Unauthenticated pairing is a Bluetooth bonding mode that creates trust without strong user verification, such as passkey entry, numeric comparison, or another authenticated confirmation. In practice, a device may accept a new peer as trusted even when the user did not explicitly approve the bond. This is weaker than authenticated pairing because it reduces protection against nearby attackers and man-in-the-middle abuse.
In cyber security, the risk is persistence: once an attacker becomes a trusted Bluetooth peer, they may reconnect later as if they were legitimate. That can disrupt audio devices, expose control functions, or affect microphone routing on headsets and earbuds. Defenders look for authenticated pairing requirements, restricted pairing windows, and firmware that blocks silent bonding. On the attack side, unauthenticated pairing is useful when proximity is enough to gain trust without needing the owner’s approval.