How to Secure Your Home Wi-Fi Router

Your home Wi-Fi router connects computers, phones, televisions and smart devices to the internet. Because it manages traffic between these devices and the wider network, its security settings matter.

A poorly secured router can expose your network to unauthorised access, malicious configuration changes and privacy risks. Fortunately, several practical steps can reduce these risks.

1. Identify Your Router and Its Settings

Before changing anything, identify your router's manufacturer, model and internet provider. Look for the model number on the device label or in your provider's documentation.

1. Connect to your own home Wi-Fi network.
2. Open your router manufacturer's official app or administration page.
3. Use the documented local router address or gateway address.
4. Sign in with your authorised administrator credentials.

Common local gateway addresses include 192.168.1.1 and 192.168.0.1, but yours may differ. Avoid entering router passwords into unfamiliar websites or third-party tools.

2. Change the Administrator Password

The administrator password protects the router's configuration. It is different from the password people use to connect to Wi-Fi.

• Replace any default administrator password.
• Use a long, unique password or passphrase.
• Store it securely in a trusted password manager.
• Enable administrator MFA if the router supports it.

Never reuse your email, banking or Microsoft 365 password as the router administrator password.

3. Enable WPA3 or WPA2-AES Encryption

Wi-Fi encryption helps protect wireless communication and prevents unauthorised users from joining your network without the appropriate credentials.

• Use WPA3-Personal where supported.
• Otherwise use WPA2-Personal with AES encryption.
• Avoid WEP, WPA and TKIP-only configurations.
• Use a strong, unique Wi-Fi password.

Some older smart devices may not support WPA3. If you need compatibility mode, review the security trade-offs and consider a separate network for older devices.

4. Disable WPS Where Practical

Wi-Fi Protected Setup, or WPS, can simplify connecting devices. However, certain implementations, especially WPS PIN methods, have known security weaknesses.

If your router allows it, disable WPS and connect devices using your normal Wi-Fi credentials. Consult the manufacturer if WPS is required for a particular device.

5. Keep Router Firmware Updated

Router firmware is the software running inside the device. Manufacturers release updates to address vulnerabilities, improve reliability and correct security problems.

1. Open the official router administration interface.
2. Find Firmware Update, Software Update or System Update.
3. Check whether automatic updates are available.
4. Install updates from the manufacturer or internet provider.
5. Allow the router to restart without interrupting power.

6. Secure Your Guest Wi-Fi Network

A guest network allows visitors to access the internet without necessarily joining the same network as your personal computers and sensitive devices.

• Use a separate guest network name and password.
• Enable guest isolation where supported.
• Disable guest access to your local network if unnecessary.
• Turn off the guest network when no longer needed.

Check your router's documentation because guest isolation features differ between models.

7. Review Remote Administration

Remote administration allows router settings to be managed from outside your home network. This can increase exposure if configured insecurely.

Disable internet-facing administration unless you have a specific, properly secured requirement. If remote access is necessary, use the manufacturer's supported security controls and MFA where available.

8. Understand UPnP and Port Forwarding

Universal Plug and Play (UPnP) can automatically configure network connections for applications. Port forwarding exposes selected services through the router.

Review whether these features are required. Remove unnecessary port-forwarding rules and consider disabling UPnP if your applications do not depend on it.

Avoid exposing remote desktop, router administration or file-sharing services directly to the internet without appropriate security architecture.

9. Check Connected Devices

Most routers provide a list of connected devices. Reviewing this list can help identify unfamiliar connections or devices that are no longer used.

1. Open the connected devices or client list.
2. Compare device names with your household equipment.
3. Investigate unfamiliar devices before blocking them.
4. Change Wi-Fi credentials if unauthorised access is confirmed.
5. Reconnect trusted devices using the new credentials.

Device names and MAC addresses can be misleading. Some phones also use randomised MAC addresses, so an unfamiliar entry is not automatically an attacker.

10. Protect Smart Home Devices

Smart televisions, cameras, printers and other connected devices can introduce additional risks.

• Install device updates when available.
• Change default device passwords.
• Disable unnecessary cloud and remote access features.
• Use an isolated IoT network if supported.
• Replace devices that no longer receive security updates.

What If You Cannot Access Your Router?

First check your internet provider's instructions, router label and official management application. Some provider-managed routers restrict administrator access or use a dedicated customer portal.

Do not factory-reset your router simply because you cannot sign in. A reset may erase important internet connection settings and disconnect your household. Contact your provider for recovery steps.

Final Home Wi-Fi Security Checklist

• Identify your router model and support status.
• Use a unique administrator password.
• Enable WPA3 or WPA2-AES.
• Use a strong Wi-Fi password.
• Disable unnecessary WPS features.
• Keep router firmware updated.
• Secure guest network access.
• Disable unnecessary remote administration.
• Review UPnP and port forwarding.
• Check connected devices periodically.
• Update and isolate smart devices where possible.

Keep Your Home Network Secure

Home network security requires ongoing attention. Review your router settings after major updates, when adding new devices and whenever you suspect unauthorised network access.

The steps in this guide are general recommendations. Exact menus and available controls depend on your router model, firmware and internet provider.

Back to Knowledge Centre