It still works offline meaning that the decryption can always be replicated without limits to brute-force the PIN. While Bitwarden tries its best to make it slow to crack such a PIN, there are only ...

It can be used against Access Points that do not follow the WPS checksum on the last digit of the PIN. For example: D-Link used 22222222 as a default PIN in some devices. It is not a "legitimate" WPS ...