Your home Wi-Fi connects much more than a laptop: phones, televisions, cameras and smart devices all depend on the same router. A few careful changes can make that network safer without buying extra security software.
Use these five checks in order. Menu names vary between routers, so use your provider's app or the manual for your exact model. If someone else manages the network, ask them before changing anything.
1. Protect the router's administrator account
The router administrator password is different from the password you use to join Wi-Fi. It controls the settings of the whole network, so leaving a default administrator password in place is risky.
Open the router's official app or use the local management address shown in its manual. Change any default administrator password to a unique, long password and keep it in a password manager. Do not enter router credentials into a website found through an advertisement.
- Disable administration from the internet, often called remote management, unless you genuinely need it. Provider-managed routers may handle this differently; ask your provider if you are unsure.
- Do not change connection, DNS or firewall settings simply because a tutorial recommends them. Record your original settings before making changes.
2. Use modern Wi-Fi security and a unique password
In wireless security settings, choose WPA3-Personal if your devices support it. WPA2-Personal with AES is a reasonable fallback for older devices. Avoid WEP, original WPA and an open network with no password.
Use a long, unique Wi-Fi password: for example, a phrase made from several unrelated words. Do not use your address, phone number or a password you also use for email. After changing it, you will need to reconnect your devices.
- If older devices cannot join WPA3, check whether the router offers WPA2/WPA3 compatibility mode rather than removing security altogether.
- Choose a network name that does not reveal your full name, home address or router model. Hiding the network name is not a substitute for encryption.
3. Keep the router updated
Router updates fix security weaknesses as well as connection problems. Look for Firmware Update or Software Update in the official app or settings and enable automatic updates if available.
If your internet provider supplied the router, it may install updates automatically. Check with the provider rather than downloading firmware from an unrelated website. Never unplug a router while its update is installing.
- For a router you own, use firmware for the exact model and hardware revision from the manufacturer's official support page.
- If the manufacturer no longer provides security updates, consider a supported replacement. Restarting a router does not replace a firmware update.
4. Separate guests and smart devices
Turn on a guest network if your router offers one. Give visitors its password instead of the password for the network used by your personal computers and files.
Look for an option that blocks guests from accessing the local network. Some routers also provide a separate smart-device network for cameras, plugs and other connected equipment. Isolation can prevent a device from seeing a printer or casting to a television, so check the connections you need afterwards.
- Protect the guest network with WPA2 or WPA3 and its own password; a guest network should not be open to everyone nearby.
- Review connected devices occasionally. A private or randomised phone address can make a familiar device look unfamiliar, so identify it before blocking it.
5. Disable shortcuts you do not use
Disable WPS if you do not need push-button or PIN-based setup. In particular, WPS PIN mode can weaken security on older routers. You can still connect devices with the normal Wi-Fi password.
Review UPnP and any port-forwarding rules. These can let devices open incoming connections; if you do not need them, disable or remove them. Some games and remote-access services depend on them, so change one setting at a time and test before continuing.
Tips and tricks for everyday reliability
- Keep the router in an open, central position rather than behind a television or inside a cupboard. This improves coverage, not encryption.
- Use 5 GHz or 6 GHz nearby for speed when supported, and 2.4 GHz for longer reach or older smart devices.
- Save important settings and recovery details securely. Avoid factory-resetting a provider router unless you know how to restore the internet connection.
- If an unknown device keeps returning after you change the Wi-Fi password, check guest access and contact your provider for help.
A unique administrator password, modern encryption, updates and sensible guest access are the biggest wins. Change one thing at a time so you can spot any connection problems immediately.
If you cannot find the right settings, use Digital Checkup and describe the router model and the problem. Never send the router password or a photo of its password label.