Should UPnP Be On Or Off?

Disabling UPnP is something you should do if preventing malware from being able to forward ports is a critical concern of yours. UPnP does not need any kind of authentication from the user in order to function properly. Because any programme running on your computer has the ability to ask the router to forward a port via UPnP, malicious software like the ones described above may exploit this feature.