Begin with the router login
Your router is the front desk of your home network. If the admin password is still the default, change it immediately. This is different from the Wi-Fi password. The admin password controls the router settings page; the Wi-Fi password controls who can join the network.
Use a long, unique admin password and store it in a password manager. If your router supports multi-factor authentication for cloud management, enable it. If you do not use remote management, turn it off so the settings page is not exposed from outside your home.
Update the router firmware
Router firmware updates fix bugs and security flaws. Log in to the router settings and look for an update section. Some routers update automatically; others require manual checks. If your router has not received updates for years, it may be time to replace it even if the Wi-Fi still works.
Do not interrupt power during an update. If you are unsure, update at a time when temporary internet downtime will not cause trouble.
Use strong Wi-Fi settings
Use WPA2 or WPA3 security where available. Avoid outdated options such as WEP. Choose a Wi-Fi password that is long, unique, and not based on your address, phone number, pet name, or business name. A good Wi-Fi password does not need to be typed often, so length matters more than memorability.
If your router offers WPS push-button setup, consider disabling it after devices are connected. WPS can be convenient, but it also increases the ways someone may attempt to join the network.
Create a guest network
A guest network is useful for visitors, smart TVs, speakers, cameras, and other devices that do not need access to your laptop or phone. Enable guest isolation if your router provides it. That setting helps keep guest devices from seeing other devices on the main network.
For smart home devices, a guest or separate IoT network can limit damage if a cheap device stops receiving updates or has a weak cloud service. The goal is not paranoia; it is basic compartmentalization.
Inventory connected devices
Open the connected devices list in your router. Rename devices you recognize so future checks are easier. If you see an unknown device, do not panic immediately. It may be a phone using a private Wi-Fi address, a printer, a streaming stick, or a guest's tablet. Compare the device list with what is physically in your home.
Remove old devices from saved network lists when possible. If you suspect the Wi-Fi password has been shared too widely, change it and reconnect only the devices you trust.
Protect the devices too
A secure router cannot fix an unpatched laptop or phone. Keep operating systems updated, remove unused apps, and use screen locks. For shared family devices, avoid giving every user administrator privileges. If a child's device gets malware, a separate account and limited permissions can reduce the damage.
Quarterly checklist
- Check for router firmware updates.
- Review connected devices and remove unknown entries.
- Confirm guest network isolation is still enabled.
- Change shared guest passwords when needed.
- Replace routers that no longer receive security updates.