Your Wi-Fi router is the front door to every device in your home: laptops, phones, smart TVs, cameras and doorbells. Yet many routers still run with their default settings years after installation. That can mean neighbours using your bandwidth, or in the worst case, someone accessing your devices.
The good news is that securing your home Wi-Fi takes about 15 minutes and no technical knowledge. Here’s the checklist.
1. Log Into Your Router
Most routers are managed through an app (common with newer and mesh routers) or a web page. The address, often 192.168.1.1 or 192.168.0.1, is usually printed on a sticker on the router, along with the default admin login.
2. Change the Admin Password
This is the password for the router’s settings, not the Wi-Fi password. Default admin passwords are published online for every router model. Change it to a long, unique password and store it in a password manager.
3. Use WPA3 or WPA2 Encryption
In the Wi-Fi or Wireless security settings:
- Choose WPA3-Personal if all your devices support it.
- Otherwise choose WPA2/WPA3 mixed or WPA2-Personal (AES).
- Never use WEP, WPA (TKIP) or an open network. They’re easy to break.
4. Set a Strong Wi-Fi Password
Use at least 12 to 16 characters. A few random words together, like maple-river-cactus-42, is both strong and easy to type. Avoid your address, family names or phone number.
If lots of people have your current password, changing it removes everyone at once. Your own devices will need the new password. If you’ve forgotten the current one, a Windows PC that’s already connected can show it, or check the sticker on the router.
5. Update the Router Firmware
Firmware updates fix security holes. Check for updates in the app or admin page and turn on automatic updates if available. If your router no longer receives updates (common for models over five or six years old), it’s time to replace it.
6. Turn Off WPS
WPS (the button or PIN method for connecting devices) has known weaknesses, especially the PIN method. Turn it off unless you really use it.
7. Turn Off Remote Management and UPnP
- Remote management lets someone change router settings from the internet. Turn it off unless you need it.
- UPnP lets devices open ports automatically. It’s convenient for gaming consoles but can be abused by malware. Turn it off if you don’t need it, or keep it on only if games or apps require it.
8. Create a Guest Network
Set up a separate guest network with its own password for visitors. Guests get internet access but can’t see your computers, printers or shared files.
9. Put Smart Devices on Their Own Network
Smart plugs, cameras, TVs and speakers often have weaker security. Putting them on the guest network, or a dedicated IoT network if your router supports it, means a hacked gadget can’t reach your laptop or phone.
10. Review Connected Devices
Your router app shows every connected device. Look for devices you don’t recognise. If you find any, block them and change your Wi-Fi password.
Myths That Don’t Add Much Security
- Hiding your network name (SSID): hidden networks are still easy to find with free tools, and hiding can cause connection problems.
- MAC address filtering: MAC addresses are easy to copy, and modern phones use random addresses, which makes filtering annoying to manage.
Strong encryption and a good password matter far more.
Protect the Devices Too
A secure router is one layer. Keep your computers and phones updated, use antivirus, and turn on two-factor authentication for important accounts. Our guide on how to protect your computer from hacking covers the rest.
Quick Security Checklist
Keep this list for a quick check once or twice a year:
- Router admin password changed from the default
- WPA3 or WPA2 (AES) encryption on
- Strong Wi-Fi password (12+ characters)
- Router firmware up to date, automatic updates on
- WPS off
- Remote management off
- Guest network for visitors and smart devices
- No unknown devices in the connected devices list
If you tick every item, your home Wi-Fi is more secure than most.
Frequently Asked Questions
How do I know if someone is using my Wi-Fi?
Check the connected devices list in your router app or admin page. Unknown devices, or slow speeds when you aren’t using much, are warning signs.
Should I change my Wi-Fi password regularly?
Not necessarily, if it’s strong and only trusted people have it. Change it if you’ve shared it widely or see unknown devices.
Is WPA2 still safe?
WPA2 with AES and a strong password is still reasonably secure for homes. WPA3 is better if all your devices support it.
Do I need a new router for better security?
If your router no longer gets firmware updates or doesn’t support WPA2 (AES), yes. Modern routers also make security settings much easier.