Originally published on CodingCush.
Your home router is the front door of your whole network. Every phone, laptop, smart TV and camera in your house talks to the internet through it. Yet most routers are still running on the settings they left the factory with, including an admin password that is printed in a manual anyone can download. Attackers know this, and automated tools scan for weak routers all day, every day. The good news is that securing yours takes about 20 minutes and costs nothing. This guide walks through the 10 settings that matter, in plain English, in the order to change them.
Why the router deserves your attention
Compromised routers are quietly valuable. Criminals use them to redirect you to fake banking pages, to spy on unencrypted traffic, or as soldiers in botnets that attack websites. Because the router is invisible in daily life, an infection there can run for years while every device behind it looks clean. Guidance from the UK NCSC on device security treats home devices and their settings as a real part of your safety, and the router is the device all the others depend on. Twenty minutes here protects everything at once.
The 10 settings to change today
1. Change the router admin password
This is the big one. The admin login (often admin / admin, or printed on the router's sticker) controls every setting. Vendor guides, such as the ones on the TP-Link support page, walk through changing the device admin password for each model. Make it long, unique, and different from your Wi-Fi password, and store it in your password manager.
2. Update the firmware
Firmware is the router's own system software, and updates fix the holes attackers use. Look for the update option in the admin panel, turn on automatic updates if it exists, and check every few months if it does not. If your router is so old that updates stopped years ago, replacing it is a security upgrade, not a luxury.
3. Use WPA3, or at least WPA2
In the wireless security settings, choose WPA3 if your router offers it, or WPA2-AES. Never use WEP or an open network; those can be cracked by a teenager with a YouTube tutorial and a free afternoon.
4. Set a strong Wi-Fi password
Forget the dog's name plus a birth year. Use a long passphrase of random words you can still type into a TV remote without crying. While you are there, treat it like your other accounts and follow the same rules you use for strong sign-in security: long, unique, and never shared outside the house.
5. Change the network name (SSID)
Rename your Wi-Fi so it does not reveal the router model or your family name. "NETGEAR-5G at the Sharma house" tells an attacker exactly what to search for. Pick something neutral, and skip the jokes that give away your address.
The TP-Link support page, where the guides include changing your router's admin password.
6. Turn off WPS
The push-button WPS feature is convenient and famously weak; its PIN method can be brute-forced. Typing a password once per device is a small price for closing that door.
7. Switch off remote management
Remote administration lets the admin panel be reached from the internet. Almost nobody needs it, and it is a favourite target. Make sure it is off, along with any "access from WAN" option.
8. Set up a guest network
Most routers can run a second network for visitors and smart gadgets. Put guests, and cheap smart bulbs and cameras, on that network. If a bargain gadget gets compromised, it cannot see your laptop and photos on the main one.
9. Check the list of connected devices
The admin panel shows everything currently connected. Scroll through it now, while you know what your own devices are called. A stranger on the list means change the Wi-Fi password today, not someday.
10. Restart it now and then
A monthly restart clears some types of router malware that live only in memory, and keeps things running smoothly. If your connection also feels sluggish, our guide on why your Wi-Fi is slow covers the performance side of the same settings.
Two more switches worth finding
While the admin panel is open, two quieter settings deserve a look. UPnP lets apps and gadgets punch holes in your firewall by themselves, so games and cameras "just work". Sadly, malware and badly written gadgets enjoy the same privilege, and security researchers have complained about it for years. Turn UPnP off. If one beloved app stops working afterwards, forward its port manually instead, so the hole is yours and documented. The second is your DNS setting. Some router infections do nothing except change DNS, so your requests quietly pass through a criminal's server that can swap real sites for fakes. Check that DNS is set to automatic, or to a resolver you chose yourself, and write down what it says today. If it ever changes without you, treat that as a break-in, not a glitch.
What about the router your provider gave you?
Many homes use the box the internet provider supplied, and that is fine, with one honest warning: you depend on the provider for firmware updates, and some providers are slow. Everything in this guide still applies, from the admin password to the guest network, and provider boxes usually hide the same settings in friendlier menus. If your provider box is old, ask them for a newer one; providers replace aging kit more often than people expect, especially if you mention dropouts. And if you buy your own router, you gain control of updates and features at the cost of setting it up yourself. Either path is secure when the ten settings above are done. The unsecured home is not the one with the cheap router. It is the one where nobody ever opened the settings page.
How to open your router settings (the 3-minute version)
- On a device connected to your Wi-Fi, open a browser and type the router address: usually 192.168.0.1 or 192.168.1.1 (it is printed on the sticker).
- Log in with the admin details from the sticker, this is the login you will change in step 1 above.
- Work through the settings in order. Save after each change; changing the Wi-Fi password will disconnect your devices, so reconnect them with the new one.
Keep a small note of what you changed
Before you close the admin panel, do one unglamorous thing that pays off later: write down the settings you changed, the new network names, and where the passwords are stored. A single note in your password manager is enough. Six months from now, when a new TV refuses to connect or a setting looks unfamiliar, that note tells you whether past-you made the change, or somebody else did. Security is partly memory, and memory is the first thing a busy household loses.
Frequently asked questions
How do I know if my router has been hacked?
Signs include a changed DNS setting you did not make, being redirected to strange versions of familiar sites, unknown devices on the connection list, and settings that keep changing back. A factory reset, firmware update and fresh passwords, in that order, is the clean fix.
Should I hide my Wi-Fi network name?
It adds almost no security, because the network still announces itself to your devices. A strong password and WPA3 protect you far more. Spend your effort there instead.
How often should I replace my router?
Every five years or so is a good rule, or sooner if the maker stops releasing firmware updates. An unsupported router is an unlocked door that gets weaker every year.
Conclusion
Your router is small, silent and easy to forget, which is exactly why attackers love it. Twenty minutes of settings, a new admin password, current firmware, WPA3, WPS off, remote access off and a guest network for gadgets, turns it from the weakest link into a proper front door. Do it once today, and every device in your home gets safer at the same time.
