Most people set up their router once, on the day it arrived, and never open its settings again. That is a problem, because the router sits between the internet and every device you own, from the work laptop to the cheap smart plug in the kitchen.

You will need about 15 minutes and the router’s admin page. The address is usually printed on a sticker on the router itself, often something like 192.168.0.1 or 192.168.1.1, or you can use the manufacturer’s app.

1. Change the admin password

This is not your Wi-Fi password. It is the password for the router’s settings page, and on older models it is often a default like “admin”. Default passwords for popular routers are listed all over the internet. Pick a long, unique one and store it in your password manager.

2. Use WPA3, or WPA2 with AES

In the wireless security settings, choose WPA3-Personal if every device in the house supports it. The Wi-Fi Alliance, which certifies Wi-Fi gear, says WPA3 gives personal networks stronger protection against password guessing, and it is now mandatory for Wi-Fi certified devices. If an older printer or game console refuses to connect, a mixed WPA2/WPA3 mode or WPA2 with AES is the fallback. Avoid anything labeled WEP or TKIP.

3. Turn off WPS

WPS lets you join a network by pressing a button or typing an 8-digit PIN. In 2011, researcher Stefan Viehböck showed that the PIN version can be cracked: the router checks the PIN in two halves, and the last digit is only a checksum, so an attacker needs about 11,000 guesses instead of 100 million. Many routers also never lock out repeated attempts. The U.S. CERT advisory recommended simply disabling the feature, and that advice still holds.

4. Update the firmware

Router makers fix security holes through firmware updates. Check the admin page for an update button and turn on automatic updates if your router offers them. If the manufacturer stopped releasing updates years ago, no setting will make that router safe for long.

5. Put smart devices on the guest network

Cameras, TVs, plugs and speakers are the devices least likely to get regular security updates. Move them to the guest network so that, if one is compromised, it can’t easily reach your laptop or phone.

6. Switch off remote management

Remote management lets someone change router settings from outside your home. Unless you really need it, turn it off. If you do need it, restrict it to specific IP addresses and use your strong admin password.

Two quick extras

  • Look at the list of connected devices. Anything you can’t identify is worth a second look, and changing the Wi-Fi password will kick everything off at once.
  • Rename the network if it includes your name or address. It won’t stop an attacker, but there is no reason to advertise who lives there.

Settings that sound useful but aren’t

Some popular tips give a feeling of safety without much real protection:

  • Hiding the network name. A hidden network still broadcasts enough information for common scanning tools to find it, and some devices struggle to reconnect to it.
  • MAC address filtering. Approved device addresses can be seen in the air and copied, and many phones now randomize their address anyway, so the allow list keeps breaking.

A strong Wi-Fi password and up-to-date firmware do far more than either of these.

Picking a good Wi-Fi password

Length beats complexity. Four or five random, unrelated words strung together are easier to type on a TV remote than a short jumble of symbols, and much harder to guess. Avoid anything tied to your household, like a pet’s name or your street. If you change it, every device will need the new one, so it’s a good moment to notice which old gadgets you no longer use.

When to buy a new router

Replace your router if the maker no longer ships updates for it, if it can’t offer at least WPA2 with AES, or if it came from your internet provider years ago and has never been replaced. Many providers will swap an old unit for free if you ask. When shopping, look for automatic updates, WPA3 support and a clear statement of how long the model will receive security fixes.

What we think

Steps 1 to 3 take five minutes and close the gaps attackers actually use. Do those today even if you skip the rest.

And be honest about the age of your router. If it hasn’t had a firmware update in years, the most effective security upgrade you can buy is a new one.