various scenarios

An AT&T extender will not pair

Older AT&T Smart Wi‑Fi Extenders have their own WPS button. AT&T’s product page says this extender is no longer available, although it lists compatibility with the 5268AC, BGW210, BGW320, and NVG599. Disabling gateway WPS can affect setup or re-pairing of an existing extender, and it does not automatically disable the extender’s own WPS function.

You are tempted to factory-reset

A reset can erase the Wi‑Fi name and password, port forwards, parental controls, firewall changes, static DHCP assignments, IP Passthrough, and device-specific settings. AT&T’s replacement guidance notes that custom settings for cameras, consoles, and similar equipment may need to be recreated. Reset only when AT&T directs you to and after recording your configuration.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Secure the rest of the network

After disabling unused WPS, follow the FTC’s broader recommendations:

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Use WPA3 Personal when the gateway and clients support it; otherwise use WPA2 Personal.
  • Replace default Wi‑Fi credentials with a long, unique passphrase.
  • Protect the Device Access Code and administrative login.
  • Allow AT&T’s normal gateway firmware updates.
  • Disable remote management and review UPnP and port-forwarding rules if you do not need them.
  • Use a guest network for visitors and untrusted smart-home devices.
  • Keep the gateway firewall enabled and secure cameras, printers, and IoT devices individually.
  • Recheck settings after a gateway replacement or major firmware update.

Frequently Asked Questions

Does disabling WPS turn off Wi‑Fi?

No. It disables push-button and PIN enrollment. The 2.4 GHz and 5 GHz radios, SSID, and normal password-based connections remain available.

Best Value
Sale
TP-Link Dual-Band BE3600 Wi-Fi 7 Router, Archer BE230
  • 𝐅𝐮𝐭𝐮𝐫𝐞-𝐏𝐫𝐨𝐨𝐟 𝐘𝐨𝐮𝐫 𝐇𝐨𝐦𝐞 𝐖𝐢𝐭𝐡 𝐖𝐢-𝐅𝐢 𝟕: Powered by Wi-Fi 7 technology, enjoy faster speeds with Multi-Link Operation, increased reliability with Multi-RUs, and more data capacity with 4K-QAM, delivering enhanced performance for all your devices.
  • 𝐁𝐄𝟑𝟔𝟎𝟎 𝐃𝐮𝐚𝐥-𝐁𝐚𝐧𝐝 𝐖𝐢-𝐅𝐢 𝟕 𝐑𝐨𝐮𝐭𝐞𝐫: Delivers up to 2882 Mbps (5 GHz), and 688 Mbps (2.4 GHz) speeds for 4K/8K streaming, AR/VR gaming & more. Dual-band routers do not support 6 GHz. Performance varies by conditions, distance, and obstacles like walls.
  • 𝐔𝐧𝐥𝐞𝐚𝐬𝐡 𝐌𝐮𝐥𝐭𝐢-𝐆𝐢𝐠 𝐒𝐩𝐞𝐞𝐝𝐬 𝐰𝐢𝐭𝐡 𝐃𝐮𝐚𝐥 𝟐.𝟓 𝐆𝐛𝐩𝐬 𝐏𝐨𝐫𝐭𝐬 𝐚𝐧𝐝 𝟑×𝟏𝐆𝐛𝐩𝐬 𝐋𝐀𝐍 𝐏𝐨𝐫𝐭𝐬: Maximize Gigabitplus internet with one 2.5G WAN/LAN port, one 2.5 Gbps LAN port, plus three additional 1 Gbps LAN ports. Break the 1G barrier for seamless, high-speed connectivity from the internet to multiple LAN devices for enhanced performance.
  • 𝐍𝐞𝐱𝐭-𝐆𝐞𝐧 𝟐.𝟎 𝐆𝐇𝐳 𝐐𝐮𝐚𝐝-𝐂𝐨𝐫𝐞 𝐏𝐫𝐨𝐜𝐞𝐬𝐬𝐨𝐫: Experience power and precision with a state-of-the-art processor that effortlessly manages high throughput. Eliminate lag and enjoy fast connections with minimal latency, even during heavy data transmissions.
  • 𝐂𝐨𝐯𝐞𝐫𝐚𝐠𝐞 𝐟𝐨𝐫 𝐄𝐯𝐞𝐫𝐲 𝐂𝐨𝐫𝐧𝐞𝐫 - Covers up to 2,000 sq. ft. for up to 60 devices at a time. 4 internal antennas and beamforming technology focus Wi-Fi signals toward hard-to-reach areas. Seamlessly connect phones, TVs, and gaming consoles.

Can I still connect new devices after turning WPS off?

Yes. Select the Wi‑Fi network on the device and enter the Wi‑Fi password. Only WPS-based pairing is removed.

Is WPS automatically dangerous?

No. Risk depends on the gateway’s implementation and firmware. Disabling an unused enrollment method reduces attack surface, but strong WPA security, passwords, updates, and a firewall remain important.

Do I need to disable WPS on my own router or mesh system?

Yes. If that device broadcasts your network, disable WPS there and on compatible mesh nodes or extenders. Changing the AT&T gateway alone may not affect it.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Why can’t I find WPS on my BGW320?

The control may be hidden or relocated by firmware, or another router may be providing Wi‑Fi. Confirm the model, check the local gateway page and both radio sections, then contact AT&T if no control is exposed.

The Bottom Line

Disable WPS when you do not use it, but do so on the device actually broadcasting your Wi‑Fi. Save the change for every applicable band, verify it after reopening the settings, and keep WPA encryption, unique credentials, updates, and firewall protection enabled.

Quick Recap

SaleBestseller No. 1
TP-Link AX1800 WiFi 6 Router (Archer AX21 V5)
TP-Link AX1800 WiFi 6 Router (Archer AX21 V5)
VPN SERVER: Archer AX21 Supports both Open VPN Server and PPTP VPN Server
$59.98
Bestseller No. 3
TP-Link AC1200 WiFi Router Dual Band Wireless Internet Router (Archer A54)
TP-Link AC1200 WiFi Router Dual Band Wireless Internet Router (Archer A54)
Supports IGMP Proxy/Snooping, Bridge and Tag VLAN to optimize IPTV streaming
$34.99
SaleBestseller No. 4

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.