Your router connects computers, phones, smart home devices, cameras, televisions, and other equipment to the local network and the internet.

A router cannot guarantee complete security, but careful configuration and regular maintenance can reduce avoidable risks.

Identify the Router

Before changing settings, record:

• Manufacturer and model
• Internet service provider
• Current firmware version
• Official support page
• Whether the router is owned or supplied by the provider

Instructions differ between models. Use the official manual rather than assuming that all router menus are the same.

Change the Administrator Password

The router administrator password controls access to important network settings.

• Replace the default password
• Use a unique password
• Do not reuse the Wi-Fi password
• Do not share the administrator password with guests
• Store it securely

Use Current Wireless Security

Use WPA2 or WPA3 when supported by the router and connected devices.

Avoid outdated security options such as WEP. Some older devices may not support newer modes, so verify compatibility before changing the network.

Create a Strong Wi-Fi Password

Use a password that is:

• Unique to the home network
• Difficult to guess
• Different from the router administrator password
• Not based on the home address or family name

Update Router Firmware

Firmware updates may correct security problems, improve stability, or add features.

• Use only official updates
• Do not interrupt power during installation
• Review release notes when available
• Back up settings when supported
• Confirm that the router restarted correctly

Review Connected Devices

Check the router’s connected-device list periodically.

Investigate unfamiliar devices, but remember that device names may be generic or unclear.

Changing the Wi-Fi password may disconnect all devices and require them to be configured again.

Use a Guest or IoT Network

A guest or IoT network may help separate smart devices from personal computers and storage devices.

Check whether the router provides actual device isolation. Some guest networks only use a different network name without fully separating devices.

Disable Unnecessary Remote Administration

Remote administration allows router settings to be accessed from outside the home network.

Disable it when it is not needed. When remote access is required, follow the manufacturer’s current security recommendations.

Review WPS

Wi-Fi Protected Setup may simplify device connection, but it can also create additional risk depending on the implementation.

Disable WPS when it is not required, especially older PIN-based methods.

Review UPnP

Universal Plug and Play may allow applications and devices to request automatic network access.

Disabling it can improve control but may affect gaming, communication, media, or smart home features.

Review the consequences before changing this setting.

Avoid Unnecessary Port Forwarding

Port forwarding can expose a service or device to the internet.

Do not create forwarding rules unless you understand:

• Which device receives the traffic
• Which service is exposed
• How the service is authenticated
• How it will be updated
• How to remove the rule

Use safer official remote-access methods when available.

Review DNS Settings

DNS settings control how domain names are resolved.

Unexpected DNS changes may affect security and browsing. Use a trusted provider and record existing settings before making changes.

Protect Physical Access

Place the router where unauthorized users cannot easily reset or reconnect it.

Protect access to:

• The reset button
• Ethernet ports
• USB ports
• Administrator information printed on labels

Back Up the Configuration

When supported, create a configuration backup after important settings are complete.

Protect backup files because they may contain sensitive network information.

Replace Unsupported Routers

A router that no longer receives security updates may become increasingly risky.

Consider replacement when:

• Security updates have ended
• Current encryption is unavailable
• The router becomes unstable
• Important security settings are missing
• The manufacturer no longer provides documentation

Signs That Require Attention

Review the network when you notice:

• Unknown administrator changes
• Unexpected password resets
• Unknown connected devices
• Unexplained DNS changes
• Repeated redirections to unfamiliar websites
• Firmware changes you did not perform
• Remote administration enabled unexpectedly

Router Security Checklist

Additional Information

Review our Smart Home Security Checklist for a broader household security review.