Why the home network matters
Your router is the door between your household and the internet. Every phone, laptop, television, speaker and camera at home passes through it. If the router is poorly protected, someone nearby or someone on the internet may be able to watch traffic, use your connection or reach devices that were never meant to be exposed.
You do not need to be technical to improve this. A few principles cover most of the risk, and each one takes only a few minutes. Router screens vary widely between makers and internet providers, so this article describes what to look for instead of exact menus. The router’s manual, the label on the device, or your provider’s support page will show how to reach the settings on your model.
Two passwords, two jobs
A common source of confusion is that a router usually has two separate passwords.
The Wi-Fi password is the one you give to guests and enter on your devices. It controls who can join the wireless network.
The router admin password controls the settings page itself. Whoever has it can change how the network behaves, including how it connects to the internet.
Many routers ship with a default admin login that is printed on a sticker or is the same across a whole product line. Because default credentials are widely known or easy to look up, changing them is one of the most valuable steps. Choose a long, unique password, and store it in a password manager or somewhere safe at home. Also change the default network name if it reveals the router brand or your family name, since that gives away information for no benefit.
Use modern encryption and a strong Wi-Fi password
The wireless connection is encrypted so that other people cannot easily read what passes through the air. Look in the wireless settings for the security mode. Generally, choose the newest option your devices support, often labeled WPA3, or WPA2 if that is the best available. Avoid anything labeled open, WEP, or the original WPA, which are considered outdated and weak.
For the Wi-Fi password itself, length matters more than complexity. A passphrase made of several unrelated words is easier to type on a television remote and harder to guess than a short mix of symbols. Avoid names, addresses and phone numbers. Our guide on the passphrase method explains the idea in more detail.
If you gave the password to a contractor, a former roommate or a visitor who no longer needs it, changing it is a reasonable precaution. Expect to reconnect your devices afterward.
Keep the router updated
Routers run software, usually called firmware, and like any software it can contain flaws that are fixed in later versions. Many routers update themselves automatically; some require you to check in the settings or the maker’s app. Turn on automatic updates if the option exists, and look for an update every few months if not.
Be aware that routers do not last forever. If the manufacturer no longer provides updates for your model, or if it is many years old, consider replacing it. Your internet provider may offer a newer model, and for equipment you own, buying one from a maker that clearly publishes update support is a sensible approach. This follows the same logic as keeping any device updated: unpatched known flaws are an easy target.
Turn off features you do not use
Routers often include convenience features that increase exposure if left on without understanding. Look for the following in the settings, and turn them off unless you have a reason:
- Remote management or remote administration, which allows the settings page to be reached from the internet.
- WPS, a push-button or PIN connection method that has had known weaknesses.
- UPnP, if you do not need it for a specific game or application, since it lets devices open doors in your network automatically.
- File sharing or media server features you never set up.
If you are unsure what a setting does, leave it alone and search for the exact name along with your router model. Changing things blindly can cut off your own connection.
Use a guest network
Most modern routers can create a separate guest network. Visitors connect to it and can reach the internet, but not the printers, computers and shared folders on your main network. It is also a good home for smart home devices such as plugs, bulbs and cameras, which are often less carefully maintained than phones and laptops. If one of them is compromised, the rest of your network is better shielded. Give the guest network its own password, and make sure it is also using modern encryption.
Know what is connected
Many routers or their apps show a list of connected devices. Look at it occasionally. You should recognize most entries, though names can be cryptic. If something unfamiliar appears, check by temporarily switching off your own devices one at a time. An unknown device that stays can be a sign that someone else is using your connection, in which case changing the Wi-Fi password is the first step, and then reviewing the admin settings.
Also consider the devices you have connected yourself. Cameras, baby monitors and doorbells should have their own passwords changed from the default and be kept updated. This links to wider habits for protecting your devices, including those that do not look like computers.
These steps will not make a network impossible to attack, but they remove the most common weaknesses. When you travel or work away from home, remember that other networks are not under your control, which is where careful use of public Wi-Fi comes in.