How to Turn Off UPnP on Your Router

What UPnP does and why it matters

Universal Plug and Play (UPnP) is a networking feature that lets a device on your local network ask the router to open a port and forward incoming traffic to it. That is useful for game consoles, voice apps, and smart home hubs that need inbound connections without manual configuration. The same convenience is also the main reason to consider turning it off: a compromised device, or malware running on one, can use UPnP to open ports that would otherwise stay closed. On the public internet side, a router presents a single address; UPnP creates a mapping that tells the router where to send incoming connections. When no device needs that mapping, leaving the feature enabled is an open door that can be misused.

Disabling UPnP is one piece of a broader router security routine. It does not replace Wi-Fi encryption or a strong admin password, but it removes one automatic path for unwanted inbound traffic. Security standards such as WPA3 focus on authentication and encryption, while port mappings control which outside traffic is allowed into your network. The router is the boundary, so limiting automatic port openings is a sensible default. For a deeper look at the tradeoff, see UPnP security and router selection. You can still open a specific port when you need it, but you make that choice instead of letting any device on the LAN make it for you.

Find the UPnP settings page

Start from your router's admin interface. Open a browser, enter the router's IP address, and log in with the admin credentials. If you have a mesh system or app-managed router, the setting may be buried in a web portal rather than the mobile app. The exact menu name differs, but the UPnP toggle usually appears in an area labeled WAN, Internet, NAT, Routing, or Advanced Network. On some routers, the setting appears as a simple checkbox; on others, it is a drop-down menu with Enabled and Disabled options. Read the page carefully because some admin interfaces list UPnP under a collapsed advanced section.

If you are not sure how to get to the admin page, use the router's IP address and standard login steps. You may need the admin password that came with the router or one that you set during setup. If you have changed the password, keep it handy. If not, update it before you make other changes. The steps are described in how to find the router IP address and how to change the router admin password. Once you are logged in, use the router's own search box or Help section if you cannot find UPnP by browsing the menus.

• Open the router admin page through the router's IP address.
• Log in with the admin username and password; change them if you have not.
• Look under WAN, Internet, NAT, or Advanced settings for UPnP.
• Turn the switch off and save the change.

Turn off UPnP and save the change

The switch is usually labeled UPnP, Universal Plug and Play, or something like Allow UPnP to open ports. Turn it off, click Save or Apply, and wait for the router to restart if it asks. Some routers separate the master UPnP switch from an option that lists current mappings. Turn off the master switch to stop new mappings and clear the active table. On other models, you may need to reboot the router after saving the change. The reboot is normal; the router needs to reload its firewall and NAT services to drop all existing mappings.

A small number of routers let you disable only automatic inbound mapping while keeping other parts of UPnP enabled for local discovery. If you see a separate option for port mapping, choose the setting that prevents automatic port opening. You can leave local discovery enabled if your smart home devices use it, but that is a smaller risk than leaving the full port mapping feature on. The most conservative choice is to turn off the entire UPnP feature. If you later need a port open, you can add a manual forward in the same NAT section.

Use manual port forwarding when a device needs a port

If you disable UPnP and a game, camera, or home automation hub needs inbound traffic, create a manual port forward. Manual forwarding is more work, but you control exactly which ports are open and which device receives the traffic. Assign the device a permanent address first with a DHCP reservation, so the port forward still works after a reboot. A manual port forward requires three pieces of information: the external port, the internal IP address of the device, and the internal port that the device listens on. If the application expects a certain external port, use that port. If you are mapping a console, you may need to look up the port list for that console or game.

Manual port forwarding is not the same as UPnP. UPnP vs port forwarding shows the tradeoff: one is automatic, the other is deliberate. If you want the convenience without permanent open ports, a router firewall or guest network can provide another boundary, but only a port forward or dynamic mapping tells the router where to send inbound traffic. For most home users, a small number of manual forwards is easier to manage than an open UPnP policy. If you use a router that supports profile-based firewall rules, you can create separate rules for each device or service. That approach gives you visibility into what is open and why.

What can break after you disable UPnP

Disabling UPnP should not affect normal web browsing, streaming, or Wi-Fi connections. It may affect applications that expect to open inbound ports on their own. Online multiplayer on some consoles, voice chat, remote access tools, and smart home devices can stop working until you set up a manual forward or re-enable UPnP. When a device fails after the change, check whether it truly needs an inbound port rather than assuming the router is at fault. Some games use UPnP for matchmaking but can fall back to a less direct connection method. Other apps simply need a port open all the time. Voice and video calls may use UDP ports for media streams, so you may need to forward a range of UDP ports if the app does not have a workaround.

Before you re-enable UPnP, try to identify the exact port or service. The device manual, the app help page, or a network scan can tell you which ports are being requested. If you forward the wrong port, you may still see issues. If a specific port forward is not working, the problem is often the device address, the internal port, or the firewall rule. See port forwarding not working. Turning UPnP back on is always an option, but it should be a temporary fix rather than your first response. The goal is to keep your network closed by default and open ports only when a specific app needs them.

Check that UPnP is actually off

After saving the change, log back into the router and look for a status table that lists active UPnP mappings. Many routers show the current mappings in the same section as the UPnP toggle. If the table is empty and the master switch is off, the feature is disabled. If the setting does not stick after a reboot, check whether you are using the router app or the web interface and whether the router has a separate UPnP setting under both LAN and WAN menus.

You can also check from the client side. On a computer, a UPnP discovery tool can list active mappings if any remain. This is not a magic check, but it can confirm that the router is no longer accepting automatic port mapping requests. If the tool still receives responses, the router may have a second UPnP service that needs to be disabled. In that case, update the firmware first, then look for a service name or daemon setting. A router that keeps resetting this setting may be running old firmware, so review the router firmware update guide.

Keep the router firmware current after disabling UPnP

Changing the UPnP setting is one step, but the router's security posture depends on more than that single toggle. Keep the firmware up to date, use WPA3 or the strongest Wi-Fi security your devices support, and manage the admin password carefully. Wi-Fi security features such as WPA3 and Protected Management Frames are designed to protect management traffic from eavesdropping and forgery. A router with current firmware is more likely to handle NAT, firewall, and VPN features correctly, and less likely to have known vulnerabilities that could be exploited from the LAN side.

Government-backed guidance also encourages limiting exposure and keeping software patched. Both the National Institute of Standards and Technology cybersecurity resources and its small business cybersecurity materials describe practical steps for protecting a network, including keeping devices up to date and reducing unnecessary access points. The same principle applies to UPnP: if a service is not necessary, do not leave it enabled. A router with UPnP disabled is still fully usable for browsing, streaming, and normal Wi-Fi traffic; you are simply closing one potential pathway that you do not need most of the time.

What to pick for your use

Questions

Is it safe to turn off UPnP?

Yes, it is a normal router setting. Disabling it stops automatic port mapping, so outside traffic cannot request a path to a device on your LAN. You can still open ports manually when you need them. The router remains fully functional for everyday browsing, streaming, and Wi-Fi use.

Will turning off UPnP slow down my internet?

No, it should not affect throughput or latency. Wi-Fi speed and coverage are determined by the router's radios, bands, and connection type, not by whether UPnP is enabled. You may notice that some applications cannot connect until you add a port forward, but that is not a speed change.

What if I cannot find the UPnP setting?

Try the full web admin page rather than the mobile app. Search your router manual for UPnP or Universal Plug and Play. If the setting is hidden, update the firmware or consider a router that exposes advanced NAT controls. Some app-managed systems hide it under a security or advanced networking menu.

Do I need to reboot after disabling UPnP?

Often yes, because many routers apply the change only after a restart. The page will usually prompt you. A reboot clears existing mappings on most models. If the setting appears to be off but you still see active mappings, reboot the router and check again.

If disabling UPnP breaks a game, should I turn it back on?

Before re-enabling, try a manual port forward. If you must turn UPnP back on, leave it off until you are using that device and disable it again later. The goal is to avoid an unnecessary open port when nothing needs it. A manual forward gives you the same result with more control.