Home

Forums

Stories

Knowledge Base

Home Network Community > Wi-Fi Routers > How to disable qr-code sharing in wifi wpa2 connection?

< Wi-Fi Routers

How to disable qr-code sharing in wifi wpa2 connection?

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

How to disable qr-code sharing in wifi wpa2 connection?

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

ls_milkyway

2023-04-11 13:10:31 - last edited 2023-04-27 19:21:04

Posts: 6

Helpful: 22

Solutions: 1

Stories: 0

Registered: 2021-03-25

How to disable qr-code sharing in wifi wpa2 connection?

2023-04-11 13:10:31 - last edited 2023-04-27 19:21:04

Model: Archer A7

Hardware Version: V5

Firmware Version: 1.2.1 Build 20220714 rel.75573(4555)

I am trying to un-select & save the "qr-code" option in:

Advance->Wireless->Wireless Settings->2.4GHZ OR 5GHZ ->Sharing Network.....but it gets automatically selected again after logout or exploring other settings??

FYR:

1) WPS function is disabled.

2) Version: WPA2-PSK

3) Encryption: AES

4) Mode: 802.11bgn mixed.

This is causing lot of trouble even after enabling mac-filtering as someone spoofs the whitelisted MAC and scans qr-code from another member's phone.

Please help I do not want to implement Radius and related settings for my SOHO..

1 Accepted Solution

ls_milkyway

LV1

2023-04-15 14:53:49 - last edited 2023-04-27 19:21:04

Posts: 6

Helpful: 22

Solutions: 1

Stories: 0

Registered: 2021-03-25

Re:How to disable qr-code sharing in wifi wpa2 connection?-Solution

2023-04-15 14:53:49 - last edited 2023-04-27 19:21:04

@woozle

Hmmm, I mentioned using WEP because:I watched some YouTube videos recommending it......but never tried it, as WEP is certainly a big no as far as security is concerned.

Video 1

Video 2

Anyway, the best thing that I have done (in regard to the options available on my router) is:

1) Hide main SSIDs for both 2.4 & 5 GHZ networks.

2) Rename guest SSID as main SSIDs (enabling both 2.4 & 5 GHZ)....thereby making others believe that its the main SSID.

3) Divided MACs of all employees into 2 category: faithful and rogue.....all faithfuls join main hidden SSID & others join as guests with settings:

a) Guests cannot see each other &

b) guest cannot access main network.

Keep on changing guest SSiD passwords daily (that's 2-3 employees changing password daily on their phone).

4) Enabled MAC filtering

Not permanent solution but that the best I could do.

Regarding your views about admin account ...well that's true but we have rigorous policies based upon both Microsoft Baseline & US DOD and we never allow any ADMIN logins.

Further I guess RADIUS inbuilt in the router OS plus implementing WPA2-ENTERPRISE is the only perfect solution OR providing phones to the employees with some ANDROID APP to disable qr-code in them.

Recommended Solution

4 Reply

woozle

LV5

2023-04-11 17:47:29

Posts: 2891

Helpful: 1922

Solutions: 517

Stories: 0

Registered: 2020-05-01

Re:How to disable qr-code sharing in wifi wpa2 connection?

2023-04-11 17:47:29

@ls_milkyway

Hi,

The QR code available for scanning on the phone is being generated independently by the phone itself. This feature doesn't depend on the Wi-Fi router. Even if the Archer A7 didn't have its own QR code generator (i.e. "Sharing Network" feature) it would still be the same.

So, if your friends leave their smartphones lying around unattended with the screen unlocked, then there is nothing stopping another person to look up the Wi-Fi password (or scan the QR code) and also the MAC address from one of those smartphones.

ls_milkyway

LV1

2023-04-12 07:48:15

Posts: 6

Helpful: 22

Solutions: 1

Stories: 0

Registered: 2021-03-25

Re:How to disable qr-code sharing in wifi wpa2 connection?

2023-04-12 07:48:15

@woozle

Are you pretty sure that the sharing feature is phone dependent? I have seen some Youtube videos regarding this matter ....but they are suggesting to use WEP encryption ..then android phones will not display qr-code sharing option...which is sort of patching 1 problem but creating another loophole.

Yeah the situation about unlocked phones lying around is true but there can be different SOHO scenarios ...for example a fired employee taking help from an insider etc.

The irony is we cannot disallow phones and other gadgets in the office.

woozle

LV5

2023-04-12 19:41:25 - last edited 2023-04-12 19:49:46

Posts: 2891

Helpful: 1922

Solutions: 517

Stories: 0

Registered: 2020-05-01

Re:How to disable qr-code sharing in wifi wpa2 connection?

2023-04-12 19:41:25 - last edited 2023-04-12 19:49:46

@ls_milkyway

Ok. Your comment made me wondering about that WEP encryption.

So I searched through my collection of routers until I finally found one that is old enough to still support WEP and set it up accordingly.

Then I connected my smartphone (Android 13) to the router's Wi-Fi. With screen lock disabled it revealed the Wi-Fi password right away after tapping on "Share" and also showed a QR code (see the screenshots below). With screen lock enabled the phone will actually request the user to authenticate themself before revealing the password and QR code.

But anyway, the behavior with this particular phone is no different than if the Wi-Fi security was WPA, WPA2 or WPA3.

And even if some phones don't generate a QR code, the Wi-Fi name and Wi-Fi password is all a person needs to connect to the Wi-Fi. A computer running Windows 10 that is logged in with the administrator account and currently connected to the Wi-Fi network will also reveal the Wi-Fi password with just a few clicks.

ls_milkyway

LV1

2023-04-15 14:53:49 - last edited 2023-04-27 19:21:04

Posts: 6

Helpful: 22

Solutions: 1

Stories: 0

Registered: 2021-03-25

Re:How to disable qr-code sharing in wifi wpa2 connection?-Solution

2023-04-15 14:53:49 - last edited 2023-04-27 19:21:04

@woozle

Hmmm, I mentioned using WEP because:I watched some YouTube videos recommending it......but never tried it, as WEP is certainly a big no as far as security is concerned.

Video 1

Video 2

Anyway, the best thing that I have done (in regard to the options available on my router) is:

1) Hide main SSIDs for both 2.4 & 5 GHZ networks.

2) Rename guest SSID as main SSIDs (enabling both 2.4 & 5 GHZ)....thereby making others believe that its the main SSID.

3) Divided MACs of all employees into 2 category: faithful and rogue.....all faithfuls join main hidden SSID & others join as guests with settings:

a) Guests cannot see each other &

b) guest cannot access main network.

Keep on changing guest SSiD passwords daily (that's 2-3 employees changing password daily on their phone).

4) Enabled MAC filtering

Not permanent solution but that the best I could do.

Regarding your views about admin account ...well that's true but we have rigorous policies based upon both Microsoft Baseline & US DOD and we never allow any ADMIN logins.

Further I guess RADIUS inbuilt in the router OS plus implementing WPA2-ENTERPRISE is the only perfect solution OR providing phones to the employees with some ANDROID APP to disable qr-code in them.

How to disable qr-code sharing in wifi wpa2 connection?

How to disable qr-code sharing in wifi wpa2 connection?

Information

Voters 0

Tags