> For the complete documentation index, see [llms.txt](https://documentation.hak5.org/wifi-pineapple-pager/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://documentation.hak5.org/wifi-pineapple-pager/wifi-pineapple-commands/deauth_client.md).

# DEAUTH\_CLIENT

`DEAUTH_CLIENT` Attempt to deauthenticate WiFi clients by sending spoofed deauthentication and disassociation packets

### When to use it <a href="#when-to-use-it" id="when-to-use-it"></a>

Use `DEAUTH_CLIENT` as part of an engagement when attempting to redirect clients to a Pineapple access point or to force a reassociation when harvesting WPA handshakes.

#### Syntax <a href="#syntax" id="syntax"></a>

```none
DEAUTH_CLIENT [bssid] [target] [channel]
```

**bssid&#x20;*****required***

BSSID (MAC address) of the access point the client is connected to, in the standard `aa:bb:cc:dd:ee:ff` format.

**target&#x20;*****required***

MAC address of target client (or `FF:FF:FF:FF:FF:FF` for all clients) in the standard `aa:bb:cc:dd:ee:ff` format.

**channel&#x20;*****required***

WiFi channel to send disconnect packets on.

### Results <a href="#results" id="results"></a>

`DEAUTH_CLIENT` returns immediately. In the background, the PineAP system will transmit the disassociation and deauthentication packets.

### Examples <a href="#examples" id="examples"></a>

```bash
DEAUTH_CLIENT 00:AA:BB:CC:DD:EE 00:DE:AD:BE:EF:44 6
```

### Limitations  <a href="#limitations" id="limitations"></a>

`DEAUTH_CLIENT` can be used on 2.4GHz channels, and on 5GHz channels which **are not DFS** channels. **DFS** channels have stronger regulatory requirements which prohibit transmission. The WiFi standard requires that *all* networks on 6GHz utilize WPA3 features, such as Protected Management Frames, which prevent injected deauthentication packets on 6GHz networks.

Networks which utilize Protected Management Frames (PMF) or the 802.11w standard will not be susceptible to injected disconnection packets. All networks utilizing WPA3 also enable Protected Management Frames.

Some clients ignore disconnection attempts deliberately regardless of the network type or channel.

{% hint style="warning" %}
Be sure to only trigger client deauthentication against networks that are in the scope of your engagement!\
\
Deauthenticating clients from networks which aren’t yours and which you haven’t been given permission to test isn’t only a jerk move, it may be illegal in some jurisdictions. Know the laws of your region!
{% endhint %}