Think about how much care goes into the front door of a house. Deadbolt, maybe a camera, definitely a key you do not hand out casually. Now think about the little box with the blinking lights behind the TV, the one that every phone, laptop, thermostat, and video doorbell in the house connects through. Most people have never opened its settings. Plenty could not say what brand it is.
That box is your router, and it is the front door of your digital house. This is not something to lose sleep over. It is a chore, like changing the batteries in a smoke detector. Fifteen minutes, mostly clicking things you already own, and once it is done you will not think about it again for years. Here is the whole job, in the order we would do it.
There Are Two Passwords, and Most People Only Know About One
This is the part that trips up almost everybody. Your router has two completely separate passwords, and they do different jobs. The Federal Trade Commission draws the line clearly in its home Wi-Fi guidance. The Wi-Fi password is, in its words, “the one you use to connect your devices to the network.” That is the one printed on the sticker, the one you read aloud to guests. The router admin password is “the one that lets you into the administrative side of the device.” That is the one that changes how the router works. Almost nobody changes the second one, because almost nobody knows it exists.
The admin password on many routers ships from the factory as something like “admin” or “password,” and the default for any given model is published online for anyone to look up. Somebody with admin access does not just get on your Wi-Fi. They can change where your household’s internet traffic goes. The FTC’s instruction is to “Change the default administrative username, password, and network name to something unique.”
To do it, open a browser on a device connected to your home network and type in the router’s address, printed on the router or in its manual. Log in, find the section usually labeled administration, system, or management, and set a new admin password. Make it different from your Wi-Fi password, and write it down somewhere you will find it in two years.
Update the Firmware, Then Let It Update Itself
Firmware is the software that runs the router itself. It gets security fixes like anything else, and unlike your phone, many routers will not install them on their own unless you tell them to.
While you are logged in, look for a section named firmware, software, or update. Most routers made in the last several years can check for and install updates automatically. Turn that on. It is the highest value setting in the whole box, because it means this stops being your job.
If yours has no automatic option, the FTC advises visiting the manufacturer’s website to check for a newer version, and registering the router so you get notified about updates. One more thing worth knowing: if your internet provider supplied the router, updates are often handled on their end. A five minute call confirms it, and while you have them, ask whether you can still set your own admin password.
Turn On Good Encryption and Turn Off What You Do Not Use
Encryption keeps your traffic private as it travels through the air between your devices and the router. The FTC describes it as scrambling the information sent through your network, and recommends WPA3 Personal or WPA2 Personal. It calls WPA3 the newer and best encryption available. Options called WPA or WEP are older, and the FTC describes them as outdated and not secure. Look under wireless security settings and pick the newest option your devices can handle.
While you are in there, a few features are worth switching off because most households never use them:
- Remote management. This lets someone administer the router from outside your house. Unless you set that up on purpose, turn it off. The FTC lists it first among features to disable.
- Wi-Fi Protected Setup, usually shown as WPS. The button that connects a device without a password. Convenient, and the FTC recommends turning it off.
- Universal Plug and Play, shown as UPnP. This lets devices on your network open doors to the outside on their own. Also on the FTC’s list to disable.
- The router firewall, which goes the other way. This one should be on. The FTC says to turn on your router firewall for extra protection. Most are on by default, so just confirm.
When you finish, log out of the administrator account rather than just closing the tab. The FTC recommends it, and it takes one click.
Give the Network a Boring Name, and Give Guests Their Own
The network name, sometimes called the SSID, shows up in the Wi-Fi list on every phone that walks past your house. Two things not to put in it: your family name and your router’s brand and model. “The Wards” tells a stranger who lives there. “NETGEAR-R7000” tells them exactly what equipment you have, which tells them which known weaknesses to try. Pick something forgettable.
Then set up the guest network. The FTC notes that many routers let you create one with a different name and password, which keeps your main network separate if a visitor’s device is infected. Put the smart TV, the smart plug, the robot vacuum, and the kids’ friends on it. Keep laptops, phones, and anything touching your bank or tax records on the main network. Cheap gadgets get security updates for a year or two at best and then never again, and the guest network keeps them from becoming a hallway into everything else.
When a Router Is Simply Too Old
Sometimes no setting will fix it. Manufacturers support a model for a while and then stop shipping updates, after which the box keeps working perfectly while quietly falling behind. Here is a plain test. Update the firmware first. If the strongest encryption your router offers is still WPA or WEP, the FTC’s advice is to consider buying a new router. Same answer if the manufacturer’s site shows no firmware updates in the last couple of years, or does not list your model at all. A current home router is not expensive, and it is one of the few things in technology where the cheap new version genuinely beats the nice old one.
The same logic applies to everything else hanging off your network. The FTC’s advice on connected devices at home is to “disconnect older devices you no longer use from the network. Their security may be out of date, creating a weak point on your network.” The tablet in the drawer nobody has charged in years does not need to be on your Wi-Fi.
The Bottom Line
Change the admin password so it differs from the Wi-Fi password. Turn on automatic firmware updates. Use WPA3 or WPA2 with a long passphrase. Switch off remote management, WPS, and UPnP. Give the network a name that says nothing about you. Set up the guest network and put the gadgets on it. Replace the router if it is too old to take an update.
That is the entire list, and it is a one afternoon job you will not repeat for years. Once the door is locked, the next thing worth an evening is the accounts behind it, which is where a stronger sign in method earns its keep. If that is new territory, our plain English explanation of what a YubiKey is is a decent place to start.
We spend our days doing this for businesses around Denton County, but we think the home version matters just as much. If you get stuck partway through, or you open the settings page and cannot tell what you are looking at, feel free to ask. Contact us today.
Sources:
Comments are closed