Your router is the front door to every device at home. Eight simple settings keep strangers out, and you don't need to be a network engineer to change them.
Most routers work straight out of the box, which is exactly the problem: they often come with a default admin password, older security settings and features you never use. Fifteen minutes in the settings fixes most of it.
Before you start: open your router's settings
The router's settings page is usually at an address like 192.168.0.1 or 192.168.1.1. It's printed on a label on the router, along with the default login. On Windows you can also find it with:
ipconfig
Look for Default Gateway, type that address into your browser and sign in. Many newer routers use a phone app instead; the same settings are in there.
1. Change the admin password
This is the password for the router's settings, not your Wi-Fi password. If it's still the one on the label, anyone on your network could change your settings. Set a long, unique password and keep it in a password manager.
2. Use WPA3 or WPA2
In the wireless settings, set security to WPA3, or WPA2/WPA3 mixed mode if some older devices can't connect. If WPA3 isn't available, use WPA2 (AES).
3. Pick a strong Wi-Fi password
Long beats complicated. Four or five random words, like copper-lantern-river-stamp, is far stronger than P@ssw0rd! and easier to type into a TV.
4. Update the firmware
Router makers fix security holes through firmware updates. Look for Firmware update or Administration, install the latest version, and turn on automatic updates if your router offers them.
5. Turn off WPS
WPS lets devices join by pressing a button or typing a PIN. The PIN method has known weaknesses, and you rarely need it. Turn it off.
6. Turn off remote management
Unless you really need to change router settings from outside your home, make sure Remote management (sometimes called Remote access or Web access from WAN) is off.
7. Put guests and smart devices on a guest network
Turn on the guest network for visitors, and consider putting smart TVs, speakers and cameras on it too. If one of them is ever compromised, it can't reach your laptop or phone.
8. Check who's connected
Most routers have a Connected devices or Client list page. Look through it now and then. If there's a device you don't recognise, change your Wi-Fi password and every device you own will need to reconnect with the new one.