Secure your router: the steps that matter
The router is the door between the internet and your home network. Here is how to set it up safely – admin access, firmware, remote access and the rest.
Your router steers all of your internet traffic, so its settings are worth a careful look. You usually reach the interface at an address such as 192.168.0.1 or 192.168.1.1 – check the router’s manual.
The short version
- Change the admin password from the default to your own.
- Update the firmware automatically.
- Only enable remote access from the internet when you need it.
- Review port forwarding and UPnP, and switch off what you do not need.
- Use a guest network for visitors and smart home devices.
Step by step
Securing your router
- Change the admin login: your own strong password for the router interface.
- Firmware: turn on automatic updates, or check manually on a schedule.
- Remote access: switch off access from the internet if you do not need it.
- Port forwarding: go through the list and remove old or unclear entries.
- UPnP: switch it off unless something actively needs it.
- Guest network: set one up for visitors and smart devices.
- Wi-Fi encryption: set it to WPA3, or WPA2-AES.
Admin access and firmware
Change the admin password for the router interface first – the factory default is often published openly. Then turn on automatic firmware updates: they close security holes that would otherwise stay open for a long time.
Remote access and ports
Remote access (managing the router from the internet) is handy, but it is a risk when it sits open – switch it off unless you need it. Go through the port forwarding rules and delete old entries. Turn UPnP off if no application truly requires it, so devices do not quietly become reachable from the internet.
Separating the network
A guest network separates visitors and smart home devices from the rest of your home network. The Wi-Fi side of all this is covered in secure your home Wi-Fi .
Common mistakes
- Keeping the default admin password.
- Leaving remote access open permanently.
- Forgetting old port forwarding rules nobody needs any more.
- Never updating the firmware.
Frequently asked questions
Do I really have to change the router password?
Yes. Many routers ship with a factory default password that is publicly documented. As long as it stays unchanged, anyone on the network – and sometimes anyone on the internet – can take over the settings.
What is UPnP and should I switch it off?
UPnP opens ports automatically for programs and game consoles. That is convenient, but it can quietly make devices reachable from the internet. If you do not need it, turn it off.
How often should I update the router firmware?
Automatically, ideally. Firmware updates close security holes. Check a few times a year that automatic updates are on and that updates are actually arriving.