Why You Should Disable Bluetooth on Linux (and How to Do It)

All the Ways to Disable Bluetooth for Good

Why Bluetooth Is a Security Risk

Despite its widespread use, Bluetooth has a long history of security vulnerabilities. Attack vectors like BlueBorne, KNOB (Key Negotiation of Bluetooth), and BIAS (Bluetooth Impersonation Attacks) have demonstrated that Bluetooth can be exploited to:

Eavesdrop on conversations or data being transmitted between paired devices
Inject malicious code into a system by exploiting unpatched vulnerabilities
Track users through Bluetooth MAC address fingerprinting, even when the device is not actively connected

The real danger lies in the always-on nature of Bluetooth. Many users leave it enabled at all times, unknowingly exposing their devices to passive scans or targeted attacks — even when idle or unpaired.

Bluetooth in Linux: More Control, More Responsibility

Linux distributions give users more granular control over hardware and system-level services — but that also means you’re responsible for hardening your system.

If you’re not actively using Bluetooth on your machine, it’s not just safe — it’s wise to disable it.

How to Disable Bluetooth in Linux Safely

Here are several effective ways to disable Bluetooth on most Linux distributions:

1. Stop the Bluetooth Service Temporarily

sudo systemctl stop bluetooth

This disables Bluetooth for the current session.

2. Disable the Bluetooth Service Permanently

sudo systemctl disable bluetooth

This prevents the Bluetooth service from starting at boot.

3. Mask the Service (Hard Block)

Masking completely blocks the service from being started manually or by other applications:

sudo systemctl mask bluetooth

4. Block Bluetooth Hardware with rfkill

This disables the Bluetooth radio at the kernel level:

sudo rfkill block bluetooth

To unblock it if needed:

sudo rfkill unblock bluetooth

Check status:

rfkill list bluetooth

5. Extra Step: Automatically Block Bluetooth on Boot

Some Linux systems re-enable Bluetooth after every reboot. Let’s create a small shell script that uses rfkill to block Bluetooth on boot.

1: Create a Shell Script

Open your terminal and run:

sudo nano /usr/local/bin/block-bluetooth.sh

Paste in the following:

#!/bin/bash
rfkill block bluetooth

Save and exit (Ctrl+O, Enter, Ctrl+X), then make it executable:

sudo chmod +x /usr/local/bin/block-bluetooth.sh

2: Create a systemd Service

To ensure your script runs at startup, create a new systemd unit.

sudo nano /etc/systemd/system/block-bluetooth.service

Add the following content:

[Unit]
Description=Block Bluetooth at Startup
After=multi-user.target

[Service]
Type=oneshot
ExecStart=/usr/local/bin/block-bluetooth.sh
RemainAfterExit=yes

[Install]
WantedBy=multi-user.target

Save and exit.

3: Enable the Service

Now, enable the systemd service so it runs at every boot:

sudo systemctl enable block-bluetooth.service

You can also test it without rebooting:

sudo systemctl start block-bluetooth.service
rfkill list bluetooth

You should now see:

Soft blocked: yes

Success!

What about Virtual Machines? Can I also block it at hypervisor level too?

In most cases, Bluetooth is not enabled by default in virtual machines (VMs) when you load a Linux guest OS. Virtualization platforms like VirtualBox, VMware, and QEMU typically don’t pass Bluetooth devices through to the guest OS unless specifically configured to do so.

Regardless, it is generally advised to keep Bluetooth disabled also in the Operating System (As described above) to reduce the attack surface. Additionally, keeping Bluetooth off can help conserve system resources, ensuring better performance in your virtualized environment.

Advanced: Disable Bluetooth in BIOS/UEFI

For maximum security, consider disabling Bluetooth at the hardware level.

Here’s how:

Reboot your computer
Enter the BIOS/UEFI (usually by pressing Del, F2, or Esc during boot). If these don’t work, search online for your manufacturer’s name to find the correct key.
Look under tabs like Integrated Peripherals or Wireless Configuration
Set Bluetooth to Disabled
Save and exit

Some BIOS versions may not expose Bluetooth controls, especially on desktops or older systems.

If available, disabling Bluetooth here removes it entirely from the system, preventing any OS or firmware from reactivating it.

Conclusion: Security Through Minimalism

Disabling Bluetooth may seem like a small step, but in cybersecurity, small changes often have big impacts. For Linux users, reducing wireless exposure is a practical, low-effort way to harden your system.

Unless you’re actively using it, Bluetooth should remain off , not just for battery or performance, but as a critical layer of your digital hygiene.