Securing your home Wi-Fi: best practices
Password, encryption, guest network: the essential settings for a safer router.
The basic settings
| Setting | Recommendation |
|---|---|
| Router admin password | Change the default one — often known or easy to find |
| Wi-Fi network password | Long, unique, different from the admin password |
| Encryption | WPA3 if available, otherwise WPA2 — never WEP (outdated and easily cracked) |
| Network name (SSID) | Avoid putting a family name or address in it |
WEP encryption can be cracked in minutes with common tools. If it's still active on your router, that's priority number one to fix.
Guest network
Setting up a separate Wi-Fi network for guests (and smart devices) keeps them from directly reaching the devices on your main network (computers, NAS, printer...).
Updates
- Router firmware should be updated regularly: it patches security flaws discovered after release.
- Many recent routers offer automatic updates — turn it on if available.
Going further
- Disable WPS (Wi-Fi Protected Setup): convenient, but often vulnerable to brute-force attacks.
- Disable remote router administration if you don't use it.
Thanks for the feedback!