Most people never touch their router, and that is exactly why it deserves ten minutes of attention. This how-to is part of our guide to securing your key accounts.
Two different passwords
| Password | What it does | Who needs it |
|---|---|---|
| Wi-Fi password | Lets devices join your network | Family and guests |
| Admin password | Lets someone change your router's settings | Only you |
The admin password matters more. Whoever controls your router can change its settings or redirect your traffic to fake sites.
Step 1: Log in to the router
Use your provider's app, or type the address on the router's label into a browser. Log in using the details on the label.
Step 2: Change the admin password
Replace the default with a long, unique password from your password manager. Default passwords are published online, so leaving one in place is like leaving your key in the door.
Step 3: Update the firmware
Look for "firmware" or "software update". Turn on automatic updates if available. Old routers that no longer receive updates should be replaced.
Step 4: Set strong Wi-Fi security
- Choose WPA3, or WPA2 if your devices need it. Avoid WEP and open networks.
- Use a password of at least 16 random characters, or a few random words.
- Change the default network name so that it does not reveal your router's brand or your name.
Step 5: Turn off what you do not use
- WPS, the push-button connection feature, has a history of weaknesses.
- Remote management, unless you really need it.
- UPnP, if you are comfortable checking that nothing breaks.
Step 6: Add a guest network
Put visitors, and ideally smart TVs, cameras and plugs, on a guest network. That keeps them apart from your computers.
Public Wi-Fi
Modern websites encrypt their traffic, so public Wi-Fi is much safer than it was, but fake hotspots still exist. Avoid banking and account changes on it where you can, and use your phone's data connection instead.
If you notice strange redirects or browser warnings at home, your router's settings may have been altered. Check them, then update your password and firmware. Next, consider computer login passwords and encryption.