Most home Wi-Fi networks are running with the security defaults from the day they were installed — which usually means "better than nothing, worse than they should be." Here are eight changes that take 15 minutes and meaningfully harden your network.

1. Change the router admin password

The biggest hole on most home networks: anyone on the Wi-Fi can log into the router (often with admin/admin) and change everything. Log in to your router admin page, change the admin password to something long and unique. Print it and tape it to the router.

2. Use WPA3 (or WPA2 if WPA3 isn't available)

Older WPA and WEP are crackable in minutes. WPA2 is acceptable. WPA3 is the current standard. In your router: Wireless → Security → set to WPA3-Personal or WPA2/WPA3 Mixed. Long passphrase (16+ characters), not a dictionary word.

3. Disable WPS

WPS (the one-button-pair feature) has a known vulnerability that lets attackers brute-force the WPS PIN in hours. Turn it off in your router settings — you'll lose nothing by typing the Wi-Fi password instead.

4. Set up a guest network

Almost every router supports a separate guest SSID isolated from your main network. Visitors and IoT devices (smart bulbs, cameras, voice assistants) go on guest. They get internet, they can't reach your laptop or NAS.

5. Disable UPnP

UPnP lets devices punch holes through your router's firewall on demand. Convenient for game consoles, dangerous because malware uses the same mechanism. Disable it in router settings; configure manual port forwards if specific apps need them.

6. Update router firmware

Routers ship with vulnerabilities; updates fix them. Most consumer routers don't auto-update — check the admin page monthly. If the model is over 5 years old and no longer gets updates, replace it.

7. Hide or rename the SSID

Rename to something neutral that doesn't include your address, name, or router model. Hiding the SSID isn't a real security measure (anyone with a laptop can see it anyway) but rebroadcasting your apartment number is just bad operational hygiene.

8. Audit who's on your Wi-Fi

Periodically check connected-device lists. Here's how to spot freeloaders. Anything you don't recognize: investigate or block.

Try it now

Curious what your IP is showing the world right now? Check your IP address & location instantly with our free tool — no signup, nothing stored. Or trace any other IP to see its geolocation, ISP, and network details.