How to Change Your Router's Default Password and Settings

Last updated: October 13, 2026

Your router is the front door to your home network. Every phone, laptop, smart TV and camera in your home passes through it. Yet many people have never logged in to it, which means it may still use the settings the manufacturer or internet provider set at the factory. Default network names and logins are often printed on a label on the device, and for older models the default admin logins are widely published online.

This guide shows you how to reach your router's settings, change the two passwords that matter, and adjust the options that make the biggest difference. It also covers two things most guides skip: how to tell whether your router is too old to secure, and what to do if your internet provider controls the device. It follows advice from the Federal Trade Commission (FTC) and the FBI.

Two Passwords, Two Different Jobs

The FTC points out that your router has two passwords you need to reset:

• The Wi-Fi network password. This is what you type on a phone or laptop to join the network. A strong, unique one keeps strangers off it.
• The router admin password. This lets you into the router's control panel, where every setting lives, including the Wi-Fi password.

The FTC warns that if a hacker logged in to the admin side, they could change the settings and undo every other security step you take. That is why the admin password deserves just as much care, and why it must be different from the Wi-Fi password.

Why Defaults Are a Problem

Older routers often shipped with the same admin login on every unit, such as "admin" and "password". Anyone who knew the model could log in. California responded with a law, in effect since January 1, 2020, that requires connected devices sold there to have either a unique preprogrammed password for each device or to make the user create a new password before first use (California Civil Code section 1798.91.04). Many newer routers therefore come with a unique password on the label or force you to set one during setup. But millions of older devices still in use predate these rules, and a password printed on a sticker is visible to anyone who handles the router. The FTC's advice applies either way: change the default admin username, password and network name to something unique, and avoid your name, address or router brand.

Before You Begin

• Use a device connected to your own router, ideally with a network cable or from inside your home.
• Find the label on the router. It usually lists the default network name, Wi-Fi password, admin address and admin login.
• Know the model name. You will need it to look up instructions and firmware.
• Expect to reconnect every device after changing the Wi-Fi name or password, including smart TVs, printers and cameras. Plan 20 to 30 minutes.
• If your router came from your internet provider, it may be managed remotely, and some settings may be locked or changed through the provider's app instead.

Step 1: Open the Router's Admin Page

1. Connect to your network.
2. Open a browser and type the router's address exactly as printed on the label or in the manual. Common addresses are 192.168.0.1 or 192.168.1.1, and some brands use a web name or an app instead. Type it yourself rather than searching for it, because fake support sites imitate router login pages.
3. Sign in with the admin username and password. If nobody knows them because they were changed and forgotten, you may need a factory reset, which restores the defaults and erases your custom settings.

Many newer routers, especially mesh systems, are managed only through a phone app. In that case the same settings are in the app, often under Settings, Security or Advanced.

Step 2: Change the Admin Password

Look for a section called Administration, System, Management or Router Password. Create a long, unique password, and change the admin username too if the router allows it. The FBI's 2025 advisory on hacked routers recommends strong passwords that are unique and random. Store it in a password manager; see our comparison of free password managers. If the router's app is protected by an online account, give that account a strong password and two-step verification as well.

Step 3: Change the Wi-Fi Name and Password

Go to the Wireless or Wi-Fi section.

• Network name (SSID): choose a name that does not reveal your name, address, apartment number or router brand.
• Security mode: the FTC recommends WPA3 Personal or WPA2 Personal. WPA3 is newer and the best available. Some routers offer a "WPA2/WPA3" mixed mode, which helps older devices connect.
• Avoid WEP and WPA. The FTC calls them outdated and not secure. If those are your only options, update the firmware, and if WPA2 or WPA3 still do not appear, replace the router.
• Wi-Fi password: use a long passphrase. Our guide to creating a strong password you can remember shows how to make one you can share with family without it being weak.

Save the changes, then reconnect your devices with the new details.

Step 4: Update the Firmware

Firmware is the router's own software, and updates fix security flaws. The FTC suggests checking the manufacturer's website for a newer version, registering the router so you hear about updates, and asking your internet provider whether it updates provider-supplied routers automatically. If your router has an automatic update setting, turn it on.

Step 5: Check Whether Your Router Is Too Old

Changing a password cannot fix a router that no longer gets security updates. In a May 2025 public service announcement, the FBI warned that criminals were compromising end-of-life routers, devices the manufacturer no longer supports, using variants of TheMoon malware and turning them into proxies to hide criminal activity. The FBI said routers dated 2010 or earlier likely no longer receive software updates, and that TheMoon does not even need a password; it exploits open ports and vulnerable software. Its advice:

• if the router is at end of life, replace it with a supported model if possible;
• apply any available security patches and firmware updates;
• disable remote management, save the change and reboot the router.

To check, search the manufacturer's site for your model name plus "end of life" or "end of support", or look at the date of the last firmware release.

Step 6: Switch Off Features You Do Not Need

The FTC recommends turning off three convenience features that can weaken security:

Setting	What it does	Risk	Recommended
Remote management	Lets the router's controls be reached over the internet	Exposes the admin page to attackers; the FBI linked it to compromised end-of-life routers	Off, unless your provider requires it
WPS (Wi-Fi Protected Setup)	Connects devices with a button or PIN instead of the password	Lets devices join without the Wi-Fi password	Off
UPnP (Universal Plug and Play)	Lets devices find each other and open connections automatically	Devices can open access without you knowing	Off, unless a game or app truly needs it
Encryption mode	Scrambles traffic over the air	WEP and WPA are outdated	WPA3 or WPA2 Personal
Firewall	Filters unwanted traffic	None when on	On
Guest network	Separate network for visitors	None; reduces sharing of the main password	On if you have visitors or smart devices

If something stops working after you turn off UPnP, such as online gaming, you can turn it back on later knowing what it does.

Step 7: Turn On the Firewall and a Guest Network

The FTC notes that most routers include a built-in firewall; check that it is turned on. It also recommends a guest network with its own name and password. That means fewer people know your main Wi-Fi password, and if a guest's phone has malware, it stays off your main network and devices. Many households also put smart TVs, speakers and cameras on the guest network for the same reason.

Step 8: Review Connected Devices and Log Out

Most routers list connected devices. Look for anything you do not recognize; if you find something, change the Wi-Fi password again. When you are finished, log out of the admin page, as the FTC advises. Note what you changed and the date, and store the new passwords in your password manager.

If Your Internet Provider Controls the Router

• Use the provider's official app or website to change the Wi-Fi name and password.
• Ask whether the provider updates the firmware automatically, which the FTC suggests checking.
• Ask whether remote management is required for their support, and whether UPnP and WPS can be turned off.
• If the equipment is very old, ask for a replacement.

Common Mistakes

• Changing the Wi-Fi password but leaving the admin password at its default.
• Using the same password for both.
• Searching for the login page instead of typing the address from the label.
• Keeping a router that has not received an update in years.
• Hiding the network name and assuming that is protection; strong encryption and passwords matter far more.

How Often Should You Check?

Check for firmware updates every few months if your router does not update automatically, and review connected devices at the same time. Change the Wi-Fi password if you think it has been shared too widely, and the admin password if you think anyone else has seen it. For a broader checklist, see our guide on securing your home Wi-Fi router in 10 steps.

Frequently Asked Questions

Is the password on my router's label safe to keep?

If it is unique to your device, it is better than an old shared default, but anyone who sees the label can read it. The FTC advises changing default settings to something unique.

What if I cannot log in to my router?

Check the label and manual, then contact the manufacturer or your provider. A factory reset restores the default login but erases your custom settings.

Will changing passwords slow my internet?

No. It only changes who can connect and who can manage the router.

Do I need a new router?

Replace it if it no longer gets firmware updates, if the manufacturer lists it as end of life, or if it cannot use WPA2 or WPA3.

Does this protect me on public Wi-Fi?

No, only on your home network. See is public Wi-Fi safe? for away-from-home advice.

Who should know the admin password?

Only the person who manages the home network. Share the Wi-Fi or guest password with others, never the admin password.

Conclusion

Securing a router takes about half an hour and no special skills. Change the admin login and the Wi-Fi password to unique, strong ones, use WPA3 or WPA2, update the firmware, and turn off remote management, WPS and UPnP if you do not need them. Turn on the firewall and a guest network, and log out when you finish. If your router is too old to receive updates, replace it, because no password can fix unpatched software.

By Safe Sign In Editorial Team