Most people never touch their router’s settings after their internet provider sets it up — which means many home networks are still running on default configurations that are well known to anyone looking to exploit them. Here is how to lock things down properly, step by step.
Step 1: Change the Default Admin Password
Every router ships with a default admin username and password, often printed on the device itself and publicly documented online. Log into your router’s admin panel (usually at an address like 192.168.1.1) and change this immediately — it is the single most important step on this list.
Step 2: Rename Your Network and Update Wi-Fi Password
Avoid network names that reveal your address, name, or router model. Set a strong Wi-Fi password using WPA3 encryption if your router supports it (WPA2 is the acceptable minimum).
Step 3: Set Up a Guest Network
Put visitors, smart home devices, and IoT gadgets on a separate guest network. This keeps a compromised smart bulb or camera from having direct access to the devices where you do banking and work.
Step 4: Enable Automatic Firmware Updates
Router manufacturers regularly patch security vulnerabilities. If your router supports automatic updates, turn them on; if not, check for updates manually every few months.
Step 5: Turn Off Remote Management
Unless you specifically need to manage your router from outside your home network, disable remote administration access — it is a common attack vector left on by default.
Step 6: Review Connected Devices
Most router apps show a list of connected devices. Take a few minutes to review it and confirm you recognize everything on your network.
None of these steps require networking expertise, and together they close the majority of the easy, opportunistic attacks that target home networks.
