Key takeaways
- Change both the Wi-Fi password and the router’s admin password from their factory defaults.
- Use WPA3 Personal encryption if available, or WPA2 Personal; the FTC calls WPA and WEP outdated.
- Keep the router’s firmware updated, or ask your provider if it updates automatically.
- The FTC suggests turning off remote management, WPS and UPnP unless you need them.
- Replace routers that can’t support WPA2 or WPA3 even after updating.
Most people set up a router once and never look at it again. But the router connects every device in your home to the internet, so its settings matter. The Federal Trade Commission’s guidance boils down to a few practical steps.
1. Change the default passwords
Routers have two different passwords:
- The Wi-Fi password, which devices use to join your network.
- The admin password, which controls the router’s settings.
The FTC advises changing both from their factory defaults. Default passwords are often printed on the router or easy to find online. Avoid passwords based on personal details or the router’s brand.
2. Turn on strong encryption
In the router’s settings, choose:
- WPA3 Personal, which the FTC describes as the best option, or
- WPA2 Personal if WPA3 isn’t available.
The FTC considers WPA and WEP outdated and not secure. If your router only offers those, update its firmware; if WPA2 or WPA3 still doesn’t appear, the FTC suggests replacing the router.
3. Keep the firmware updated
Router software, called firmware, gets security fixes like any other software.
- Check the router’s app or the manufacturer’s website for updates when you set it up, and periodically after that.
- Sign up for the manufacturer’s update notices if offered.
- If your provider supplied the router, ask whether it updates automatically.
Quick tip: Put a reminder in your calendar every few months to log in to your router, check for updates and look at the list of connected devices. It takes five minutes.
4. Turn off features you don’t need
The FTC suggests turning off convenience features that can weaken security:
- Remote management, which lets the router be configured from outside your home.
- WPS (Wi-Fi Protected Setup), a push-button or PIN pairing method.
- UPnP (Universal Plug and Play), which lets devices open connections automatically.
Some games or devices may need UPnP; if something stops working, you can turn it back on deliberately.
5. Separate guests and smart devices
Many routers offer a guest network. Use it for visitors and smart home gadgets such as speakers, cameras and plugs, so they’re kept apart from the computers and phones you use for banking and email.
6. Check who’s connected
Your router’s app or settings page lists connected devices. If you spot one you don’t recognize, change your Wi-Fi password.
Security and speed go together
Router updates and a sensible setup often improve performance as well. Our guide to improving home Wi-Fi covers placement and coverage, and our guide to public Wi-Fi explains how to stay safe away from home.
FAQ
Where do I find my router’s settings?
Many routers have an app; others use a web page you open by typing an address printed on the router or in its manual. Your internet provider can help if you rent the router.
What should I name my network?
Choose a name that doesn’t identify you, your address or the router model. The name doesn’t affect security directly, but there’s no need to advertise personal details.
Should I set up a guest network?
It’s a good idea for visitors and smart home devices. A guest network keeps those devices separate from your main computers and phones.
How do I know if someone else is using my Wi-Fi?
Your router’s app or settings page usually lists connected devices. If you see ones you don’t recognize, change your Wi-Fi password and reconnect your own devices.
This guide is general information. Plans, prices and program rules change, so check the details with your provider and official sources such as the FCC and FTC before you decide.