Your router still uses the password printed on its sticker, right? Most homes never change it. And that small box quietly guards every phone, laptop and smart bulb you own.
This week gave us a sharp reminder. NETGEAR and TP-Link both posted fresh security fixes for home routers on 14 October. A day later, researchers showed a Wi-Fi flaw that could hit unpatched routers. So now is a very good time for a check-up.
The good news? You can secure your home Wi-Fi router in about 20 minutes. You do not need new hardware. You just need to change a handful of settings, in the right order.
Step 1: Change the Admin Password First
Your router actually has two passwords. The Wi-Fi password lets devices join your network. The admin password opens the settings page itself. Many people change the first one and forget the second.
That is a real problem. Factory admin passwords are widely known. They are often just “admin” or a code from the sticker. Anyone on your network could guess them and take over your settings.
Picture this. A guest joins your Wi-Fi during a family dinner. Later, a curious teenager tries the default login on the router page. Within minutes, he can change your settings or lock you out. It happens more often than you’d think.
So open your router app or settings page first. Change the admin password to something long and unique. Then store it in a password manager. Also change the Wi-Fi password if it still matches the sticker.
Step 2: Update the Router Firmware
Routers run software, just like your phone. That software gets security bugs too. Makers fix those bugs in firmware updates. But many routers never receive them, because nobody checks.
The recent NETGEAR and TP-Link fixes prove the point. Those updates close real holes. However, they only help if you install them. So this step matters more than almost any other.
First, open the update section in your router app or settings. Then install any update that is waiting. Next, turn on automatic updates if the option exists. That way, you will not have to remember next time.
What if no update has appeared for years? Then your router may be too old to protect you. In that case, replacing it is the honest fix. Our guide to cybersecurity tips for remote workers covers the same basics for people who work from home.
Step 3: Use WPA3 or WPA2, and Turn Off WPS
Encryption is the lock on your wireless signal. WPA3 is the current standard. WPA2 is still acceptable for most homes. But WEP is broken, and you should never use it.
Check the wireless security setting in your router. If WPA3 is listed, select it. If an older device refuses to connect, use the mixed WPA2/WPA3 mode instead. That keeps strong protection for newer devices.
Now turn off WPS. WPS is the push-button pairing feature. It feels handy, but its PIN mode has a long history of attacks. In fact, the flaw disclosed this month abused the WPS setup process itself. Turning WPS off removes that whole door.
The CISA guide to securing wireless networks recommends the same steps. Strong encryption and fewer open features make attacks much harder.
Step 4: Rename Your Network Sensibly
Your network name is called the SSID. The factory name often reveals your router brand and model. That detail helps an attacker pick the right trick. So change it to something neutral.
Pick a name that says nothing personal. Avoid your surname, house number or street name. A boring name is a safe name here. “MapleNet” works better than “TheKhanFamilyRouter” ever will.
This step takes one minute. Still, many people skip it for years. Do it while you are already in the settings.
Step 5: Set Up a Guest Network
A guest network is a separate door into your internet. Visitors use it to get online. But they cannot reach your laptop, files or smart devices. That separation is the whole point.
Think about a typical weekend. Friends connect their phones to your Wi-Fi. A cousin brings a tablet full of random games. Meanwhile, your smart TV and door camera sit on the same network. One infected device could snoop on the rest.
So create a guest network with its own password. Put visitors on it. Also put cheap smart gadgets on it, like bulbs and plugs. Your main devices then stay in a quieter, safer room. The remote workforce endpoint security checklist uses the same separation idea for home offices.
Step 6: Turn Off Remote Management
Some routers let you open settings from anywhere online. That feature is called remote management. It sounds useful, but it also exposes your router to the whole internet. Attackers scan for these open doors every day.
Unless you truly need it, switch it off. You can still change settings from home. Also disable UPnP if you do not use it. UPnP lets devices open ports on their own. A compromised gadget could abuse that freedom quietly.
Finally, restart the router once you finish. A restart applies the settings cleanly. It also clears out stale connections.
Step 7: Run This 20-Minute Checklist
Let us pull it all together. First, change the admin password. Second, update the firmware and enable auto updates. Third, set WPA3 or WPA2 and disable WPS.
Fourth, rename the network to something neutral. Fifth, create a guest network for visitors and gadgets. Sixth, turn off remote management. Seventh, restart the router.
That is the whole job. You have now closed the doors attackers try first. And if a phone misbehaves afterwards, our guide to mobile malware detection for Android is a good next read.
Frequently Asked Questions
How do I find my router settings page?
Most routers use an app from the maker. Others use an address printed on the sticker, like 192.168.0.1. Type it into your browser while connected at home. Then sign in with the admin details.
Will WPA3 slow down my Wi-Fi?
No, not in any way you would notice. WPA3 mainly improves security. Older devices might not support it, though. In that case, the mixed WPA2/WPA3 mode is a sensible middle ground.
How often should I update my router?
Turn on automatic updates if your router offers them. Otherwise, check every few months. Also check right after big security news, like this month’s router fixes. A five-minute check can close a serious hole.
Should I hide my network name?
Hiding the SSID adds little real protection. Devices still reveal the network when they search for it. A strong password and WPA3 matter far more. So spend your effort there instead.
The Takeaway
Your router is the front door of your digital home. Right now, that door may still have its factory lock. Twenty minutes of settings changes fixes that. Start with the admin password and firmware today. Everything else on the list is just as quick.