Secure your home Wi-Fi: locking down your network
Your home network is the door to every device you own. A few settings make your Wi-Fi far more secure – explained in plain language.
Your Wi-Fi connects everything you own – phone, computer, TV, smart home. Anyone who gets in is close to your whole network. You make these changes in your router’s web interface (usually an address like 192.168.1.1, or the one printed in the router’s manual).
The short version
- Set a strong, unique Wi-Fi password.
- Choose WPA3 as encryption (or at least WPA2-AES).
- Keep the router firmware current; turn on automatic updates.
- Set up a guest network for visitors and smart home devices.
- Turn WPS off and change the router’s admin password.
Step by step
Securing your home network
- Wi-Fi password: long and unique (at least 16 characters, or several random words).
- Encryption: choose WPA3, otherwise WPA2 (AES). Never WEP or an open network.
- Router updates: turn on automatic firmware updates.
- Admin password: change the login for the router interface from the factory default to your own.
- Guest network: turn on a separate network for guests and smart home devices.
- WPS: switch it off.
- Remote access: only enable access to the router from the internet if you genuinely need it.
Password and encryption
The Wi-Fi password is your most important protection. Pick a long, unique one and set the encryption to WPA3 – or at least WPA2 with AES. Older methods such as WEP can be broken in minutes.
Keep the router current
Out-of-date router firmware is a favorite way in. Turn on automatic updates, or check manually on a regular basis. Also change the admin password for the router interface – the factory default is often published openly.
Guest network and WPS
A guest network separates visitors and smart devices from the rest of your home network – if a smart home gadget is taken over, your computer stays out of reach. Switch WPS off, because of its known weaknesses. More detail is in secure your router .
Common mistakes
- Keeping the default passwords for the Wi-Fi or the router login.
- Using outdated encryption (WEP or an open network).
- Never updating the firmware.
- Leaving remote access or port forwarding open when you do not need it.
Frequently asked questions
Which Wi-Fi encryption should I use?
WPA3 if your router and devices support it, otherwise WPA2 with AES. WEP and the original WPA are considered broken and should not be used any more.
Do I need a guest network?
It is worth it. A guest network lets visitors and smart home gadgets reach the internet without reaching your computers, storage drives and personal devices.
Is WPS convenient or dangerous?
WPS is convenient but has known weaknesses. Switch it off in your router and connect devices with the Wi-Fi password or a QR code instead.