How to Secure Your Home Wi-Fi Network

Your router ships with a default admin username and password — often something like "admin" / "admin" or printed on a label. Leaving this unchanged means anyone on your network (or in range of it) can access your router settings. Log into your router's admin panel (usually by visiting 192.168.1.1 in a browser), and change both the username and password to something unique.

Your Wi-Fi password protects your network, but the encryption standard determines how strong that protection actually is. In your router's wireless settings, make sure you're using WPA3 if your router supports it, or WPA2-AES as a fallback. Avoid WEP and TKIP — both are outdated and easily cracked. If your router only supports WEP, it's time for a new router.

Smart home devices — thermostats, cameras, door locks, TVs — are notoriously poorly secured. Putting them on a separate guest network keeps them isolated from your main devices like laptops and phones. If a smart device gets compromised, the attacker can't pivot to your main network. This one change meaningfully reduces your attack surface without any ongoing effort.

Wi-Fi Protected Setup was designed to make it easy to connect devices by pressing a button. It also introduced a security vulnerability that allows attackers to brute-force their way onto your network. Most modern devices don't need WPS — they connect with a password just fine. Disable it in your router settings and you've eliminated the vulnerability.

Router manufacturers release firmware updates that patch security vulnerabilities. Most routers don't update automatically — you have to log in and check manually, or enable auto-update if the option exists. Doing this once every few months takes five minutes and patches holes that attackers actively exploit. If your router is more than five years old and no longer receiving updates, consider replacing it.