How to Secure Your Home or Office Wi-Fi Router

Your Wi-Fi router quietly connects laptops, phones, printers, smart TVs and cameras to the internet. If it is poorly configured, a stranger nearby or an attacker online may be able to watch traffic, change settings or reach the devices behind it. Most routers ship with settings chosen for easy setup, not security.

Set aside about an hour. These steps work for most home and small office routers, though menu names vary by brand.

Step 1: Open your router's settings

Most routers can be managed through a web page or the manufacturer's app. Look on the label on the router for the admin address, often something like 192.168.0.1 or 192.168.1.1, along with the default login. If your internet provider supplied the router, its support pages usually explain how to sign in.

Step 2: Change the admin password

The password that protects your router's settings is different from the Wi-Fi password your devices use. Default admin passwords are often printed on the device or listed online, so change it to a long, unique password and store it in your password manager. If the router lets you change the admin username too, do it.

Step 3: Update the firmware

Firmware is the router's built-in software. Updates fix security flaws, some of which attackers actively exploit. Look for a firmware or update section and install the latest version. If there is an automatic update option, turn it on.

If the manufacturer no longer releases updates for your model, plan to replace it. An unsupported router is one of the riskiest devices in a home or office because it sits directly on the internet.

Step 4: Choose strong Wi-Fi encryption

In the wireless security settings, choose the strongest option your devices support:

• WPA3 is the current standard and the best choice when all your devices support it.
• WPA2/WPA3 mixed mode helps when some older devices cannot use WPA3.
• WPA2 with AES is acceptable for older equipment.
• Avoid WEP, WPA with TKIP and open networks. These are outdated or unprotected.

Step 5: Set a strong Wi-Fi password and a neutral name

Use a long passphrase for the Wi-Fi itself, at least several words long. Then rename the network if it shows your family name, street address or business name in a way you would rather not broadcast. Hiding the network name entirely adds little real security and can cause connection hassles, so a neutral name is usually the better approach.

Step 6: Create a guest network

Most routers can run a separate guest network. Use it for:

• Visitors and customers, so they never share a network with your work computers.
• Smart home devices such as speakers, plugs and TVs, which often receive fewer security updates than computers.

Turn on the option that prevents guest devices from seeing each other or your main network, sometimes called client isolation or access to local network.

For businesses that take card payments, ask your payment processor whether your terminals have specific network requirements. Keeping them off the customer Wi-Fi is a sensible minimum.

Step 7: Turn off features you do not use

• WPS (Wi-Fi Protected Setup): the PIN method in particular has known weaknesses. Turn WPS off unless you rely on it.
• Remote management: this lets the router be configured from the internet. Leave it off unless you specifically need it.
• UPnP (Universal Plug and Play): this lets devices open connections through your router automatically. Some games and devices need it, but if nothing breaks when you disable it, leaving it off reduces risk.

Step 8: Review connected devices

Most routers show a list of connected devices. Scan it for anything you do not recognize. Give your own devices friendly names so the list makes sense next time. If you find something unexpected, change the Wi-Fi password, which disconnects everything, then reconnect only your own devices.

Keep it up over time

• Check for firmware updates every few months, or confirm automatic updates are working.
• Change the Wi-Fi password if someone who had it should no longer have access, such as a former employee.
• Write the admin and Wi-Fi details on paper in a safe place at home in case you need to reset the router.

Router security is one part of a bigger picture. Our software update routine and small business cybersecurity checklist cover the rest.

Frequently asked questions

Should I hide my Wi-Fi network name?

Hiding the name does not stop someone determined to find the network, and it can make connecting your own devices harder. A strong password and WPA3 or WPA2 encryption matter much more.

Do I need a new router?

Replace your router if it no longer receives firmware updates or cannot offer at least WPA2 with AES. A supported router with current firmware is a worthwhile investment.

Is the router from my internet provider secure?

It can be, but check that the admin password has been changed, firmware updates are installed, and remote access is set the way you want. Ask your provider how updates are handled for their equipment.