Universal Plug and Play (UPnP) is the feature on a device that allows it to connect to your network and other devices without authentication. A variety of Internet of Things devices come equipped with this feature, including your wireless router/access point, printer, and Bluetooth speaker.

UPnP makes setting up a new device very convenient. However, leaving it enabled means giving up control that is important to your network security. A device with UPnP enabled is more vulnerable to being hacked by an outsider. Once in, a bad actor can do things like install malware on the device or rope it into a botnet.

Leaving UPnP enabled at your router/access point leaves all the devices that connect to your network similarly vulnerable. This makes disabling UPnP particularly important for routers and wireless access points.

Disabling UPnP differs by device and manufacturer. On routers, the option is often under advanced settings. You can find device-specific instructions in your user manual or by searching online for “Disable UPnP for” and then your device’s brand and model.

Disabling UPnP on a wireless router/access point.

1. Locate your router's IP address, username, and password.

Note: You or your tech guy should have changed these from defaults when setting up your router, so you should have them stored in a safe place like a password manager. If not, the defaults are likely located either on a sticker on the device itself or on materials provided by the manufacturer.

2. Open a web browser on a connected device.

3. Put the IP address into the url field at the top of the browser.

4. Sign in with your current username and password.

5. Navigate to the advanced settings, and NAT forwarding.

6. Disable Universal Plug and Play. (In whatever format the setting appears.)

Want to know more?

Get more details from UpGuard’s original post.