Your home router connects nearly every device you own to the internet: phone, laptop, cameras, smart TV, even light switches. One weak setting on that box can open many devices at once. The good news: most fixes take a few minutes in the router's admin panel.
Why the router is often the weak point
Home incidents rarely start with a sophisticated attack. They usually start with default settings left unchanged: a standard admin password, old firmware, or a feature like WPS left switched on. Automated scanners on the internet look for routers in exactly this state all day. Locking the front door makes most of them move on.
Practical steps to secure the router
Work top to bottom. Each step can be checked again later, so you do not have to do them all at once.
1. Change the default admin credentials
Open the router admin panel (usually 192.168.1.1 or 192.168.0.1) and change the default admin username and password. Many routers ship with a pair like admin/admin or admin/password, and those lists are public. Use a long, unique password and store it in a password manager.
2. Rename the network and use WPA2 or WPA3
Change the default SSID (for example TP-LINK_1234) to a name that does not reveal the brand or model. Then make sure encryption is set to WPA2 or, if supported, WPA3. Avoid WEP or old WPA. Both can be cracked in minutes. Use a strong Wi-Fi password that is different from the admin password.
3. Update the router firmware
Look for a firmware or update menu in the admin panel. New firmware patches flaws attackers already know about. If the router offers automatic updates, turn them on. If your device is several years old and no longer receives updates, it is time to consider replacing it.
4. Separate guests and smart devices
Turn on a guest network for visitors and for Internet of Things devices like cameras or smart speakers. IoT devices are rarely updated and are frequent targets. Isolating them on a separate network limits the damage if one is compromised. Give the guest network its own password.
5. Turn off unneeded features and watch the device list
Disable WPS (vulnerable through its PIN), UPnP if you do not need it, and remote management from the internet. Then check the list of connected devices from time to time. An unfamiliar name or MAC address is worth investigating.
Example: a router left on default credentials
Someone sets up a new router and leaves the admin password at admin/password. An internet scanner finds it within hours. The attacker logs in, changes the DNS server so requests to a bank are redirected to a fake page, and turns remote management back on so they can return whenever they want. The user notices nothing until they try to log in to the bank and see a strange page. Changing the admin password on day one would have cut this scenario off entirely.
If you suspect the network was compromised
Start with the step that limits the damage. Unplug the router briefly, then power it back on. Once it is up, change the admin and Wi-Fi passwords, update the firmware, and turn off remote management. Check whether the DNS setting is still automatic or has been changed. If you are unsure the device is clean, do a factory reset and configure it again from scratch.
Common mistakes to avoid
- Leaving WPS switched on. The WPS PIN can be brute-forced. Turn the feature off in the admin panel.
- Putting every device on one network. One compromised smart camera should not open a path to a work laptop.
- Never checking firmware. An unpatched router keeps old, publicly known flaws forever.
Frequently asked questions
Should I use WPA3?
Use WPA3 if both your router and devices support it. If not, WPA2 with a strong password is still fine for home use. Avoid WEP and WPA.
Do I need to replace an old router?
If the manufacturer no longer ships firmware updates for it, replace it. A router without updates keeps flaws that are never patched.
Does a guest network slow the internet down?
The effect is small for normal use. The benefit of isolating IoT and guest devices far outweighs a barely noticeable drop in speed.
Sources and further reading
Editorial note: This article is educational and defensive. Menus and options differ between routers. Use your device's official manual for the exact technical steps.
