For a home Wi-Fi network, start by changing both the network password and the router's administrator password. The Federal Trade Commission recommends reviewing encryption, software updates and several optional features as well.

Change the two passwords separately

The Wi-Fi password lets phones, computers and other devices join your network. The administrator password lets someone change router settings, including the Wi-Fi password itself. Give both secure, unique passwords.

Replace the default administrator username and network name too. Avoid names or passwords containing your name, address or router brand. Look up password-changing instructions from the router manufacturer; contact it directly if you cannot find the setting.

Check encryption before buying a replacement

Select WPA3 Personal or WPA2 Personal in the router's security settings. FTC guidance identifies WPA3 as the newer option and says both protect information sent across the network.

If the only choices are WPA or WEP, update the router software and check again. Those older options are outdated and insecure. If WPA2 or WPA3 still is not available, the FTC advises considering a new router.

Check the manufacturer's website for software updates and register for update notices. For a router supplied by your internet service provider, ask the provider whether it sends automatic updates.

Review convenient features and guest access

The FTC recommends turning off these features:

  • Remote management, which allows router settings to be changed over the internet.
  • Wi-Fi Protected Setup (WPS), which connects a device with a button instead of the network password.
  • Universal Plug and Play (UPnP), which lets devices discover one another on the network.

These features can simplify connections but weaken network security.

If your router supports a guest network, give it a separate name and password. That lets visitors connect without receiving your primary password and helps separate their devices from the main network.

Enable the firewall and log out

Check that the router's built-in firewall is enabled, if it has one, and log out of the administrator account when you finish. A firewall adds protection; securing the connected phones and computers also matters because an unsecured device can expose the network.