Is your router secure? A ten-minute check
Your router is the front door to everything on your home network, and most are left on factory settings for years. This ten-minute check fixes the things that actually matter.
1. Log in to the router
Type your router’s address into a browser — usually 192.168.1.1, 192.168.0.1 or 192.168.1.254 (it’s often printed on a label on the router). Log in with the admin details on that label.
2. Change the admin password
If the admin login is still admin/admin or admin/password, that’s the biggest hole — anyone on your network (or malware) can reconfigure the router. Set a long, unique admin password. This is separate from your Wi-Fi password.
3. Set encryption to WPA3 (or WPA2/WPA3)
In the Wireless / Wi-Fi Security section, check the encryption type. Choose WPA3-Personal if all your devices are recent, or WPA2/WPA3 (Transitional/mixed) so older devices still connect while newer ones use WPA3. Anything older than WPA2 (WEP, WPA) is broken — change it immediately.
4. Update the firmware
Router firmware fixes security holes, and many routers only gained WPA3 through an update. Look for a Firmware / Update section and install what’s offered (some routers can auto-update — turn that on).
5. Turn off WPS and remote admin
- WPS (the push-button pairing feature) has known weaknesses — turn it off unless you actively need it.
- Remote management / admin from the internet — off, unless you specifically set it up.
6. Check who’s connected
Most routers list connected devices. Scan it — if you don’t recognise something, change your Wi-Fi password (which kicks everything off) and reconnect your own devices.
7. Use a strong Wi-Fi passphrase and a guest network
Make the Wi-Fi passphrase long and unique. Put smart-home gadgets and visitors on a guest network so they can’t reach your computers and phones.
When the router itself is the problem
If your router is many years old and no longer gets firmware updates, it’s a security risk that settings can’t fix — an ISP-supplied replacement or a modern router is worth it. Routers rarely publish end-of-support dates (see our tracker, where most are “Not announced”), so “no firmware updates in years” is your signal.
Frequently asked questions
Do I need to hide my network name (SSID)?
No — hiding the SSID adds little real security and causes connection hassles. Strong encryption and passwords matter far more.
Is my ISP’s router good enough?
Usually fine once you’ve changed the admin password, enabled WPA2/WPA3 and updated firmware. The default settings are the weak point, not the hardware.
How often should I do this?
Check for firmware updates a few times a year, and review connected devices if anything feels off. The rest is set-and-forget.