Your home Wi-Fi is the front door to every device in your house. Laptops, phones, smart TVs, security cameras, and anything else connected to it are only as secure as the network itself. The good news: locking it down takes about 15 minutes.

Most of these steps happen in your router's admin panel. Open a browser and go to your router's IP address (usually 192.168.1.1 or 192.168.0.1). The default login credentials are often printed on a sticker on the router itself, or check the manual.

Change the Default Admin Password

This is the single most important step. Every router ships with a default admin username and password (often admin/admin or admin/password). Anyone on your network can type in the router's IP and log in with these defaults.

1. Log into your router's admin panel
2. Find Administration, Management, or System settings
3. Change the admin password to something long and unique
4. Save your new password somewhere safe (password manager, not a sticky note on the router)

This is the password for the router settings page, not your Wi-Fi password. They're separate things.

Use WPA3 (or WPA2 at Minimum)

Your Wi-Fi encryption protocol determines how hard it is for someone to intercept your traffic or crack your password.

• WPA3-Personal is the current standard. Use it if your router and devices support it. It has stronger encryption and resists offline password-guessing attacks
• WPA2-Personal (AES) is still acceptable with a strong password. Most devices from the last decade support it
• WPA2/WPA3 mixed mode lets older devices connect with WPA2 while newer ones use WPA3. Use this if some of your devices don't support WPA3
• WEP is completely broken. If your network is using WEP, change it immediately. It can be cracked in minutes
• TKIP is an older encryption method sometimes paired with WPA2. Always choose AES over TKIP

To check or change this:

1. Log into your router's admin panel
2. Go to Wireless or Wi-Fi settings
3. Look for Security or Authentication settings
4. Select WPA3-Personal or WPA2/WPA3 if available, or WPA2-Personal (AES) as the minimum

Set a Strong Wi-Fi Password

Your Wi-Fi password should be at least 14 characters. A passphrase of random words works well (like correct-horse-battery-staple). Avoid your address, name, birthday, or anything guessable.

This is separate from your router admin password. You need both to be strong.

Change Your Network Name (SSID)

The default SSID usually identifies the router brand (like NETGEAR-5G or TP-Link_A1B2), which tells potential attackers exactly what hardware and firmware vulnerabilities to look for.

Change it to something neutral that doesn't identify you, your address, or your router model. Apartment names like Unit12_WiFi or Smith_Family give away too much.

Should You Hide Your SSID?

No. Hiding your SSID (disabling SSID broadcast) does not improve security. Your network name is still visible to anyone using basic Wi-Fi scanning tools.

Worse, hiding it can cause connection problems. Your devices will constantly broadcast probe requests looking for the hidden network name wherever you go, which actually leaks information. Leave SSID broadcast on.

Disable WPS

WPS (Wi-Fi Protected Setup) lets you connect devices by pressing a button on the router or entering a PIN. The PIN method is insecure and can be brute-forced. Even the push-button method has had vulnerabilities.

1. Log into your router's admin panel
2. Find WPS settings (usually under Wireless or Advanced)
3. Turn it off

Connect new devices by typing the Wi-Fi password instead. It takes a few extra seconds but is much safer.

Enable a Guest Network

A guest network creates a separate Wi-Fi network for visitors (and smart home devices) that's isolated from your main network. Devices on the guest network can reach the internet but can't see your computers, NAS, or other devices.

1. Log into your router's admin panel
2. Look for Guest Network or Guest Wi-Fi settings
3. Enable it and give it a different name and password from your main network
4. Enable client isolation if available (prevents guest devices from seeing each other)
5. Use WPA2 or WPA3 encryption on the guest network too

Good uses for a guest network:

• Visitors who need internet access
• Smart home devices (smart plugs, cameras, robot vacuums) that don't need to talk to your computer
• IoT devices you don't fully trust

Check Connected Devices

Periodically review what's connected to your network. Most routers show a list of connected devices in the admin panel.

1. Log into your router's admin panel
2. Look for Connected Devices, Client List, DHCP Clients, or Attached Devices
3. Review the list. Each entry usually shows a device name, IP address, and MAC address
4. If you see something you don't recognize, change your Wi-Fi password

Some devices show up with unhelpful names like ESP_A1B2C3 (a smart home device) or just a MAC address. Cross-reference with the number of devices you expect to be connected.

Update Your Router's Firmware

Router manufacturers release firmware updates that patch security vulnerabilities. Many routers don't update automatically.

1. Log into your router's admin panel
2. Look for Firmware Update, System Update, or Administration > Update
3. Check for updates and install any available ones
4. Some routers have an auto-update option. Enable it if available

If your router hasn't received a firmware update in over two years and the manufacturer has stopped supporting it, consider replacing it. Unpatched routers are a real security risk.

Router Placement

This isn't just about coverage. A router placed near a window broadcasts your Wi-Fi signal further outside your home than necessary, giving people on the street or in neighboring buildings a stronger signal to work with. Place it centrally in your home when possible.

The 5 Things to Do Right Now

If you only have 5 minutes, do these:

1. Change the router admin password from the default
2. Check your encryption is WPA2 (AES) or WPA3, never WEP
3. Set a strong Wi-Fi password (14+ characters)
4. Disable WPS in router settings
5. Update firmware to the latest version