To secure your home Wi-Fi router, change the default admin login, use WPA3 or WPA2 with a long unique Wi-Fi password, keep the firmware updated and turn off features you do not use. None of this needs special skills, and an hour of tidying up can close the gaps most home networks leave open.
Why the router matters so much
Every phone, laptop, television and smart speaker in your home talks through the router. If someone gains control of it, they can watch which sites your devices contact, change where your traffic goes or use your connection for things you would not want your name attached to. Routers are often set up once and forgotten for years, which is exactly why they are an attractive target.
Six steps to lock down your router
Step 1: Change the admin login
There are two separate passwords on a router. One joins people to your Wi-Fi. The other lets someone change the router’s settings. The second is often left as a default printed on a sticker, or something simple like admin. Log in to the router’s settings page, usually through an address printed on the label, and set a unique admin password. Store it in a password manager so you do not have to remember it.
If your router lets you change the admin username too, do that as well.
Step 2: Pick strong Wi-Fi encryption
In the wireless settings, choose the newest security mode your devices support. WPA3 is the current standard; WPA2 with AES is still acceptable. Avoid WEP and the original WPA, which are long obsolete, and never leave the network open. Our guide to WPA2 and WPA3 encryption explains the differences if you see a mixed mode option and are unsure what to pick.
Step 3: Use a long, unique Wi-Fi password
Length beats cleverness. A passphrase of several unrelated words, or a long random string, is far harder to guess than a short mix of symbols. Do not reuse a password from anywhere else, and avoid details people could guess such as your address, your name or the router’s brand. Change it if you have ever shared it widely, for example with former housemates or a rental guest.
Step 4: Keep the firmware updated
Firmware is the router’s built-in software, and manufacturers release updates to fix security flaws. Check the settings page for an update option and switch on automatic updates if it exists. If your model no longer receives updates at all, that is a strong reason to replace it, because known flaws will never be patched.
Step 5: Turn off what you do not need
Routers ship with convenient features that can also widen the attack surface. Review these and disable any you do not actively use:
- Remote administration, which lets the settings page be reached from the internet.
- WPS, the push-button or PIN pairing feature, which has had known weaknesses.
- UPnP, if you do not need it, since it lets devices open ports automatically. Some games and apps rely on it, so test after changing it.
- Unused services such as file sharing from a USB drive, if you never use them.
Step 6: Set up a guest network
Most routers can broadcast a separate guest network. Use it for visitors and for devices you trust less, such as smart plugs, cameras and cheap gadgets. A well-configured guest network keeps those devices away from your computers and phones, so a flaw in one gadget does not expose everything. Give it its own password and, if the router allows, keep it isolated from your main network.
Home Wi-Fi router security checklist
| Setting | What to aim for |
|---|---|
| Admin password | Unique, not the default |
| Wi-Fi security mode | WPA3, or WPA2 with AES |
| Wi-Fi password | Long and used nowhere else |
| Firmware | Current, with automatic updates if available |
| Remote administration | Off |
| WPS | Off |
| Guest network | On for visitors and smart devices |
Other worthwhile habits
Check who is connected
The router’s settings page lists connected devices. Glance through it now and then. You should recognise everything; if you do not, change your Wi-Fi password and see whether the unknown device disappears.
Rename the network sensibly
The network name can be anything. Avoid putting your surname or address in it, and avoid names that reveal the router model. This is a small privacy gain rather than a security fix, but it costs nothing.
Consider the DNS and VPN options
Some routers let you pick a different DNS service or run a VPN for the whole household. Both are optional extras. If you are curious, read how to use a VPN on your router and DNS explained for beginners before changing anything.
Keep a recovery plan
Know where the reset button is and write down which settings you changed. If something goes wrong, a factory reset returns the router to its defaults, and you can then repeat the steps above.
Where to start
Begin with the two changes that matter most: a unique admin password and a modern Wi-Fi security mode with a long password. Then check for firmware updates and turn off remote administration and WPS. After that, add a guest network for visitors and smart devices. For more practical guides to the connection at the centre of your home, see our Wi-Fi and networking section. Revisit these settings once or twice a year, and again whenever you replace the router or someone you shared the password with no longer needs access.
Frequently asked questions
How do I open my router's settings page?
Check the label on the router for the address and login details, then type that address into a browser while connected to the network. If you cannot find it, the manufacturer's manual or support page will list it.
Is hiding the network name a good security measure?
Not really. Hidden names are easy to discover and can make devices behave oddly, so strong encryption and a long password are far more effective.
How often should I change my Wi-Fi password?
There is no need to change it on a schedule if it is long and unique. Change it if you suspect someone unwanted has it or after sharing it widely.
Should I replace an old router?
Yes if the manufacturer no longer provides security updates or it cannot support modern encryption such as WPA2 with AES or WPA3.
