Your home Wi-Fi router is the gateway to every device in your home — computers, phones, smart TVs, security cameras, and IoT devices. An unsecured router can give attackers access to your entire home network, allow neighbours to use your internet connection, and expose your personal data. The good news is that securing your router takes about 20 minutes and requires no technical expertise.

Step 1: Change the Default Router Password

Every router comes with a default admin username and password — usually something like “admin / admin” or “admin / password”. These defaults are publicly known and are the first thing attackers try. Log into your router’s admin panel (usually by typing 192.168.1.1 or 192.168.0.1 in your browser) and change the admin password to something long and unique. Store it in your password manager.

Step 2: Use WPA3 or WPA2 Encryption

In your router’s wireless settings, check which security protocol is active. You should be using WPA3 if your router supports it, or WPA2-AES as a minimum. Avoid WEP (completely broken) and WPA (significantly outdated). The encryption standard determines how hard it is for someone to break into your Wi-Fi — older standards are trivially crackable with modern tools.

Step 3: Change Your Wi-Fi Network Name (SSID)

Your network name (SSID) should not reveal your router brand (which tells attackers which vulnerabilities to exploit) or your address. Change it from something like “NETGEAR-5G-A2B3” to something generic like “HomeNetwork” or something completely unrelated to your identity. Do not use your name, address, or apartment number.

Step 4: Use a Strong Wi-Fi Password

Your Wi-Fi password should be at least 16 characters long and include a mix of letters, numbers, and symbols. A memorable passphrase like “PurpleCoffee!Mountain42” is both secure and easier to share with guests than a random string of characters. Change it if you have shared it with many people over the years.

Step 5: Keep Your Router Firmware Updated

Router manufacturers regularly release firmware updates that patch security vulnerabilities. Log into your router’s admin panel and check for firmware updates. Many modern routers have automatic update options — enable this if available. An unpatched router is a known risk; many major network attacks exploit vulnerabilities in outdated router firmware.

Step 6: Disable WPS

WPS (Wi-Fi Protected Setup) is a feature that lets devices join your network by pressing a button or entering an 8-digit PIN. The PIN method has a known security flaw that makes it possible to crack your Wi-Fi password. Disable WPS in your router settings — you do not need it, and it is a significant vulnerability.

Step 7: Enable Your Router’s Firewall

Most routers have a built-in firewall that should already be enabled, but it is worth checking. Look for “Firewall” or “SPI Firewall” in your router settings and ensure it is turned on. The firewall filters incoming traffic and blocks unsolicited connection attempts from the internet.

Step 8: Create a Guest Network

When visitors come over and want Wi-Fi, do not give them access to your main network — create a separate guest network. This keeps their devices isolated from your personal computers, NAS drives, and smart home devices. Most modern routers make creating a guest network straightforward in the admin panel.

Step 9: Check Connected Devices

Regularly review the list of devices connected to your network in your router’s admin panel. If you see an unknown device, someone may be using your connection without permission. Change your Wi-Fi password immediately and consider enabling MAC address filtering (though this is not a strong security measure on its own).

Advanced: Consider a DNS Security Service

Configure your router to use a security-focused DNS service like Cloudflare (1.1.1.1), Google (8.8.8.8), or Quad9 (9.9.9.9). Quad9 in particular blocks access to known malicious domains, providing an additional layer of protection for every device on your network without requiring any software installation.

Final Thoughts

Work through these steps from the top. Even completing the first four — changing the admin password, using strong encryption, and setting a strong Wi-Fi password — will eliminate the most common vulnerabilities. A secure home network is the foundation of your entire household’s digital security.