How to Secure Your Home Wi-Fi Router in 10 Steps

Last updated: October 8, 2026

Wi-Fi router surrounded by ten numbered security settings

Your router is the front door to your home network. Every phone, laptop, smart TV and camera passes through it. Yet many people never change a single setting after the internet provider installs it, leaving default passwords and outdated software in place.

The steps below take about half an hour and need no special skills. Router menus differ widely between brands and internet providers, so this guide describes settings by name and purpose rather than exact button positions. If you cannot find an option, search your router's model number plus "manual", or check your provider's support pages. The guidance here follows the FTC, the FCC, CISA and a 2025 FBI warning about old routers.

Before You Start: Reach Your Router's Settings

Most routers are managed through a web page. Connect to your home network, then open a browser and enter the router's address. Common ones are printed on a sticker on the router, alongside the default login details. Typical addresses include 192.168.0.1 and 192.168.1.1, but yours may differ. Many newer routers also have a phone app instead of, or in addition to, a web page. The FTC's guide to securing your home Wi-Fi network covers the same basics, and suggests searching online for "how to change [your router manufacturer] admin password" if you are stuck, or contacting the manufacturer directly.

If you do not have the login, and it is not on the sticker, your internet provider can usually tell you how to get it. As a last resort, a factory reset button returns the router to default settings, but that also erases your configuration, so use it only if you know how to set the connection up again.

Router Security at a Glance

Here is the whole checklist in one place. Each step is explained below.

Step	Setting to look for	What to do
1	Admin password / administrator login	Replace the default with a long, unique password
2	Wi-Fi name (SSID)	Rename it to something neutral, with no name, address or router brand
3	Wireless security / encryption	Choose WPA3-Personal, or WPA2/WPA3 mixed, or WPA2-AES
4	Wi-Fi password / passphrase	Use a long passphrase, different from the admin password
5	WPS	Turn it off
6	Firmware / software update	Update now and turn on automatic updates; replace end-of-life routers
7	Remote management, UPnP	Turn remote management off; turn UPnP off unless something needs it
8	Guest network	Turn it on for visitors and smart devices
9	Connected devices / clients	Remove or investigate anything you don't recognize
10	Firewall, DNS, port forwarding, logs	Firewall on, DNS as expected, unknown rules removed

Step 1: Change the Router Admin Password

The admin password controls the router's settings, and it is different from your Wi-Fi password. The FTC explains why this matters: if a hacker got into the admin side of your router, they could change the settings, including your Wi-Fi password, and undo every other step you take. Default admin passwords are often weak or printed on the device, or even shared across many units of the same model, and CISA notes that default passwords are easy to find online.

Change it to a long, unique password and store it in a password manager. The FBI's 2025 router warning recommends passwords that are unique and random, with at least 16 and no more than 64 characters, and suggests disabling password hints. If the router offers a separate admin username, change that too. When you finish making changes, log out of the admin page, as the FTC recommends.

Step 2: Change the Wi-Fi Name (SSID) Sensibly

The Wi-Fi name is visible to your neighbors. Avoid including your surname, address or apartment number; the FTC also advises against using your router brand. Renaming from the default is not strong security in itself, but a default name can reveal the router brand or model, which, as CISA points out, tells an attacker which known weaknesses to try. Pick something neutral.

Step 3: Use the Strongest Wi-Fi Encryption Available

Look for the wireless security or encryption setting. The FTC calls WPA3 the newer and best encryption available, and says WPA2 will also work. The FCC recommends WPA3 if your devices are compatible, or WPA2 if they are older, and describes the old WEP standard as obsolete. The FCC also notes that some routers come out of the box with encryption turned off, so check rather than assume.

Setting you may see	Use it?	Notes
WPA3-Personal (WPA3-SAE)	Yes, first choice	Newest standard; needs devices that support it
WPA2/WPA3 mixed (transition) mode	Yes	A smoother transition when some older devices do not support WPA3
WPA2-Personal (AES, sometimes "WPA2-PSK")	Yes, if it's the best on offer	Still widely supported; choose AES rather than TKIP
WPA or WPA/TKIP	No	The FTC describes WPA as outdated and not secure
WEP	No	Obsolete, according to the FCC; can be broken quickly
Open / None	No	Anyone in range can connect and may see what you do

If your router only offers WEP or WPA, the FTC suggests updating the router software and checking again. If WPA2 or WPA3 still is not available, consider getting a new router.

Step 4: Set a Strong Wi-Fi Password

Your Wi-Fi password should be long. A passphrase of four or more unrelated words, or a random string of 16 or more characters, is far harder to guess than a short word with a number. Our guide to creating a strong password you can remember shows how. Do not reuse your router admin password or any account password. If you shared the old password widely, changing it removes people who no longer need access. Remember that you will need to reconnect your devices afterward.

Step 5: Turn Off WPS

Wi-Fi Protected Setup lets devices connect by pressing a button or entering a short PIN. The FTC lists WPS among convenient features that can make your network less secure, and the PIN method has known design weaknesses that let attackers guess it. If your router has WPS, disable it. Connecting a device with the normal password takes moments.

Step 6: Keep the Router Firmware Updated

Firmware is the router's operating system. Manufacturers release updates to fix security flaws, and old routers that no longer receive them become a liability. Look for "firmware update" or "software update" in the settings, and enable automatic updates if available. The FTC suggests registering your router with the manufacturer so you hear about new versions. Some routers supplied by an internet provider are updated remotely by the provider instead; the FTC suggests asking your provider whether it sends automatic updates.

Is your router too old to keep?

In May 2025 the FBI warned that criminals were taking over end-of-life routers, meaning models the manufacturer no longer supports with software updates or security patches, and using them as proxies to hide their own activity. The FBI said routers dated 2010 or earlier likely no longer receive updates, and that some compromised routers had remote administration turned on. Its advice: if the router is at end of life, replace it with an updated model if possible; apply any available updates immediately; and turn off remote management, save the change and reboot.

To check, look up your router's model number on the manufacturer's support site and see whether recent firmware is listed or the model is marked as end of life or discontinued.

Step 7: Turn Off Remote Administration

Remote management (also called remote access or web access from WAN) lets people reach your router's settings from the internet. Unless you have a specific need and know how to secure it, switch it off; both the FTC and the FBI recommend this. The FTC also recommends turning off universal plug and play (UPnP), which lets devices find each other on the network. Some games and apps depend on UPnP, so test your applications afterward and only turn it back on if something you need stops working.

Step 8: Set Up a Guest Network

A guest network gives visitors internet access without letting them reach your computers and file shares. The FTC gives two reasons it is a good security move: fewer people have your main Wi-Fi password, and if a guest's phone has malware, it won't get onto your main network and devices. It is also a good place for smart TVs, cameras and other Internet of Things devices that rarely get security updates. Give it a different password and keep the "allow guests to see each other and local devices" option off, if the router provides one.

Step 9: Review Connected Devices

Find the list of connected devices, often called "device list", "clients" or "attached devices". Compare it with what you own. Names can be cryptic, but unfamiliar entries are worth investigating. If you find something you cannot account for, change your Wi-Fi password and check again. Some routers also let you see and block devices by their hardware (MAC) address. MAC filtering can add a hurdle, but it is not strong protection by itself, because addresses can be copied. Many devices also change their address: Apple devices, for example, use a different private Wi-Fi address for each network by default, so a phone may appear under a new address.

This router check covers your home network. To review which phones, computers and apps are signed in to your online accounts, see our guide to checking which devices and apps have access to your account.

Step 10: Check the Extra Features and Logs

Firewall: Leave the built-in firewall switched on. The FTC notes most routers come with one, so check that it is enabled.
DNS settings: Make sure the router's DNS servers are those from your provider or a public DNS service you chose. Attackers who compromise a router sometimes change DNS to redirect you to fake sites.
Port forwarding: Remove rules you do not recognize.
Logs and notifications: Enable alerts if the router supports them.

Signs Your Router May Be Compromised

The FBI lists these commonly identified signs of malware on routers:

The router is overheating.
You have problems with connectivity.
Settings have changed and you don't recognize the changes.

If you see these, the FBI recommends applying any security and firmware updates, changing your password and rebooting the router. If your router is at end of life, replacement is the lasting fix. If you think your information was misused, you can file a complaint with the FBI's Internet Crime Complaint Center at ic3.gov.

Optional Extras

A VPN can encrypt traffic between your device and a provider's server, which is more useful on other people's networks than at home. Some routers can run a VPN for the whole household, but that requires compatible hardware and setup. Security software on your computers and phones is a separate layer that protects the devices themselves, whatever network they use. Neither replaces a well-configured router. If you travel or work from cafes, read whether you actually need a VPN and our tips for using public Wi-Fi safely.

Protect the accounts you manage from home as well. Turning on two-factor authentication for your email and your internet provider's account means a stolen password is not enough to get in.

Frequently Asked Questions

Should I hide my Wi-Fi network name (SSID)?

Hiding the SSID stops little; determined attackers can still detect the network, and it can make connecting devices harder. Strong encryption and a strong password matter far more. At a minimum, change the default name, as CISA recommends.

How often should I change my Wi-Fi password?

There is no fixed rule. Change it if you suspect it leaked, after sharing it with many people, or when someone who had it should no longer have access.

Is my provider's router secure by default?

Not necessarily. Provider routers often ship with reasonable settings, but they may use weak default passwords or leave features enabled. Check the settings listed above, and note that some providers restrict what you can change. Ask your provider whether it updates the router automatically.

Does a new router make me safer?

If your current one no longer receives security updates, yes. The FBI specifically recommends replacing end-of-life routers. A newer router with automatic updates and WPA3 support is a genuine improvement. A new router with default settings still needs configuring.

Why does my router have two passwords?

The FTC explains that one is the Wi-Fi network password your devices use to connect, and the other is the router admin password that lets someone change settings. Change both, and make them different.

What if I lock myself out after changing settings?

Write down every change as you make it. If you are truly stuck, a factory reset restores the defaults, though you will need to set up your internet connection again.

Related Guides

Conclusion

Securing a router does not require deep technical knowledge. Change the admin password, use WPA3 or WPA2 with a strong passphrase, disable WPS, remote access and UPnP, keep firmware updated, and put guests and smart gadgets on a separate network. If your router is old enough that it no longer gets updates, replace it. Do this once, revisit it every few months, and your home network will be a much harder target.

Search This Blog

Safe Sign In