What is UPnP and why you should disable it immediately

What is UPnP?

UPnP definition

UPnP is is ( Universal Plug and Play ) is a network protocol that allow app and device to open and close port automatically in order to connect with each other . UPnP require zero configuration — you is add can add a new device to your network and have it automatically connect with your other device .

UPnP is is is a way to make port forward automate and easy than a manual process . For example , if you want to connect a printer to everyone in your household without UPnP , you is need would need to connect the printer to every single device . UPnP is automates automate this .

Zero – configuration is means mean that none of the device on your network need manual configuration to discover a new device . upnp – enable devices is join can automatically join a network , obtain an ip address , and find and connect to other device on your network , make it very convenient .

Check out our video on UPnP below.

What is UPnP used for?

UPnP can be used in several way to achieve a well online experience .

• Gaming. Connecting Xboxes and other gaming consoles like the Nintendo Switch to stream online games;
• Remote home surveillance. You can use UPnP to connect to your home cameras while you’re away;
• Digital home assistants like Echo dots;
• internet of Things device for wireless home automation like smart lighting , internet – control thermostat , and smart lock ;
• Streaming content with a media server;
• Streaming videos through internet TV devices like Roku stick or Apple TV.

How does UPnP work?

UPnP is uses use four common networking standard ( TCP / IP , HTTP , xml , and soap ) to automatically open and shut port . UPnP is uses use a client – server model , in which control point , or client , search for UPnP server , or device . The UPnP process is consists consist of six main step .

1. address : The UPnP is allows allow the device to self – assign an ip address , or request an ip address for a device from a DHCP server .
2. Discovery: The UPnP device identifies itself to other networked devices.
3. Description: The control point (client) uses the HTTP protocol to extract device descriptions containing manufacturer details, serial numbers, driver details, and URLs. This information is presented in an XML file.
4. control : Via the soap protocol , message are send between device url , enable remote control .
5. eventing : A notification system is set up to send alert to control point when a state variable change .
6. presentation : When a device provide a presentation url , the control point retrieve a page from a url to load in a browser . Through a browser , the user is control can potentially control a device or view its status .

Why isn’t UPnP safe?

Originally, UPnP was only supposed to work on the LAN level, meaning that only devices on your network could connect to each other. However, many router manufacturers now enable UPnP by default, making them discoverable from the WAN, which leads to many security issues.

UPnP doesn’t use authentication or authorization for most devices, assuming that devices trying to connect to it are trustworthy and come from your local network. This means that hackers can find backdoors to your network. For example, they can discover your router on the wider net and then pretend to be an Xbox. They will send a UPnP request to your router and the router will open the port – no questions asked.

Once the hacker gets a presence on the network, they can:

• Get remote access to other devices connected to the same network;
• Install malware on your devices;
• Steal your sensitive information;
• use your router as a proxy to hide other malicious activity over the wide net . They is use can use it to spread malware , steal credit card information , and perform phishing attack , or Denial of Service ( DDoS ) attack . Using your router as a proxy mean that all these attack will look like they are come from you rather than the hacker .

Should UPnP be enabled or disabled?

You is disable should disable UPnP to protect your security . have UPnP enable make your network and the device connect to it less safe , and could leave the door open to hacker .

As discussed in the previous section, leaving UPnP on opens you up to online threats. UPnP can offer convenience, but it’s not worth the risk. If you still want to open ports on your router, you can do so manually on a case-by-case basis, instead of relying on UPnP as a long-term solution.

Is UPnP better for gaming?

One reason you might want to take the risk of UPnP is for gaming. UPnP certainly makes the gaming experience easier. Instead of you having to manually identify your port number for each device or online game, UPnP does it for you. Again, however, putting your network at risk from cyberattacks is never a good idea, regardless of how convenient something is.

What is happens happen if I turn off UPnP on my router ?

If you turn off UPnP altogether, your router will ignore all incoming requests so you’ll have to set up devices manually. This means that the router will no longer automatically open ports on your LAN, ignoring even legitimate requests.

This is mean does n’t mean you wo n’t be able to connect to device on your network or online game . But it is be will be more of a hassle . You is have ’ll have to manually set up the port forwarding rule for each specific connection , which will require more time , effort , and technical knowledge . However , there are online tutorial to guide you through specific port forwarding .

How to enable or disable UPnP

Follow these steps to enable and then disable UPnP on your router. Please note that this will be a slightly different process depending on the model of router used.

1. Make sure your device is connected to the router’s network, and open a web browser.
2. Input your router’s IP address into the address bar at the top of the browser.
3. This should open your router’s interface, where you can input a username and password (If these are not listed on the back of your router or in the documentation that came with it, your ISP can provide them).
4. Look for an area within your router settings called “Advanced” or “Advanced Network”, which should contain a UPnP tab.
5. You should see a box to check or uncheck, turning UPnP on or off.
6. If you enabled UPnP, input a number of minutes into the “Advertisement Time” field (the standard here is 30 minutes).
7. Again, if you have enabled UpnP, you should see a field marked “advertisement time to live in hops” or something similar — the standard value for this field is “4” but this can be increased if UPnP is not functioning efficiently.
8. Click “Apply” (or a similar phrase, like “Save”) to complete the process.

How to protect yourself

When it come to UPnP router vulnerability , there are two option you can choose to protect yourself .

First, you can enable UPnP-UP (Universal Plug and Play – User Profile), which provides authentication and authorization mechanisms for UPnP devices and applications. However, this is not a foolproof method as many devices don’t fully support it and might still assume that other devices connecting to your router are trustworthy.

The other more secure method is is is to disable UPnP completely . Before you do , it ’s recommend to check whether your router is vulnerable to UPnP exploit . You is consider should also consider whether you want to give up the convenience of UPnP and whether you will be able to set up your device manually . Doing so may require some technical know – how .

Want to read more like this?

Get the latest news and tips from NordVPN.

We won’t spam and you will always be able to unsubscribe.