A router often sits quietly in a hallway cupboard or beside the television, yet it controls access to almost every connected device in your home. This router security guide focuses on the settings that genuinely matter: keeping unwanted visitors off your WiFi, protecting smart cameras and doorbells, and making sure your network remains dependable for the people who use it every day.
For a typical home, the goal is not to turn network security into a full-time job. It is to set up a few sensible protections, check them occasionally, and choose equipment that is still receiving support. That matters even more where a network carries security cameras, smart locks, baby monitors, heating controls or devices at a rural property.
Start with the router login, not the WiFi password
Your router has two different passwords. One lets phones, laptops and smart devices join the WiFi network. The other gives access to the router's management settings. Both need attention, but the administrator password is the priority.
If somebody can sign in to the router's settings, they may be able to change the WiFi password, alter DNS settings, open access to devices or lock you out of your own network. Many routers ask you to create a new administrator password during setup. If yours did not, log in using the address shown in the router app, manual or label, and replace the default password immediately.
Use a long, unique passphrase rather than a short word with a number at the end. A memorable combination of several unrelated words is easier to enter on a phone and much harder to guess. Do not reuse the password from your email, online banking or shopping accounts.
It is also worth changing the router's administrator username where the model allows it. Default usernames are widely known, so changing both credentials removes an easy starting point for an attacker.
Secure your WiFi with current encryption
For the WiFi network itself, select WPA3-Personal where every device supports it. WPA3 is the newer standard and provides stronger protection for the password exchange between your device and router. If older smart home equipment will not connect, WPA2-Personal with AES encryption remains a sensible and widely compatible choice.
Avoid WEP and WPA where possible. They are outdated security methods and should not be used for a new setup. Also avoid settings labelled WPA/WPA2 mixed mode unless a particular older device truly requires it. Compatibility can be useful, but it should not be the permanent default simply because it is convenient on day one.
Your WiFi password should be separate from your router administrator password. Aim for at least 16 characters and avoid details that could be guessed from social media, such as a child’s name, pet’s name or house number. A password manager can generate and store a strong option without leaving it on a note near the router.
Changing the WiFi network name is useful too. Choose something that does not identify your surname, address or router model. Hiding the network name, sometimes called disabling SSID broadcast, is not meaningful security. Devices can still detect the network, and it can make reconnecting legitimate equipment more awkward.
Keep router software up to date
Router manufacturers release firmware updates to fix security weaknesses, improve stability and support newer devices. A router that is working perfectly can still need an update. Check the router app or management page for an automatic update setting and turn it on if available.
If updates must be installed manually, set a reminder to check every few months. It is a small task, but it can prevent a known flaw from remaining open for years. Before starting, make sure you have a stable power supply and do not switch off the router while the update is running.
This is also where the age of the router matters. Older models may no longer receive security updates, even if the WiFi signal still reaches every room. If you are adding several cameras, a video doorbell, smart plugs and streaming devices, a current router or mesh WiFi system can improve coverage and give you better control over connected devices at the same time.
Turn off features you do not need
A good router security guide is as much about reducing unnecessary access as it is about adding passwords. Look through the router settings for features that expose the network to the internet and switch off anything you do not actively use.
Remote management is one example. It can let you change router settings while away from home, but it also creates another route to the management page. Leave it disabled unless you understand why you need it and can protect it with strong credentials and, ideally, multi-factor authentication.
UPnP is another feature worth considering. It allows devices and games consoles to open network ports automatically. It can make certain games or video calls simpler, but it is not essential in many homes. If you do not use applications that need it, disabling it reduces the chance of an unwanted port being opened.
WPS deserves the same treatment. The push-button connection feature was designed to make WiFi setup easier, but it is rarely necessary now that most devices can join through an app or by entering a password. Disable it once your equipment is connected.
Port forwarding is different again. It may be required for a specific device or service, but it should never be set up casually. Many modern security camera systems use secure app-based connections and do not need ports manually opened. If you have old forwarding rules you no longer recognise, remove them after checking that nothing depends on them.
Put visitors and smart devices on separate networks
A guest WiFi network is one of the most useful router features in a busy household. Give visitors their own password instead of sharing your main network credentials. They can get online without gaining access to computers, printers, storage drives or the management settings of your main network.
Where your router supports it, use a separate network for smart home devices as well. This can be called an IoT network, guest network with local access disabled, or network isolation depending on the manufacturer. The principle is simple: a lower-cost smart plug or older device should not have the same level of access as your work laptop.
There is a trade-off. Some devices need to communicate directly with a phone, smart speaker or hub on the main network, so complete isolation can affect setup or everyday control. Test one device first rather than moving everything at once. A well-designed mesh WiFi system can make this easier by offering guest controls and device management in one app.
Check who is connected to your network
Open the router app or device list occasionally and look for unfamiliar names. Many routers show a device type, manufacturer and the time it was last connected. Names can be vague, particularly for smart home products, so it helps to rename devices as you identify them. ‘Kitchen smart plug’ is much more useful than a string of letters and numbers.
If you see a device you do not recognise, pause rather than assuming it is an intruder. Check phones, tablets, TVs, consoles, printers and smart devices in the home first. If it remains unexplained, change the WiFi password, remove the device from the network where possible, and reconnect your own devices using the new password.
Reviewing this list also reveals practical issues. An old phone still connected to the network, a camera with a weak signal, or a device repeatedly dropping offline can point to a coverage problem before it becomes a security concern.
Protect the devices behind the router
The router is the front door to your network, but each connected device needs its own lock. Change default passwords on cameras and smart hubs, enable multi-factor authentication on the apps that offer it, and install app or firmware updates promptly. Use different passwords for key accounts where possible, especially the email account used to reset them.
For security cameras, choose a strong account password and review who has shared access. Remove former tenants, contractors or family members who no longer need to view the feed. If a camera supports local storage, check that the memory card is working and that recordings are being retained as expected.
Be cautious with second-hand networking equipment. A factory reset is essential before use, followed by a firmware update and fresh passwords. The same applies if you move into a property where a router or mesh unit has been left behind.
When a reset is the right answer
If you cannot remember the administrator password, notice unfamiliar settings, or have inherited a router with no clear history, a factory reset can be the cleanest route. It removes custom WiFi names, passwords, forwarding rules and device settings, so plan for a short period of reconnection afterwards.
Set it up again with a new administrator password, WPA3 or WPA2-AES security, automatic firmware updates and a guest network from the start. Keep a secure record of the new details, particularly if cameras, heating controls or rural monitoring equipment need to be brought back online.
A secure home network does not need constant tinkering. A strong router password, current software and sensible separation between your main devices, guests and smart equipment will cover most homes very well. If you are upgrading coverage or building a more capable smart home setup, choosing networking equipment with clear app controls and ongoing support makes those protections far easier to maintain.
