By the end of this guide, your home router will have its own admin password, up-to-date software, strong Wi-Fi security, and none of the risky features attackers look for switched on.
Who it's for
Anyone with a home or home-office Wi-Fi router or mesh system, including one supplied by your internet provider. You'll need about 20 minutes and the router's admin login, usually in its app or on a web page such as 192.168.0.1 or 192.168.1.1; the address is often printed on a label on the router.
If your internet provider manages the router for you, some settings may be locked. Do what you can, and ask them about the rest.
Steps
-
Change the admin password
The router's admin password (the one for its settings, not the Wi-Fi password) should not be the one printed on the label or in the manual. Change it to a long, unique password and save it in your password manager. If you manage the router through an app, turn on two-step sign-in for that app's account.
-
Update the software, and keep it updating
Find the firmware or software update section, install any update, and turn on automatic updates if offered. If the router hasn't had an update in years, or the manufacturer lists it as end-of-life, plan to replace it: it will never get fixes for new problems.
-
Use strong Wi-Fi security
Set the Wi-Fi security to WPA3, or WPA2/WPA3 if some older devices can't connect, and never "open", WEP or WPA. Use a long Wi-Fi password. If the current one has been shared with lots of people over the years, change it, and reconnect your devices.
-
Turn off the risky extras
Look for and switch off:
- WPS (the push-button or PIN connection feature), which can be abused to get onto your Wi-Fi.
- Remote management (or "remote administration"), which lets the router's settings page be reached from the internet.
- UPnP, which lets devices open holes in your router by themselves. If a game console or app stops working, you can turn it back on knowingly.
Also look at the list of port forwards and remove any you don't recognise.
-
Give visitors and gadgets their own network
Turn on the guest network for visitors, with its own password and no access to your main network. Smart TVs, cameras and other gadgets belong there too: see Put your smart TV, cameras and thermostat on their own Wi-Fi.
-
Check what's connected
Open the list of connected devices and make sure you recognise everything. Anything you can't identify after a little detective work is a reason to change the Wi-Fi password.
Check it worked
Log out of the router and back in with the new admin password. In the settings, confirm the firmware shows as up to date, the Wi-Fi security says WPA3 or WPA2/WPA3, and WPS, remote management and UPnP are off. Connect a phone to the guest network and confirm your main devices don't appear from there, for example that you can't see your computer or printer. Finally, check that everything at home still works.
Common mistakes
- Mixing up the two passwords. The Wi-Fi password lets devices join; the admin password controls the router itself. Both matter, and they should be different.
- Securing only one of two routers. Many homes have the internet provider's box plus their own router or mesh system. Check both.
- Writing the new password on the router. Anyone visiting can read the label. Use your password manager.
- Keeping an end-of-life router. No settings change fixes a device that no longer gets security updates.
- Turning everything off and stopping there. If something breaks, turn one setting back on deliberately, rather than resetting the router to its factory settings.
Want it checked or set up for you?
ISMC can review your home or home-office network, set up the router and Wi-Fi properly, and separate your work devices from everything else.
Request a consultation