Usually when it's done, the WPA passphrase/password is listed immediately below the WPS PIN.

Any idea what it means when it's absent from the results?

I also tried entering the PIN directly, using the -p(--pin=) flags to no avail. Here's what it looks like:


FYI: I'm using the (green) Alfa AWUS036NH; with which I've had much success in the past. It uses the Ralink RT3070 chipset. AWUS036NH


This usually happens if the router has the PBC (Push Button Connect) activated. The wps pin is the correct but then you can't get the password. So you'll need to push physically the button on router.

Sometimes this behavior can be because a bad signal. You can try closer to the AP.

Other times it depends of the compatibility of your chipsed and the software. For example, if you have a Ralink chipset on your wireless card, Reaver doesn't work very well. If this is your case you can use the alternative to reaver (bully).


Another idea... Did you tried using -N (--no-nacks) parameter?


I found this, maybe it can help you: https://gitlab.com/billhibadb/reaver-wps/issues/203

  • I typically do use a Ralink chipset. I've had a lot of success with it in the past. Can you provide any evidence of this? I don't not believe you; but would like to be thorough. Thanks for writing in. – voices Aug 24 '17 at 23:40
  • This is only my experience... ralink+reaver=problems . Try bully!!!! you'll success with ralink! – OscarAkaElvis Aug 24 '17 at 23:59
  • Yes, in this case the -N (--no-nacks) parameter was required to succeed. – voices Aug 25 '17 at 4:23
  • Nope. That's purely an incidental comment. I used the --no-nacks method as a result of some trial & error when I noticed the AP wouldn't play ball without it. That was at least 2-3 weeks ago, before I asked the question. All up, (including AP lockouts) it took over 600,000 seconds (about 7 days) to crack the WPS PIN. The WPS PIN was not accompanied by a WPA(2) passcode. It's my first time encountering this aberrant behaviour. – voices Aug 26 '17 at 1:57
  • I'm based on my own experience. I experienced same behavior like you (only pin cracked, not password) using reaver and using bully I got the password. Curiously I have the exactly same Alfa and Ralink chipset. So, not sure how to demonstrate it to you. I'll google to try to find something... but in the mean time you can try bully. Believe me, it worked. I think you have nothing to lose trying. – OscarAkaElvis Aug 26 '17 at 10:37

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.