Secure Your Home Wi-Fi

18 items · Technical · Easy difficulty · 30 min

Quick, practical steps to lock down your home Wi‑Fi in about 30 minutes.

• Log in to your router admin interface

  Connect via Ethernet or visit the router IP (often 192.168.0.1 or 192.168.1.1).

• Change default router admin password

  Use a unique 12+ character password and store it in a password manager.

• Change default admin username if supported

  Replacing 'admin' makes credentials harder to guess.

• Enable WPA3 or strongest available encryption

  If WPA3 isn't available, choose WPA2-AES (avoid TKIP/WEP).

• Set a non-identifying Wi‑Fi network name (SSID)

  Avoid names with your full name, address, or other personal info.

• Create a strong Wi‑Fi password (passphrase)

  Use 12+ characters or a memorable phrase; avoid common words.

• Enable a separate guest network with its own password

  Keep visitor devices isolated from your main devices.

• Restrict guest network to internet-only access

  Disable LAN access so guests can't reach your printers or NAS.

• Disable WPS (Wi‑Fi Protected Setup)

  WPS PIN and push-button modes can be exploited; turn it off.

• Update router firmware

  Check the vendor site or enable auto-updates to patch vulnerabilities.

• Backup router configuration before major changes

  Save a config file so you can restore settings if needed.

• Reboot router to apply updates and saved settings

  A restart ensures firmware and setting changes take effect.

• Disable remote management and cloud admin access

  Turn off remote/web admin access unless you explicitly need it.

• Enable the router's built-in firewall

  Turn on SPI/NAT firewall functions and keep default protections.

• Disable UPnP and other unused services (Telnet/SSH)

  Turn off features you don't use to reduce attack surface.

• Use MAC filtering or static DHCP reservations

  Not foolproof, but useful for small home networks to control devices.

• Place IoT devices on a separate network or VLAN

  Isolate smart devices to limit exposure if they are compromised.

• Enable logging and schedule periodic security checks

  Review connected devices and logs monthly for anomalies.

Printed from TickYouOff — the interactive version tracks your progress and can be shared with others.