Secure Home Wi Fi Network

Secure your home Wi-Fi by strengthening wireless encryption, using unique passwords, updating the router, disabling risky features, and reviewing connected devices.

Easy · 20–40 minutes, plus update and restart time

Tools

  • A computer, tablet, or phone connected to the router
  • The router's administrator login details

Materials

  • A unique Wi-Fi password of at least 14 characters
  • A separate, unique router administrator password

Safety

  • Only change settings on a router and network you own or are authorized to manage.
  • Save or record the new passwords securely before applying changes.
  • Changing Wi-Fi settings may disconnect devices temporarily; avoid doing this during important online activity.
  • Do not share the router administrator password with guests.
  • If you lose access after changing settings, use the router manufacturer's recovery instructions rather than guessing repeatedly.

Steps

  1. Step 1: Open the router settings

    • Connect your device to the home network.
    • Open a web browser or the router manufacturer's management app.
    • Sign in using the router administrator account. Use the router label, manual, or manufacturer's support site if you do not know the management address.

    Check: You can see the router's configuration dashboard. · The address and device name indicate that you are managing your own router.

  2. Step 2: Change the router administrator password

    • Open the administration, system, or account settings.
    • Replace any default administrator password with a long, unique password that is not used anywhere else.
    • Save the change and store the password in a password manager or another secure location.

    Check: The router confirms that the administrator password was changed. · You can sign in again using the new password.

  3. Step 3: Enable strong Wi-Fi security

    • Open the wireless or Wi-Fi security settings.
    • Select WPA3-Personal if every important device supports it.
    • Otherwise select WPA2-Personal with AES, or WPA2/WPA3 transitional mode if available.
    • Do not use WEP, WPA, or WPA2 with TKIP.

    Check: The selected security mode is WPA3-Personal, WPA2-AES, or a supported WPA2/WPA3 mode. · The router is not using WEP, old WPA, or TKIP.

  4. Step 4: Set a strong Wi-Fi password

    • Replace the existing Wi-Fi password with a unique password or passphrase of at least 14 characters.
    • Avoid names, addresses, phone numbers, common phrases, and passwords reused on other services.
    • Save the wireless settings.

    Check: The router confirms that the wireless settings were saved. · Your device reconnects using the new password, or you can reconnect manually.

  5. Step 5: Update the router firmware

    • Open the firmware, software update, or administration section.
    • Check for updates and install the latest official update.
    • Enable automatic security updates if the router supports them.
    • Keep the router powered on while the update is running.

    Check: The router reports that the update completed successfully. · The firmware version or update date has changed, if shown. · Internet access returns after any required restart.

  6. Step 6: Disable risky remote features

    • Disable WPS, especially PIN-based WPS.
    • Disable remote administration or management from the internet unless you have a specific, well-understood need for it.
    • Disable services you do not use, such as unnecessary port forwarding or universal plug-and-play internet exposure, if the router provides those controls.

    Check: WPS is shown as disabled. · Remote administration from the internet is shown as disabled. · Review the port-forwarding list and remove entries you do not recognize or need.

  7. Step 7: Create a guest or separate IoT network

    • Enable the guest network for visitors.
    • Use a separate password and enable the option that prevents guests from accessing local devices, if available.
    • Place smart-home devices on the guest or IoT network when practical.
    • Use WPA3 or WPA2-AES for the guest or IoT network as well.

    Check: Guests can access the internet without reaching shared computers, printers, or router settings. · Smart-home devices are separated from your primary computers where supported.

  8. Step 8: Review connected devices

    • Open the router's connected-device or client list.
    • Identify phones, computers, televisions, cameras, and smart-home devices.
    • Remove or block devices you do not recognize, then change the Wi-Fi password if unauthorized access is suspected.

    Check: Every listed device is recognized or has been investigated. · The router has no unexplained connected devices after the password change.

  9. Step 9: Finish and verify

    • Reconnect household devices using the new Wi-Fi password.
    • Test internet access from several devices.
    • Confirm that important local services, such as printers or media devices, still work.
    • Schedule a periodic review of firmware, connected devices, and security settings.

    Check: Internet access works on the primary and guest networks. · Expected devices reconnect successfully. · The router still shows strong encryption and automatic updates where supported.

Back to search
Secure Home Wi Fi Network0 of 9 steps done

Written by AI, not checked by a tradesperson. How this works

Step-by-Step Instructions

Step 1 of 9

Open the router settings

Diagram for step 1: Open the router settings
Fig. 1Open the router settings
  • Connect your device to the home network.
  • Open a web browser or the router manufacturer's management app.
  • Sign in using the router administrator account. Use the router label, manual, or manufacturer's support site if you do not know the management address.
Check

You can see the router's configuration dashboard. • The address and device name indicate that you are managing your own router.

Was this step clear?
Step 2 of 9

Change the router administrator password

Diagram for step 2: Change the router administrator password
Fig. 2Change the router administrator password
  • Open the administration, system, or account settings.
  • Replace any default administrator password with a long, unique password that is not used anywhere else.
  • Save the change and store the password in a password manager or another secure location.
Check

The router confirms that the administrator password was changed. • You can sign in again using the new password.

Was this step clear?
Step 3 of 9

Enable strong Wi-Fi security

Diagram for step 3: Enable strong Wi-Fi security
Fig. 3Enable strong Wi-Fi security
  • Open the wireless or Wi-Fi security settings.
  • Select WPA3-Personal if every important device supports it.
  • Otherwise select WPA2-Personal with AES, or WPA2/WPA3 transitional mode if available.
  • Do not use WEP, WPA, or WPA2 with TKIP.
Check

The selected security mode is WPA3-Personal, WPA2-AES, or a supported WPA2/WPA3 mode. • The router is not using WEP, old WPA, or TKIP.

Was this step clear?
Step 4 of 9

Set a strong Wi-Fi password

Diagram for step 4: Set a strong Wi-Fi password
Fig. 4Set a strong Wi-Fi password
  • Replace the existing Wi-Fi password with a unique password or passphrase of at least 14 characters.
  • Avoid names, addresses, phone numbers, common phrases, and passwords reused on other services.
  • Save the wireless settings.
Check

The router confirms that the wireless settings were saved. • Your device reconnects using the new password, or you can reconnect manually.

Was this step clear?
Step 5 of 9

Update the router firmware

Diagram for step 5: Update the router firmware
Fig. 5Update the router firmware
  • Open the firmware, software update, or administration section.
  • Check for updates and install the latest official update.
  • Enable automatic security updates if the router supports them.
  • Keep the router powered on while the update is running.
Check

The router reports that the update completed successfully. • The firmware version or update date has changed, if shown. • Internet access returns after any required restart.

Was this step clear?
Step 6 of 9

Disable risky remote features

Diagram for step 6: Disable risky remote features
Fig. 6Disable risky remote features
  • Disable WPS, especially PIN-based WPS.
  • Disable remote administration or management from the internet unless you have a specific, well-understood need for it.
  • Disable services you do not use, such as unnecessary port forwarding or universal plug-and-play internet exposure, if the router provides those controls.
Check

WPS is shown as disabled. • Remote administration from the internet is shown as disabled. • Review the port-forwarding list and remove entries you do not recognize or need.

Was this step clear?
Step 7 of 9

Create a guest or separate IoT network

Diagram for step 7: Create a guest or separate IoT network
Fig. 7Create a guest or separate IoT network
  • Enable the guest network for visitors.
  • Use a separate password and enable the option that prevents guests from accessing local devices, if available.
  • Place smart-home devices on the guest or IoT network when practical.
  • Use WPA3 or WPA2-AES for the guest or IoT network as well.
Check

Guests can access the internet without reaching shared computers, printers, or router settings. • Smart-home devices are separated from your primary computers where supported.

Was this step clear?
Step 8 of 9

Review connected devices

Diagram for step 8: Review connected devices
Fig. 8Review connected devices
  • Open the router's connected-device or client list.
  • Identify phones, computers, televisions, cameras, and smart-home devices.
  • Remove or block devices you do not recognize, then change the Wi-Fi password if unauthorized access is suspected.
Check

Every listed device is recognized or has been investigated. • The router has no unexplained connected devices after the password change.

Was this step clear?
Step 9 of 9

Finish and verify

Diagram for step 9: Finish and verify
Fig. 9Finish and verify
  • Reconnect household devices using the new Wi-Fi password.
  • Test internet access from several devices.
  • Confirm that important local services, such as printers or media devices, still work.
  • Schedule a periodic review of firmware, connected devices, and security settings.
Check

Internet access works on the primary and guest networks. • Expected devices reconnect successfully. • The router still shows strong encryption and automatic updates where supported.

Was this step clear?

Common Mistakes

  • ×Reusing the Wi-Fi password for email, banking, or other accounts.
  • ×Choosing WPA2 with TKIP instead of WPA2-AES.
  • ×Leaving the default router administrator password unchanged.
  • ×Disabling the firewall or other protections without a specific reason.
  • ×Forgetting to update smart-home devices after changing the Wi-Fi password.
  • ×Using the main network for guests when a guest network is available.
  • ×Leaving WPS or remote administration enabled for convenience.

When to Call a Professional

  • Contact the router or internet service provider if you cannot access the router settings or recover the administrator account.
  • Seek qualified technical help if the router behaves unexpectedly after a firmware update or repeatedly resets.
  • If you find signs of unauthorized access, contact your internet service provider or a cybersecurity professional for investigation and account recovery.

Notes

  • Menu names vary by router manufacturer and firmware version.
  • WPA3 provides the strongest option when supported by the router and client devices.
  • A guest network improves separation but is not a substitute for updating and securing each smart-home device.
  • Keep a secure record of the router administrator and Wi-Fi passwords.

Related guides

Finding related guides…

Was this guide helpful?