Your router is the front door to your home network. Every phone, laptop, smart TV, camera and doorbell connects through it. Yet many routers run for years with default settings, old firmware and weak passwords. A few changes can make your home network much more secure.
This guide walks through practical steps. Router menus differ by brand and model, so use your router’s manual or app for exact steps.
Step 1: Change the Admin Password
Your router has an administrator login, separate from the Wi-Fi password, used to change settings. Older routers sometimes shipped with default admin credentials that are easy to look up. Change it to a strong, unique password and store it in your password manager. See the password manager guide.
Step 2: Update Firmware
Router firmware updates fix security vulnerabilities. Many newer routers update automatically; others require you to check in the admin page or app. Turn on automatic updates if available.
If the manufacturer no longer releases updates for your model, it may be time to replace it.
Step 3: Use Strong Encryption
In wireless settings, choose WPA3 if all your devices support it, or WPA2/WPA3 mixed mode, or WPA2 if needed. Avoid older options like WEP or open networks.
Step 4: Set a Strong Wi-Fi Password
Use a long passphrase. Since you share it with guests and type it into devices, random words work well. See strong passphrases.
Step 5: Set Up a Guest Network
Many routers can create a separate guest network. Use it for visitors and, where possible, for smart home devices. This helps keep them separate from your main computers and phones.
Step 6: Review Risky Features
| Feature | What it does | Suggested approach |
|---|---|---|
| WPS | Push-button or PIN pairing | Consider disabling; PIN mode has had weaknesses |
| Remote management | Admin access from outside your home | Disable unless needed |
| UPnP | Lets devices open ports automatically | Consider disabling if you do not need it |
| Default network name | Can reveal router brand | Change to something neutral |
Disabling some features can affect gaming consoles or other devices; test after changes.
Step 7: Check Connected Devices
Your router’s admin page or app shows connected devices. Review it occasionally and remove anything you do not recognize. Rename devices so you know what each one is.
Step 8: Secure Smart Devices
- Change default passwords on cameras and smart gadgets
- Update device firmware
- Disable features you do not use
- Put devices on the guest or IoT network if available
Router-Provided Security Features
Some routers include built-in security features such as malicious site blocking, parental controls or automatic threat scanning. Some require subscriptions. Review what they do and their privacy policies.
Mesh Systems
Mesh systems use multiple units for better coverage and are often managed with an app that makes updates and settings easier.
When to Replace Your Router
- The manufacturer no longer provides updates
- It only supports older encryption
- Performance no longer meets your needs
What About VPNs?
A VPN does not replace router security. See do you need a VPN at home?.
Common Mistakes
- Never changing the admin password
- Ignoring firmware updates
- Using outdated encryption
- Sharing the main Wi-Fi password with everyone and every device
A Note on Internet Provider Equipment
Many homes use a modem and router supplied by the internet provider. Some update automatically and are managed remotely by the provider, while others give you limited settings. Check what you can control through the provider’s app or admin page. If you use your own router, you take responsibility for its updates.
A Note on Physical Security
Anyone with physical access to your router can often reset it to factory defaults. Place it somewhere reasonably secure and out of reach of visitors where possible. After any reset, repeat your setup steps, since defaults return.
Questions to Ask Before Buying a Router
- How long will the manufacturer provide security updates?
- Does it support WPA3?
- Does it offer a guest or IoT network?
- Is it managed through an app, and what data does the app collect?
- Does it update automatically?
Final Network Checklist
- Admin password changed
- Firmware current
- Encryption set to WPA3 or WPA2
- Guest network on
- Remote management off
- Device list reviewed
A Note on Parental Controls
Many routers include parental controls such as content filters, time limits and per-device pause buttons. These can help manage children’s screen time, though determined kids may find workarounds. Combine router controls with device-level family features and conversations about online safety.
Starting Small
You can do the most important steps in one sitting: log in to your router app or admin page, change the admin password, check for firmware updates and confirm encryption. Save guest network and advanced settings for another day.
A Note on Old Devices
Old smart plugs, cameras and printers may no longer receive updates. Remove devices you no longer use from your network, and consider replacing unsupported ones that stay online all the time.
A Note on Wi-Fi Names
Avoid including your name, address or apartment number in your network name.
Frequently Asked Questions
How often should I update my router?
Turn on automatic updates or check periodically.
Should I hide my network name?
Hiding the network name provides little security and can cause connection issues.
Is WPA3 necessary?
It is stronger; use it if your devices support it.
Should smart devices go on the guest network?
It is a common approach for separating them.
How do I know if someone is on my Wi-Fi?
Check the connected devices list in your router app or admin page.
The Bottom Line
Change the admin password, update firmware, use modern encryption and strong passphrases, create a guest network, disable features you do not need and replace routers that no longer get updates.
Editorial note: Lock and Login is independent and reader-supported. This guide is based on research into manufacturer documentation, published specifications and widely accepted best practices; we have not been paid to mention any product. If we add affiliate links in the future, they will be clearly disclosed per our Affiliate Disclosure.
