Securing Your Home Wi-Fi & Router
Your router connects every device in your home, including phones, laptops, cameras, TVs and the kids’ tablets, to the internet. An unsecured router lets strangers use your connection, snoop on devices, or take over your network. Most fixes take about 15 minutes.
- Home & family
- Home offices
Set-up checklist
- Change the admin password for the router’s settings page from the default printed on the label
- Use WPA3 encryption, or WPA2 if your devices don’t support WPA3. Never use WEP or an open network
- Set a strong Wi-Fi password (a long passphrase). See Strong Passwords
- Update the router’s firmware, and turn on automatic updates if available
- Turn off WPS (the push-button or PIN pairing feature), which can be attacked
- Turn off remote management unless you truly need it
- Rename the network to something that doesn’t identify you or your address
Use a guest network
Most routers can create a separate guest network. Use it for visitors and for “smart” devices like cameras, doorbells, speakers and TVs, so a weak device can’t easily reach your computers and phones.
Old routers
Routers that no longer get security updates from the manufacturer (often after 5 or more years) should be replaced. Internet providers sometimes supply routers; ask yours whether it’s still updated.
Check who’s connected
The router’s app or settings page lists connected devices. Look for ones you don’t recognize, and change the Wi-Fi password if needed (then reconnect your own devices).
Home offices
- If you work from home or run a small business from home, keep work devices updated and use your employer’s VPN if provided.
- Don’t let family members use work laptops.
- Consider a separate network for business devices.
See Cybersecurity for Small Contractors.
Standards & references
Last updated: