Lock Down Your Home Wi-Fi and Router: 10 Settings to Check

If your home Wi-Fi was set up by your internet company, your kid, your neighbor, or whoever happened to be standing closest to the router that day — and nobody’s touched it since — you may have a problem.

Your router is the front door to your home network. Your computers, phones, tablets, printer, TV, cameras, and every “smart” gadget you own sit behind it. Most people plug it in, connect to Wi-Fi, and hope for the best.

That’s not security. That’s wishful thinking with blinking lights.

Prefer to watch instead of read? Here’s the full walkthrough — or skip it and keep reading below.

Before you start: every router brand puts these settings in different places and calls them different things, because apparently we’re not allowed to have one normal name for anything. Log into your router’s app or admin page (the address is usually on a sticker on the router) and look for the closest match to each setting below. Take a screenshot of anything before you change it.

Step 1: Change the Router Admin Password

Your Wi-Fi password and your router admin password are two different things. The Wi-Fi password lets devices connect. The admin password lets someone log into the router and change its settings — your Wi-Fi, your DNS, what’s open to the internet, who’s allowed on.

That second one matters more. Change it first. Not “admin,” not “password,” not your dog’s name, and not the password you use for email or banking. Make it unique and store it in a password manager.

Step 2: Update the Router’s Firmware

Your router runs software, and that software needs security updates. People update their phones, their PCs, and every app on earth — but the box sitting between their house and the internet hasn’t been touched since it was installed.

Look for Firmware update, Software update, or System update. Install anything available, and turn on automatic updates if the router offers it.

If your router hasn’t received an update in years, or the manufacturer no longer supports it, it’s time to replace it. You don’t need the most expensive router on the shelf. You need one that still gets security updates. An unsupported router isn’t a bargain. It’s a future problem with antennas.

Step 3: Use WPA2 or WPA3

In the wireless settings, find the security mode. The simple rule:

• WEP or plain WPA: change it. Those are obsolete.
• WPA2-Personal: the minimum.
• WPA3-Personal: great, if your router and devices support it. A mixed WPA2/WPA3 mode is fine if you have older devices too.

If your router can’t do WPA2, stop treating it like a family heirloom. Replace it.

Step 4: Use a Real Wi-Fi Password

Your Wi-Fi password should be long and unique — not your family name plus the year, your street address, your phone number, or your favorite team. A long phrase you can type but nobody could guess works well.

Know what happens next: every device will need the new password — phones, laptops, TVs, and that mystery device named ESP-4F2A9C. So don’t change it five minutes before a Zoom call. Pick a quiet time, change it, and reconnect what you actually use. Anything that never gets reconnected probably didn’t need to be on your network anyway.

Step 5: Turn Off WPS

WPS (Wi-Fi Protected Setup) lets devices join with a button press or a short PIN instead of the full password. It was designed for convenience, and convenience is where security goes to die. The PIN method in particular has a long history of weaknesses.

Turn it off. Typing the real Wi-Fi password is slightly annoying. Slightly annoying is better than leaving a shortcut open forever.

Step 6: Set Up a Guest Network

Visitors don’t need the same network your PC, printer, and backup drive are on. I’m not saying your relatives are hackers. I’m saying their phones and laptops aren’t your responsibility.

Turn on the guest network, give it its own password, and if there’s an option to block guests from accessing your local network, turn that on. Guests get internet. They don’t get to poke around your devices.

Step 7: Put Smart Devices on the Guest Network Too

Smart TVs, doorbells, cameras, thermostats, smart plugs — some are fine, and some are cheap little computers with terrible update histories. If your router makes it easy, put them on the guest network or a separate IoT network. Your smart light bulb doesn’t need to share a network with your tax documents.

If your router doesn’t make it easy, don’t panic. This is about removing the easy risks, not building Fort Knox in your living room.

Step 8: Check What’s Connected

Look for Connected devices, Attached devices, or Device list. You’ll see helpful names like Dads-iPhone and LivingRoomTV… and unhelpful ones like Unknown Device and android-8c91a.

Rename the ones you recognize so you know them later. Remove old phones, old tablets, and old guest devices. If something is truly unrecognizable, investigate before you panic — it’s usually something boring. Your network shouldn’t be a museum of everything that’s connected since 2006.

Step 9: Turn Off Remote Administration

It might be called Remote management, WAN management, or Access from internet. When it’s on, your router’s login page may be reachable from the internet.

For most homes: off. You don’t need to manage your router from a hotel or the frozen food aisle. (Some routers are managed entirely through the manufacturer’s phone app — that’s different, and fine, as long as that app account has a strong password and two-step sign-in.)

Step 10: Review Port Forwarding

Port forwarding lets traffic from the internet reach something inside your home. Sometimes games, cameras, or servers need it. Often, people forget it’s there.

Don’t add rules unless you know exactly why. If rules already exist, don’t delete everything in a panic — screenshot them, figure out what each is for, and remove the ones for devices you no longer own or can’t explain. Security isn’t randomly smashing buttons and hoping the internet still works. That’s how you spend Saturday arguing with a printer.

The Short Version

1. Change the router admin password.
2. Update the router’s firmware (and replace it if it’s no longer supported).
3. Use WPA2 or WPA3.
4. Use a long, unique Wi-Fi password.
5. Turn off WPS.
6. Set up a guest network.
7. Put smart devices on it if you can.
8. Clean up the connected-devices list.
9. Turn off remote administration.
10. Review port forwarding before keeping anything.

Your home Wi-Fi doesn’t need to be perfect. It just shouldn’t still be running on default settings and pure optimism. Hope isn’t a network security strategy.

Stay grumpy.