Your home network is the gateway to every device in your house — laptops, phones, smart TVs, security cameras, and more. A compromised router gives an attacker access to all of them. The good news is that most home network security risks can be eliminated with a handful of straightforward changes.
1. Change Your Router Admin Password
Every router ships with a default admin username and password (often admin/admin or admin/password). These are published online and are the first thing attackers try.
- Log into your router — usually at 192.168.1.1 or 192.168.0.1 in your browser
- Find the admin password setting (usually under Administration or Security)
- Set a strong, unique password of 15+ characters
- Store it in your password manager
2. Use WPA3 or WPA2 Encryption (Never WEP or Open)
Your Wi-Fi encryption setting determines how well your wireless traffic is protected.
- WPA3 — the current best standard, use if your router supports it
- WPA2 — still acceptable, use WPA2-AES not WPA2-TKIP
- WEP — broken and crackable in minutes, never use
- Open (no password) — anyone can connect and see your traffic
Check this in your router’s wireless settings. Most modern routers support WPA3.
3. Set a Strong Wi-Fi Password
Your Wi-Fi password should be at least 12 characters and not a dictionary word or phrase. Use a random string — your devices only need to enter it once.
4. Keep Your Router Firmware Updated
Router firmware updates fix security vulnerabilities. Many routers can auto-update — enable this if available. If not, check your router manufacturer’s website every few months.
- Log into your router admin panel
- Look for Firmware Update or Software Update under Administration
- Enable automatic updates if available, or check manually
5. Disable Remote Management
Remote management allows your router to be administered from the internet — useful for ISP support but a security risk if left on.
- In your router settings, find Remote Management or Remote Access
- Disable it unless you specifically need it
6. Set Up a Guest Network for IoT Devices
Smart home devices (TVs, cameras, doorbells, bulbs) often have poor security. Putting them on a separate guest network means a compromised smart device cannot reach your main devices.
- In your router settings, enable the Guest Network
- Connect all smart home devices to the guest network
- Keep laptops, phones, and NAS devices on the main network
7. Use a VPN on Public Wi-Fi
Your home network is under your control, but when you use public Wi-Fi in cafes, hotels, or airports — it is not. Use a VPN to encrypt your traffic on public networks.
8. Check What Is Connected to Your Network
Periodically review the devices connected to your router — unfamiliar devices could indicate a security issue or a neighbour using your Wi-Fi.
- Log into your router admin panel
- Find the Connected Devices or DHCP Client list
- Investigate anything you do not recognise
9. Disable WPS
Wi-Fi Protected Setup (WPS) lets devices connect via a PIN or button press. The PIN method has a known vulnerability that allows attackers to brute-force their way in. Disable WPS in your router’s wireless settings.
10. Consider a DNS Filter
DNS filters like Cloudflare 1.1.1.1 for Families or NextDNS block known malicious domains before your devices connect to them. Set them in your router’s DNS settings to protect every device on your network automatically.
