{ "slug": "securing-your-home-wi-fi-network", "url": "https://checklists.org/c/securing-your-home-wi-fi-network", "markdown": "https://checklists.org/c/securing-your-home-wi-fi-network.md", "title": "Securing Your Home Wi-Fi Network", "description": "How to lock down your router and home network step by step.", "category": "safety", "tags": [ "home-network", "wifi-security", "router" ], "version": "1.0", "updated": "2026-08-17", "sources": [ { "name": "How To Secure Your Home Wi-Fi Network — FTC Consumer Advice", "url": "https://consumer.ftc.gov/articles/how-secure-your-home-wi-fi-network" }, { "name": "Securing Your Internet-Connected Devices at Home — FTC Consumer Advice", "url": "https://consumer.ftc.gov/articles/securing-your-internet-connected-devices-home" }, { "name": "Are Public Wi-Fi Networks Safe? What You Need to Know — FTC Consumer Advice", "url": "https://consumer.ftc.gov/are-public-wi-fi-networks-safe-what-you-need-know" }, { "name": "Module 5: Securing Your Home Wi-Fi — CISA", "url": "https://www.cisa.gov/audiences/high-risk-communities/projectupskill/module5" }, { "name": "Securing Wireless Networks — CISA", "url": "https://www.cisa.gov/news-events/news/securing-wireless-networks" }, { "name": "8 Ways to Secure Your Home Network — Synovus", "url": "https://www.synovus.com/personal/resource-center/fraud-prevention-and-security-hub/fraud-hub-education-and-prevention/fraud-protection/8-ways-to-secure-your-home-network/" } ], "intro": "Most routers work fine \"out of the box\" — which is exactly the problem. Factory settings favor ease of setup over security, and many people assume their home network is simply too small to fall prey to a cyberattack and that their devices are secure enough right out of the box. This walks you through locking things down, in the order that makes sense whether you're setting up a brand-new router or finally getting around to an old one.", "itemCount": 23, "essentialCount": 6, "sections": [ { "title": "Find your router and get logged in", "items": [ { "id": "1wf3ep2", "text": "Locate your router and check the label", "note": "Most have a sticker listing the default admin login, network name, and sometimes the default Wi-Fi password." }, { "id": "hul7gj", "text": "Open the router's admin page in a browser and log in with default credentials", "note": "Usually an address like 192.168.1.1 or 192.168.0.1, printed on that same sticker, so you can start changing settings." }, { "id": "uva7jk", "text": "Confirm your router isn't past its \"end of life\" for updates", "note": "Many routers are no longer supported or reached end of life, offering a potential risk.", "when": "router-more-than-5-7-years-old-or-unsupported" } ] }, { "title": "Lock down the basics — do this first", "items": [ { "id": "1ocv9d6", "text": "Change the router admin username and password", "note": "This is the account that controls every other setting, and leaving it on the factory default is one of the most common ways home networks get taken over. Don't reuse a password from anywhere else.", "essential": true }, { "id": "1jah5a9", "text": "Set a strong, unique Wi-Fi network password", "note": "The Wi-Fi network password is the one you use to connect your devices to the network, and a unique and secure Wi-Fi network password prevents strangers from getting onto your network.", "essential": true }, { "id": "1o3u7gw", "text": "Turn on WPA3 (or WPA2 if that's all your router offers)", "note": "Skip WEP or WPA entirely — older routers have WPA and WEP, which are outdated and not secure. If you don't see WPA2/WPA3 as an option, try updating your router software, then check again, and replace the router if they still aren't available.", "essential": true }, { "id": "hi69qq", "text": "Change the default network name (SSID)", "note": "Skip anything that identifies your address, name, or router brand." }, { "id": "e7q82o", "text": "Turn on the router's firewall and confirm it's actually active", "note": "Not just present." } ] }, { "title": "Turn off the features that weaken security", "items": [ { "id": "1eu1iz3", "text": "Turn off WPS (Wi-Fi Protected Setup)", "note": "This \"push button\" pairing feature has known weaknesses that let attackers brute-force their way in.", "essential": true }, { "id": "1xqnkrw", "text": "Turn off remote/router management from the internet", "note": "Unless you specifically need to administer your router while away from home, this feature just gives attackers another door in.", "essential": true }, { "id": "iid4f1", "text": "Turn off UPnP (Universal Plug and Play)", "note": "It lets devices open ports automatically without asking you, which malware can exploit." }, { "id": "hm1wjh", "text": "Turn off file-sharing over public/guest connections", "note": "Only allow file sharing over home or work networks, never on public networks, and password-protect anything you do share." } ] }, { "title": "Keep things updated and patched", "items": [ { "id": "1asl0mq", "text": "Turn on automatic firmware updates for your router, or check for them manually every few months", "note": "Regularly update your router firmware and install automatic updates, if possible." }, { "id": "i1kiid", "text": "Update the software and operating systems on connected computers and phones", "note": "Update your phone's operating system, too, alongside your computer's OS and browser." }, { "id": "vh5u8m", "text": "Remove old apps, trial software, or unused services on your devices", "note": "CISA notes many devices come loaded with \"bloatware\" that's rarely useful and just adds risk." } ] }, { "title": "Set up separate access for guests and smart devices", "items": [ { "id": "z2odd5", "text": "Create a guest Wi-Fi network", "note": "Keep them off your main network so a compromised guest device can't reach your computers or files.", "when": "regularly-have-visitors-connect" }, { "id": "2m4m40", "text": "Put smart-home gadgets on the guest network or a separate IoT network", "note": "Useful if you have several connected devices, since a weak link in one cheap gadget shouldn't expose your whole network.", "when": "have-several-connected-smart-devices" }, { "id": "rgdv0z", "text": "Change the default username and password on every connected device before first use", "note": "If your device came with a default username and password out of the box, change them, and don't reuse a password from another account.", "essential": true }, { "id": "1ww9jrs", "text": "Turn on two-factor authentication on device and router accounts where it's offered", "note": "Use two-factor authentication for an extra layer beyond the password alone." } ] }, { "title": "Ongoing upkeep", "items": [ { "id": "bpo6jj", "text": "Check the router's connected-devices list every few months", "note": "Look at \"connected devices,\" \"wireless clients,\" or \"DHCP clients\" in the admin page to spot anything you don't recognize." }, { "id": "18u7ko2", "text": "Re-check firmware and settings after any router reset or replacement", "note": "A factory reset wipes your custom password and settings back to defaults." }, { "id": "136gwf5", "text": "Avoid logging into sensitive accounts over unknown public Wi-Fi", "note": "Stick to sites starting with \"https\" and consider a VPN, since most websites do use encryption to protect your information but not all hotspots are trustworthy.", "when": "must-use-public-wifi" }, { "id": "glyovs", "text": "Note your router model and admin password somewhere safe", "note": "Use a password manager, not a sticky note, so you're not locked out later." } ] } ] }