Most people set up their home WiFi once and never think about it again. That's understandable — but it also means many home networks are running with default settings that are surprisingly easy to exploit.
The good news: locking down your home network takes about 20 minutes and you only have to do it once.
Step 1: Change Your Router's Admin Password
Every router has an admin panel — a web interface where you can configure settings. The problem is that most routers ship with a default username and password (usually "admin" / "admin" or "admin" / "password") that's the same for every router of that model.
If someone gets onto your network, they can log into your router with those defaults and change anything they want.
How to fix it:
- Type
192.168.1.1(or192.168.0.1) into your browser's address bar - Log in with the default credentials (check the sticker on your router)
- Find the admin password setting and change it to something strong
Write this password down and keep it somewhere safe — you won't need it often.
Step 2: Use a Strong WiFi Password
Your WiFi password is the lock on your front door. If it's weak — or if you've been sharing it with every houseguest for the last 5 years — it's time to change it.
A good WiFi password is:
- At least 12 characters
- Not a dictionary word or phrase
- Something you're willing to re-enter on all your devices
Something like mountain-desk-42-purple is much better than smith2019.
After you change it: You'll need to reconnect all your devices. This is a good opportunity to audit what's actually supposed to be on your network.
Step 3: Enable WPA3 (or WPA2 at Minimum)
WPA3 is the current security standard for WiFi encryption. WPA2 is still acceptable. If your router is showing WPA or WEP as options, your connection is not secure.
In your router settings, look for "Wireless Security" or "WiFi Security" and make sure it's set to WPA3 or WPA2-AES.
Step 4: Keep Your Router's Firmware Updated
Router manufacturers regularly release firmware updates that patch security vulnerabilities. Many people never install these.
In your router's admin panel, look for a "Firmware Update" or "Router Update" section. Some newer routers update automatically — check if that option is available and enable it.
Step 5: Set Up a Guest Network for Visitors
Most modern routers let you create a separate "guest" network. Use it for:
- Houseguests and visitors
- Smart home devices (TVs, thermostats, cameras, doorbells)
- Any device you don't fully trust
Guest networks are isolated from your main network, which means if a guest's device is compromised, it can't reach your computer or NAS drive.
Step 6: Disable Remote Management
Remote management lets you access your router from outside your home. Most people don't need this, and leaving it on is a security risk. Make sure it's disabled in your router settings unless you specifically know you use it.
One More Thing: Check What's Connected
Periodically look at the connected devices list in your router admin panel. If you see anything unfamiliar, that's worth investigating. Unknown devices could be a neighbor who cracked your old password, or a forgotten smart device — either way, worth knowing.
If any of this feels overwhelming, we can walk through your home network setup remotely and make sure everything is configured correctly. Book a session here.
