Key Takeaways
- Default router credentials are a known security liability — changing them is the single most impactful first step.
- WPA3 or WPA2 encryption should be enabled on every home network; older protocols leave traffic exposed.
- A separate guest network keeps visitors' devices isolated from your primary connected devices.
- Regular firmware updates close known security vulnerabilities in your router's software.
- Disabling remote management and WPS removes two commonly exploited attack surfaces.
What you will need
Why Your Home Network Is Worth Securing
Your home Wi-Fi network connects far more than just your laptop. Smartphones, tablets, smart TVs, thermostats, security cameras, and gaming consoles all share that same connection. An unsecured or poorly configured router can give an outside party a foothold into all of them.
The good news: most home network vulnerabilities are the result of default settings that were never changed, not sophisticated attacks. Addressing a handful of specific router configurations significantly reduces your exposure. You don't need to be technical to do this — just methodical.
For context on how your home network is structured and what affects its performance, see our overview of how home Wi-Fi works. And if you're also thinking about security on the go, our guide on public Wi-Fi risks covers what happens when you leave your protected home network behind.
What you will need
What You'll Need Before You Start
Before walking through the steps, gather your tools. You don't need to purchase anything — everything required is already built into your router.
Router Admin Panel
The browser- or app-based interface where all router settings — passwords, encryption, firmware, and guest networks — are configured.
Password Manager
Helps generate and securely store strong, unique passwords for both your Wi-Fi network and router admin account.
Router Manufacturer's App
Some routers offer a dedicated smartphone app that simplifies firmware updates and security settings for non-technical users.
Check Your Router's App or Web Interface
Most modern routers can be managed through a smartphone app or a browser-based dashboard (usually reached by typing 192.168.1.1 or 192.168.0.1 into your browser's address bar). Your router's documentation or the label on the device itself will confirm the exact address. Bookmark it once you find it — you'll likely return to it more than once.
Step-by-Step: Securing Your Router
Don't Skip the Router Admin Password
Many people change their Wi-Fi password but leave the router's admin login at its factory default. This is a critical distinction: the admin password controls the router's settings, and anyone on your network — or sometimes beyond it — can reach that login page. Change both passwords before doing anything else.
Log in to your router's admin panel
Open a web browser on a device connected to your home network and type your router's admin address into the address bar — commonly 192.168.1.1 or 192.168.0.1. The exact address and default login credentials are printed on a label on the router itself. Enter the username and password to access the settings dashboard.
Change the router admin username and password
Navigate to the administration or management section of your router's settings. Replace the factory-default admin credentials with a strong, unique password — at least 12 characters, mixing letters, numbers, and symbols. This password protects your router's control panel, separate from your Wi-Fi password.
Update your Wi-Fi network password
Find the Wireless or Wi-Fi settings section. Change the network password (sometimes labeled the WPA Key or Passphrase) to something long and random — at least 16 characters is a reasonable target. Avoid dictionary words, names, or dates. After saving, you'll need to reconnect all your devices with the new password.
Set your encryption to WPA3 or WPA2
In your wireless settings, look for a Security or Encryption option. Select WPA3 if your router supports it — it's the current standard. If not, WPA2-AES is a strong and widely supported alternative. Avoid WEP or WPA (the original version) — these older protocols have known weaknesses and should not be used.
Enable a guest network for visitors
Most modern routers let you create a separate guest Wi-Fi network. Enable this feature in your router settings and give it its own strong password. When visitors connect to the guest network, their devices are kept separate from your main devices — including computers, smart home gadgets, and anything with personal data on it.
Update your router's firmware
Firmware is the software that runs your router. Manufacturers release firmware updates to patch security vulnerabilities. In your router's admin panel, look for a Firmware Update or Software Update option — often found under Administration or Advanced Settings. Install any available updates and, if your router supports it, enable automatic updates going forward.
Disable WPS and remote management
WPS (Wi-Fi Protected Setup) is a feature designed to simplify device connections using a PIN or button press, but it has documented vulnerabilities that attackers can exploit. Find the WPS option in your wireless settings and disable it. Similarly, disable Remote Management — a feature that allows access to your router's admin panel from outside your home network — unless you have a specific need for it.
Avoid Using Personal Details in Your Network Name
Your Wi-Fi network name (called an SSID) is broadcast publicly. Avoid including your name, address, or apartment number — this information can help someone targeting your household. A generic or unrelated name is a better choice.
After You've Finished: Keeping It Secure Over Time
Locking down your router isn't a one-time task. Firmware updates should be checked periodically — or automated if your router allows it. Revisit your passwords once or twice a year, and consider auditing which devices are connected to your network through your router's device list. Unknown devices appearing on your network are a signal worth investigating.
For a broader look at the habits that keep a home network safe long-term, see practices that actually protect your home network. If you're also looking to extend coverage or eliminate dead zones, our comparison of mesh networks and Wi-Fi extenders can help you do that without compromising security. For your smartphone specifically, cell phone security habits covers the steps that complement what you've done here.