How to Secure Your Home Router

When your home WiFi is working you’ll likely forget about your router that is sat in a corner. However it is responsible for giving you internet access on your phones, laptops and smart TVs (and sometimes even security cameras).

Having a working connection doesn’t always mean it’s secure. Leaving the admin password as the default, having out-of-date firmware and leaving remote access enabled can all cause issues.

The great news is you can check multiple things to improve your security in around Ten Minutes. However, some items will take longer to update or change your passwords depending on who provides your internet. So here is a checklist:

Step 1: Locate your router Settings

Connect your phone/computer to your home WiFi. Locate your router brand and model by looking at the sticker. Then download the official app from the manufacturer or go to the admin IP address provided in the manual. This can vary between routers so you may need to go to a local IP address like 192.168.1.1.

You will need your admin login. This will be separate from your WiFi password. If your router was installed by your provider they may have control over these settings.

Make sure you have your original WiFi password somewhere safe. Inform everyone on your video call. Don’t change anything you aren’t sure about. Note down what you changed.

Step 2 (1-2 mins): Change your Admin Password

Your router will have two passwords. One to allow devices to connect to your WiFi. And one to allow you to access the admin panel. This can be used to change your security settings, network and password.

Search for Administration, System, Account or Router Login. Change your admin password to a long unique password. You can store this in a password manager. Change your admin username if possible. Some routers will provide this option.

Try not to use the same password as your email. Don’t take screenshots of your new login password and share them on a public chat/group.

If you have a strong unique password you don’t need to change it.

Step 3 (3 mins): Change your WiFi Password & Name

Go to your Wireless, WiFi or Network settings. Check your network password (sometimes known as a wireless key or passphrase).

Change this to a long unique password. Don’t use your phone number, house number or a common family name. Try to keep your WiFi password different to your router admin password.

Change your default network name if it shows who you are, your apartment number or router model. Choose something simple and easy to remember.

Note this will disconnect any devices currently connected to your network. You will need to reconnect your phones, TVs, printers and smart devices. If you don’t have the time to do this now you can come back to it later.

Step 4 (4 mins): Enable Latest WiFi Encryption

Enabling encryption will help protect your data being sent over your wireless connection. Go to your Wireless Security settings and enable WPA3-Personal. This is a strong option if your devices support it.

If you have an old laptop or smart device that can’t connect to WPA3, enable WPA2-Personal (AES). Some routers have a hybrid option for WPA2/WPA3. This can vary between routers.

Don’t use WEP, Original WPA or Open. These are old and not secure for your personal network.

Once you’ve changed your encryption try to check on at least one phone and another important device. You want to make sure everything is secure and your family can use it.

Step 5-6 (5-6 mins): Check for Firmware Updates

Your router will have firmware. This is the software that runs on your router. Manufacturers will release firmware to fix security issues, improve stability and sometimes add extra features.

Go to your Firmware Update, Software Update or System Update. Enable automatic security updates if possible. Otherwise follow the instructions from your manufacturers for your specific model or contact your internet provider.

Don’t ever install firmware from a random forum. Never turn your router off whilst updating. This could reset your connection and may take longer than 10 minutes.

If your router is no longer receiving security updates add this to your longer to do list. A good password won’t help if the manufacturer no longer provide fixes.

Step 7 (7 mins): Disable Unnecessary Remote Management

Some routers will allow you to change your settings remotely. Whilst this is useful for some people it can expose an admin feature.

Look for Remote Management, Remote Administration or Web Access from WAN. Disable this unless you have a specific reason to use it and it is set up securely.

Don’t confuse this with enabling Remote Management from the internet. Once disabled you should be able to access your local settings.

If you need to enable a feature managed by your provider check with your ISP.

Step 8 (8 mins): Disable WPS & UPnP

WPS

WPS stands for Wi-Fi Protected Setup. Whilst it can make connecting easier it has known security issues with the PIN. Disable this if you’re not using it.

UPnP

UPnP stands for Universal Plug and Play. This allows your devices to automatically request some connections. Whilst this is useful for some games and Smart Home devices it can increase risks if your software or devices are compromised.

Disable this if you’re not using it. If you notice any issues with your gaming consoles or other services check the manufacturers guidance. Don’t just open any ports.

Step 9 (9 mins): Check Firewall & Devices

Most modern routers have a firewall. Go to your Security or Firewall settings and make sure it is enabled. If you see any advanced settings you don’t understand don’t change anything. Don’t copy any settings from someone you don’t know from a video.

Go to your Connected Devices, Clients or Device List. Check you can see your phones, laptops, TVs and other devices.

If you don’t recognise any devices this doesn’t mean someone has hacked into your network. They may show as generic names or using a private network. Compare the information and unplug your devices to identify them.

If you identify any unknown devices change your WiFi password, check your admin and reconnect any devices you trust.

Step 10 (10 mins): Create Guest Network & Log Out

If your router has a Guest Network enable this. This will give your guests a unique WiFi name and strong password.

Enable guest isolation if possible. This will stop your guests connecting directly to your personal devices. Some families will have their internet devices (cameras/plugs/smart devices) on a separate network. Check they are compatible. You may need them to talk to each other for casting and local controls.

Creating a Guest Network can take longer if you’re not familiar with your router. Just note this and complete it another day.

Save your changes and log out of your admin panel. Make sure your usual devices can still connect.

If You Can’t Complete Within 10 Minutes

This is a quick check to ensure your router is secure. Focus on having a unique admin password, strong WiFi details, WPA3/WPA2 encryption and up to date firmware. This will help with common issues and you don’t need to have any advanced knowledge of networks.

If you have a router provided by your ISP in Pakistan or elsewhere some settings may be locked or managed via their application. Contact support and ask what security updates they provide, and if they can disable any unnecessary Remote Management. Don’t reset any devices provided by your provider. You may lose any settings needed to connect.

Remember hiding your network name and just using MAC address filtering won’t help. Make sure your phones and smart devices are up to date.

Final Thoughts

You don’t need to do any complicated changes to improve your home router. Just a few simple settings to ensure you have unique passwords, modern encryption, up to date and limited remote access.

Use the 10 minutes to check what you can. Complete any longer changes when your family can tolerate a short interruption. Occasionally check your router. Making small easy decisions will help keep your home network secure.