Home Network Security
Harden your home router, segment your network, and keep every connected device safer.
Why Your Router Matters More Than You Think
Every device in your home — laptops, phones, tablets, smart TVs, baby monitors — connects to the internet through one piece of equipment: your router. If an attacker compromises your router, they can see and manipulate traffic from every device on your network. That makes it the single most important security device in your home.
Most people set up their router once and never touch it again. That's a problem, because the default settings on most consumer routers prioritize convenience over security.
The First Thing to Change: Admin Credentials
Your router has an administration panel — usually accessible by typing 192.168.1.1 or 192.168.0.1 into a browser. The default username and password (often admin/admin or admin/password) are publicly documented for every router model ever made.
Change both the admin username and password immediately. Use a strong, unique password — ideally generated by a password manager. This password protects your entire network configuration.
Disable Remote Management
Many routers ship with remote management enabled, which means the admin panel can be accessed from the internet — not just from inside your home. Unless you have a specific reason to manage your router remotely, disable this feature entirely.
Look for settings labeled:
- Remote Management
- Remote Administration
- WAN Access to Web Interface
All of these should be set to off.
Change the Default SSID
Your network name (SSID) shouldn't broadcast your router model. A name like NETGEAR-R7000 tells an attacker exactly what firmware exploits to try. Choose something that doesn't identify you personally either — skip TheSmithFamily in favor of something neutral.
Use WPA3 (or WPA2-AES at Minimum)
Wireless encryption has evolved significantly:
- WEP — Broken. Never use this.
- WPA/TKIP — Deprecated and vulnerable.
- WPA2-AES — Still solid if configured correctly.
- WPA3 — The current standard with stronger handshake protection.
If your router supports WPA3, enable it. If your older devices can't connect via WPA3, use WPA2/WPA3 transitional mode. If your router only supports WPA2, make sure it's set to AES only (not TKIP).
Set a Strong Wi-Fi Password
Your Wi-Fi password should be at least 16 characters. A passphrase like correct-horse-battery-staple is both strong and easy to share with guests. Avoid dictionary words on their own, family names, or addresses.
Keep Notes
Document your router's admin URL, admin credentials, Wi-Fi password, and any configuration changes you make. Store these in your password manager — not on a sticky note on the router itself.
Your router is the foundation of your home's digital security. Spending 20 minutes hardening it pays dividends for every device that connects through it.