How to secure your home Wi-Fi router in an afternoon
Your router has two passwords, and both are probably still the factory ones. Change them, turn on WPA3, update the firmware, and set a guest network.
Some links in this guide are affiliate links: if you buy, TechForLive may earn a commission at no extra cost to you. Details.
- A router has two passwords: one for Wi-Fi and one for its settings. Change both from the factory defaults.
- Use WPA3 encryption, or WPA2 if your router has no WPA3. Never use WEP or the original WPA.
- Update the firmware and turn on automatic updates so security fixes arrive by themselves.
- Turn off WPS and remote management: two quiet doors you do not need open.
How to secure your home Wi-Fi router: the short version
Your router is the front door of your home network. Every phone, laptop, TV, and smart gadget connects through it, so anyone who controls it controls everything behind it. Most routers ship with a default admin password printed in the manual, and that default is easy to find online. Anyone who knows your router's model can look it up. That is why securing the router matters more than any setting on a single device.
The job is smaller than it sounds. Change both passwords, turn on the strongest encryption, and update the firmware. Those three steps close the biggest holes, and they take about an hour. Then set up a guest network, turn off two features you do not need, and you are done. You only need a browser and the password on the router's label.
This guide walks through each step in order, with the setting names you will see on screen. Menu names differ a little by maker, but the steps are the same on every home router. If your internet company gave you the router, the same steps apply, and you can call them if a setting is locked.
| At a glance | Answer |
|---|---|
| Two passwords | Wi-Fi and admin, change both |
| Encryption | WPA3, or WPA2 if no WPA3 |
| Never use | WEP or the original WPA |
| Wi-Fi passphrase | 5 to 7 words, 16+ characters |
| Firmware | Update it, turn on auto-update |
| Guest network | For visitors and smart gadgets |
First, get into your router's settings
A router has two passwords, and they do different jobs. The Wi-Fi password is the one you type to put a phone or TV on the internet. The admin password is the one that opens the settings page itself. Both ship as factory defaults. If someone logs in as admin, they can change your Wi-Fi password, see connected devices, and undo every other step in this guide.
Keep the label handy while you work, because you will need the default login once. After you change the admin password, write the new one down and store it with your other passwords, ideally in a password manager. If you forget it, the only fix is a factory reset, which wipes every setting and starts over. Hold the small reset button on the back of the router for about ten seconds, until the lights blink, then set it up again from scratch.
If the label is worn off or missing, your phone can tell you the address. On iPhone, open Settings > Wi-Fi, tap the info button next to your network, and look for the Router entry. On Android, open Settings > Network & internet > Internet, tap the gear next to your network, and look for Gateway. Either number is the settings address. Some newer routers skip the browser entirely and use the maker's phone app instead, which walks you through the same steps.
- Find the label on the bottom or back of your router. It shows the address for the settings page, the default admin username and password, and the default Wi-Fi name and password.
- Connect a phone or laptop to your Wi-Fi, then type the settings address from the label into your browser. The address varies by maker, so use the one printed on your router, not one from memory.
- Log in with the default admin username and password from the label. Change them at once, in the next section, before you do anything else.
Change both passwords
Start with the admin password. In the settings page, look for Administration, System, or Management, and open the password or login section. Replace the default with a long password you have never used anywhere else, and save it. This is the single most important step, because the admin login controls everything else on the box.
Then change the Wi-Fi password. Look for Wireless, Wi-Fi, or Wireless Settings, and open the security section for your network. Pick a passphrase of five to seven unrelated words, adding up to at least sixteen characters. A long passphrase has more characters to crack than a short symbol jumble, and random words are easier to type than symbols. Do not use your name, your address, or the router's brand in either password or in your network's name.
Change the network name too, while you are there. The default name usually gives away the router's maker and model, which tells an attacker exactly which defaults to try. Pick a name that says nothing about you or your router. After you save the new Wi-Fi password, every device in the house will disconnect. You will need to join each one again with the new password. Do this step when nobody is in the middle of a video call.
Turn on the strongest encryption: WPA3 or WPA2
Encryption scrambles the data travelling over your Wi-Fi, so someone nearby cannot simply read it out of the air. In the wireless security settings, look for the encryption or security mode and pick WPA3 Personal if your router offers it. It is the newest and strongest option for a home network. If WPA3 is not listed, pick WPA2 with AES, sometimes shown as WPA2-PSK or WPA2 Personal. Both are safe choices.
WEP and the original WPA are old, and both can be broken quickly with tools anyone can download. If those are the only options your router offers, update its firmware first, as the next section explains. A firmware update often adds WPA2 or WPA3 to an older router. If they still do not appear after the update, the router is too old to trust, and it is time to replace it.
One catch: both your router and your devices must support WPA3 for it to work. Most routers made in the last few years do, and most modern phones and laptops do too. If an old gadget cannot connect after you switch to WPA3, look for a mixed mode. It is often called WPA3 and WPA2, and it lets new devices use WPA3 while old ones fall back to WPA2.
| Setting | What it means | What to do |
|---|---|---|
| WPA3 Personal | Newest and strongest home encryption | Use it if your router offers it |
| WPA2 with AES | Strong and widely supported | Use it if there is no WPA3 |
| WPA or WEP | Old and easy to break | Never use; update firmware or replace the router |
Update the firmware, then set the three extra switches
Firmware is the built-in software that runs your router, and makers release updates that fix security holes as they are found. Unlike your phone, most routers do not install these by themselves, so an unpatched router can carry years of known holes. Register your router with the maker so you hear about new versions, and check the maker's website if your router has no update button. If your internet company gave you the router, ask them whether it updates itself.
The three extra switches take five minutes and close three quiet doors. A guest network keeps visitors and smart gadgets, like cameras and speakers, away from your computers and phones. Turning off WPS removes a shortcut that can be abused. Turning off remote management means the settings page only works from inside your home. None of these changes how your Wi-Fi feels day to day.
Every so often, open the connected devices list in your router settings and look for names you do not recognise. A device you do not own is a sign someone has your password, and changing the Wi-Fi password locks them out. If an update fails halfway, do not unplug the router. Wait a few minutes, then try again, and check the maker's site for help if the page stays stuck.
- Update the firmware. In the settings page, look for Firmware Update, Router Update, or System Update, and install whatever is available. Turn on automatic updates if your router offers them, so fixes arrive by themselves.
- Set up a guest network. Look for Guest Network or Guest Wi-Fi, turn it on, and give it a different password from your main network. Guests and smart gadgets use this network, so they never touch your main one.
- Turn off WPS. Look for WPS or Wi-Fi Protected Setup in the wireless settings and switch it off. It lets devices join with a button or a short PIN, and known tools can recover the WPS PIN in hours.
- Turn off remote management. Look for Remote Management, Remote Access, or WAN Administration and switch it off. It lets the settings page be reached from the internet, and you do not need it.
Myths you can ignore about router security
The first myth is that hiding your network name keeps you safe. Turning off the broadcast feels secret, because the name no longer appears in the list. But it is still visible to anyone with a basic scanning tool. It only makes your own devices harder to connect. A strong password and WPA3 do the real work, and a hidden name adds nothing.
The second myth is that you must change your Wi-Fi password every month. A long passphrase that nobody else knows does not get weaker with age. Change it when someone who had it should no longer have it, like a guest who moved out, or if you think it leaked. Changing it on a schedule just means typing a new password into every gadget for no gain.
The third myth is that a new router is automatically secure. A new box still ships with a default admin password and often with older firmware. Run through the same checklist on a new router before you connect anything to it. The fourth myth is that your internet company's router is their problem. It sits in your home, on your network, and the settings are yours to change. If a setting is locked, call them and ask them to change it or to let you.
Quick answers
How do I open my router's settings page?
Connect to your Wi-Fi, then type the address printed on the router's label into your browser. It is often a set of numbers, or a maker name such as routerlogin.net. Log in with the default admin username and password from the same label.
What if I forget the admin password?
The only fix is a factory reset. Find the small reset button on the back of the router, hold it for about ten seconds with a paperclip until the lights blink, then set the router up again from scratch. That is why the new admin password belongs in a password manager.
Should I use WPA3 or WPA2?
Use WPA3 if your router offers it, since it is the newest and strongest home encryption. If WPA3 is not listed, use WPA2 with AES. If a firmware update does not add WPA2 or WPA3, the router is too old and should be replaced.
How often should I update my router's firmware?
Install updates whenever they appear, and turn on automatic updates if your router offers them. There is no fixed schedule. Register the router with the maker so you hear about new versions, and check the maker's website if your router has no update button.
Do I need a guest network?
It helps, and it takes five minutes. Turn on Guest Network in your router settings, give it a different password from your main network, and hand that password to visitors. Turn it off when no guests are around if you prefer.