Your home Wi-Fi network connects computers, phones, cameras, televisions, printers, smart speakers, and other devices to the internet. If the router is using old security settings, a weak password, or outdated firmware, every connected device may be exposed to unnecessary risk.
You do not need advanced networking knowledge to improve the situation. Most of the important work involves reviewing a few router settings and removing features that are convenient but not needed. Router menus differ by manufacturer and internet provider, so the exact names may not match these examples.
Before changing anything
Write down the current Wi-Fi name and password before making changes. Changing them will disconnect phones, computers, smart home devices, printers, and streaming equipment until each device is reconnected.
It is also sensible to make a note of the current router model and take screenshots of important settings. If your internet provider supplied the router, check whether it is managed through an ISP mobile app or customer portal rather than a normal web interface.
Warning: Do not press the router’s reset button unless you are prepared to reconfigure the internet connection and wireless network from the beginning. A factory reset can remove custom settings, and some connections require provider-specific information to work again.
1. Sign in to the router using a trusted device
Use a computer connected directly to the router with an Ethernet cable when practical. A wired connection avoids changing wireless settings while you are connected over Wi-Fi. If that is not possible, use a device you trust and make the changes at home rather than on public Wi-Fi.
The router’s management address is often printed on its label or documentation. Common addresses include 192.168.0.1 and 192.168.1.1, but the correct address varies. Windows users can find the router address by opening Command Prompt and running ipconfig; look for Default Gateway. On macOS, the address is shown in the current network’s TCP/IP details as the router.
Do not search for a random “router login” website or install software that claims to manage the router. Enter the local address directly in the browser’s address bar, and verify that you are connected to your own network.
2. Change the router administrator password
The router administrator password controls settings such as wireless security, firmware updates, DNS configuration, and remote access. It is separate from the password used to join Wi-Fi.
Replace any default administrator password with a unique, long password that is not used for email, banking, or another account. A password manager can generate and store one. If the router supports a separate administrator username, change that from an obvious default when the option is available.
Do not reuse your Wi-Fi password as the administrator password. Someone who learns the wireless password should not automatically have the credentials needed to change router settings.
3. Use WPA2 or WPA3 wireless security
Open networks and outdated encryption options should not be used for a normal home network. In the wireless security settings, look for:
- WPA3-Personal, if every important device supports it.
- WPA2-Personal with AES, when older devices require compatibility.
- WPA2/WPA3 transition mode, if the router offers it and you need to support a mixture of devices.
Avoid WEP, WPA with TKIP, and settings described as “open,” “none,” or “no security.” Some old printers, cameras, and smart-home products only support obsolete security. That is a reason to replace or isolate the device, not a reason to weaken the whole network if you can avoid it.
After changing security settings, reconnect a computer or phone first. If the connection works, reconnect other devices one at a time. Devices that cannot connect may need their saved Wi-Fi network removed before joining again.
4. Choose a strong Wi-Fi password
Use a long, unique passphrase rather than a short word, address, phone number, or family name. A phrase made from several unrelated words can be easier to type, while a password manager can create a random one. Avoid including the router brand, street address, or other information visible to visitors.
The Wi-Fi name, or SSID, does not need to hide the type of router or identify your household. Disabling SSID broadcast is not a reliable security control and can make some devices less convenient to connect. A neutral network name is usually the better choice.
5. Disable features you do not need
Review the router settings for features that can expose the network or make changes without the protection you expect.
- Turn off WPS unless you have a specific reason to use it. WPS push-button pairing can be convenient, but it is not necessary for most modern devices.
- Disable remote administration from the internet. Router management should normally be limited to devices inside your home network.
- Turn off UPnP if you do not need automatic port forwarding for a particular application. Some games and devices use it, but it can allow devices to request changes to the router’s firewall behavior.
- Remove unused port forwards and review any entries under Port Forwarding, Virtual Server, or NAT Rules.
- Disable unused services such as FTP, Telnet, or an old web administration option if the router exposes them.
These settings can affect gaming, cameras, remote access, and other services. If a device stops working after a change, restore the single setting you changed and investigate that device rather than enabling every feature again.
6. Update the router firmware
Firmware updates can correct security defects, improve compatibility, and fix reliability problems. Look in the router app or administration page for Firmware Update, Router Update, or System Update. Use only the manufacturer’s update process or the process provided by your internet provider.
Keep the router powered on during an update. Do not unplug it, close the management page prematurely, or attempt an update intended for a different hardware revision. If the router offers automatic updates, enabling them is generally useful, provided you understand how the provider handles reboots and settings.
If the router is no longer supported, cannot receive security updates, or has an administration interface that requires obsolete software, replacement may be safer than repeatedly changing settings. Check the exact model and hardware revision before buying firmware or a replacement.
7. Create a guest network
A guest network lets visitors use the internet without joining the same network as your computers, storage devices, printers, and other household equipment. Enable guest-network isolation or “allow guests internet access only” when available.
Give guests a separate password and change it when you no longer want previous visitors to have access. Do not share the administrator password or the main Wi-Fi password simply to provide temporary internet access.
A guest network is also useful for some smart-home devices. However, not every device works correctly when it is separated from your phone or computer. Test the device’s setup and control functions before moving it, and follow the manufacturer’s security guidance.
8. Review connected devices
Open the router’s client list, connected-device list, or network map. Look for unfamiliar names, duplicate entries, and devices that have not been used for a long time. Device names can be vague, and phones may appear with privacy-related randomized addresses, so do not assume an entry is malicious solely because its name is unfamiliar.
Compare the list with the devices in your home. Remove or disconnect equipment you no longer use, update devices that support updates, and change passwords on cameras, printers, and smart-home products that still use factory credentials.
If you find a device you cannot identify, change the Wi-Fi password and reconnect known devices manually. This is disruptive, but it is safer than assuming an unknown device is harmless. If the unknown entry returns, investigate the router and connected equipment before continuing to use sensitive services on the network.
9. Protect the computers and accounts on the network
A secure router does not replace normal device security. Keep Windows, macOS, phones, browsers, applications, and smart devices updated. Use screen locks, reputable security software, and unique passwords for important accounts. Enable multifactor authentication where available.
Be careful with remote-access tools, file sharing, and network storage. Share only the folders and services you need, use account passwords, and avoid exposing administrative interfaces directly to the internet. If a computer may already contain malware, changing router settings alone does not remove it.
10. Recheck the setup after changes
After securing the router, test ordinary tasks: web browsing, printing, streaming, smart-home control, work VPN access, and any required remote connection. Check that the administrator password works and store it securely. Review the router’s event or security logs if they are available, but remember that consumer routers provide different levels of detail.
There is no single setting that guarantees a network is safe. If the router repeatedly resets settings, shows unexplained administrator changes, cannot update, or has unknown devices that return after a password change, stop making random changes. Preserve the model information and contact the internet provider or a qualified technician. For homes and small offices in Bellevue, Omaha, Papillion, La Vista, Plattsmouth, Ralston, Council Bluffs, and nearby areas, a network review can also help separate a router problem from a compromised computer or misconfigured device.
When to call a professional
If the problem continues, the data is important, or the repair requires work beyond your comfort level, AME Computers can provide professional diagnosis and repair or call 402-505-6600.
Free repair guidance
Get New Computer Repair Guides by Email
Practical PC and Mac help from AME Computers. Confirm your email once and unsubscribe anytime.