Secure your home router: the overlooked weak point

Every device in your home — phones, laptops, smart speakers, cameras — connects to the internet through one piece of hardware: your router. It is the front door to your entire digital life, and yet it is the device people configure once and forget for years. A poorly secured router undermines the security of everything behind it. Here is how to lock it down.

Why the router matters so much

Compromise a single phone and an attacker gets that phone. Compromise the router and they can potentially see traffic from every device on your network, redirect you to malicious sites, and use your connection as a foothold. Routers are attractive targets precisely because they are powerful and neglected. The good news is that a handful of changes dramatically improve your security.

Step 1: change the default admin password

Routers ship with default administrator credentials that are publicly documented and identical across thousands of units. Leaving them unchanged is like leaving your front door key under the mat. Log into your router's admin interface and set a strong, unique administrator password immediately. This is the single most important step.

Step 2: update the firmware

Router firmware contains security vulnerabilities that manufacturers patch over time — but only if you install the updates. Check your router's admin panel for a firmware update option and apply any available. Enable automatic updates if your router supports them. Outdated firmware is one of the most common ways home networks are compromised.

Step 3: use strong Wi-Fi encryption

• Set encryption to WPA3 if your router supports it, or WPA2 at minimum. Never use the old, broken WEP standard or leave the network open.
• Choose a strong Wi-Fi password — long and not easily guessed. This is separate from the admin password and protects who can join your network.

Step 4: rethink the network name

Avoid a network name (SSID) that reveals your identity, address or router model, since the model can hint at known vulnerabilities. A neutral name gives away nothing useful to anyone scanning nearby networks.

Step 5: set up a guest network

Most modern routers let you create a separate guest network. Use it for visitors and, importantly, for smart-home devices, which are often poorly secured. Isolating these on a guest network means that if one is compromised, the attacker cannot easily reach your computers and phones on the main network.

Step 6: disable risky features you do not use

• WPS (the push-button pairing feature) has known weaknesses; disable it if you do not rely on it.
• Remote administration lets you manage the router from the internet — convenient but a real risk. Turn it off unless you genuinely need it.
• UPnP can let devices open ports automatically; disabling it is more secure, though it occasionally affects some apps and games.

Step 7: review connected devices

Your router's admin panel lists everything connected to your network. Review it periodically. Anything you do not recognise could be an unauthorised user or a device you forgot about. Unknown devices warrant changing your Wi-Fi password to evict them.

Signs your router may be compromised

• Your internet is slow or behaves erratically for no clear reason
• You are redirected to unexpected websites or see unusual pop-ups
• Your DNS settings have changed without your action
• Unknown devices appear in the connected-devices list

If you suspect compromise, update the firmware, reset the router to factory settings, and reconfigure it from scratch with the steps above. If a site you were redirected to looked suspicious, you can check it with the URL scanner.

A few minutes, lasting protection

Router security feels intimidating because the admin interface is unfamiliar, but the essential steps take only a few minutes and rarely need repeating beyond occasional firmware updates and device reviews. Given that your router protects every connected device in your home, it is some of the highest-value security work you can do. Set a reminder to check for firmware updates a few times a year, and your network's front door stays locked.

Frequently asked questions