Your router is the front door to every device in your home — and it probably still has the settings it shipped with. This checklist takes about an hour, needs no special skills, and covers any router brand.
How do I even get into my router?
Type your router’s address into a browser — commonly 192.168.1.1 or 192.168.0.1 (it’s printed on the router’s sticker along with the default login). Modern routers often have an app instead. That sticker password is exactly what we’re about to retire.
The 12-point checklist
- Change the admin password — the one that controls the router itself. Default admin passwords are in public databases.
- Change the Wi-Fi network password to a long passphrase (four random words beats P@ssw0rd1).
- Use WPA3 encryption (or WPA2 if that’s the maximum). Never WEP or “open”.
- Rename the network (SSID) so it doesn’t advertise the router model or your ISP’s default naming.
- Update the router firmware — the most skipped security patch in any home. Enable auto-update if offered.
- Turn off WPS (the push-button pairing) — its PIN mode is a known weakness.
- Disable remote management from the internet unless you genuinely use it.
- Set up the guest network for visitors — and put smart-home gadgets (TVs, cameras, plugs) there too, isolated from your laptops and phones.
- Turn off UPnP if you don’t game or host services — it lets devices open doors in your firewall silently.
- Check the connected-devices list and evict anything you can’t identify.
- Change the DNS to a filtering resolver (family/malware-blocking options exist from several providers) for network-wide protection.
- Replace retired routers: a router that stopped receiving updates years ago is a permanent vulnerability, whatever settings you pick.
What about the devices on the network?
The network is half the job: keep phones/computers auto-updating, give smart devices unique passwords, and delete apps and gadgets you no longer use. One compromised cheap camera can scan your whole network — hence the guest-network trick above.
How would I know if someone’s on my Wi-Fi?
Unknown devices in the router’s client list, sudden slowdowns at odd hours, or settings changed that you didn’t change. Response: update firmware, change both passwords, reboot — that evicts everyone and closes the door behind them.
FAQ
Should I hide my SSID?
It adds hassle, not security — hidden networks are trivially visible to scanning tools. A strong passphrase and WPA3 matter; hiding doesn’t.
Is public Wi-Fi still dangerous?
HTTPS everywhere made it far safer than its reputation, but avoid banking on it, never install “hotspot login” apps, and prefer your phone’s hotspot for sensitive work.
Do I need a VPN at home?
Not for security on your own network — a VPN’s home benefits are privacy from your ISP and location shifting. It does not replace any item on this checklist.
