How to Secure Your WiFi Router (2026)

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.

Change the Default Admin Password

Every router ships with a default admin login (usually “admin/admin” or “admin/password”). These defaults are publicly known for every brand. Anyone connected to your network can look them up and access your router settings.

1. Log in to your router’s admin page (type 192.168.1.1 or 192.168.0.1 in a browser).
2. Navigate to “Administration,” “Management,” or “System.”
3. Change the admin password to something unique – at least 12 characters with a mix of letters, numbers, and symbols.
4. Save the new password in a password manager so you don’t forget it.

The admin password controls access to your router’s settings page. It’s separate from your WiFi password. If someone gets in, they can change your WiFi password, redirect your traffic, or open your network to outside access.

Set a Strong WiFi Password

Your WiFi password (the one devices use to connect) should be at least 12 characters long. Avoid dictionary words, names, addresses, or anything easily guessed. A random passphrase like “PurpleFork92Mountain” is strong and easy to remember.

Change it from the default that came printed on the router’s label. That default is visible to anyone who can physically see the router. Go to your router’s WiFi settings and update the password under “Wireless Security” or “WiFi Settings.”

Use WPA3 or WPA2 Encryption

Check your router’s wireless security settings and select WPA3 if available. If your router only supports WPA2, choose WPA2-AES (also called WPA2-Personal with AES). Some older devices don’t support WPA3, so many routers offer a “WPA2/WPA3 Mixed” mode that works with both.

Update Your Router’s Firmware

Router manufacturers release firmware updates that patch security holes and fix bugs. An outdated router is a known target for hackers.

1. Log in to your router’s admin page.
2. Find “Firmware Update,” “Router Update,” or “System Update” (usually under Administration or Advanced).
3. Click “Check for Updates” or “Update.”
4. If an update is available, install it. The router restarts during the process – don’t unplug it.

Many newer routers update automatically. Check your settings to make sure auto-update is enabled. If your router is more than 5 to 7 years old and no longer receives firmware updates, consider replacing it. Unsupported routers don’t get security patches.

Disable WPS

WPS (WiFi Protected Setup) lets devices connect by pressing a button or entering a PIN instead of typing the WiFi password. The PIN-based method has a known security flaw that lets attackers brute-force the PIN in hours.

1. In your router settings, find “WPS” (usually under Wireless or WiFi settings).
2. Disable it.

If you need WPS for a specific device (like a printer that only supports WPS setup), enable it temporarily, connect the device, and disable it again immediately after.

Hide Your Network Name (Optional)

You can hide your WiFi network name (SSID) so it doesn’t appear in the list of available networks on nearby devices.

1. In your router’s wireless settings, find “SSID Broadcast” or “Visibility.”
2. Disable SSID broadcast.
3. To connect a new device, manually enter the network name and password instead of selecting it from a list.

Hiding the SSID adds a minor layer of obscurity but isn’t true security. Anyone with basic WiFi scanning tools can still detect hidden networks. Think of it as removing your house number – it doesn’t lock the door, but it makes you slightly less obvious. A strong password and WPA3 encryption are far more effective.

Set Up a Guest Network

A guest network keeps visitors’ devices separate from your main network. Guests can use the internet but can’t access your computers, printers, shared files, or smart home devices.

1. In your router settings, find “Guest Network” or “Guest WiFi.”
2. Enable it and set a separate password.
3. Make sure “Access to Local Network” or “Allow guests to see each other” is disabled.

Give guests the guest network password instead of your main one. Change the guest password periodically. Some routers let you set bandwidth limits on the guest network so visitors don’t slow down your main connection.

Disable Remote Management

Remote management lets you access your router’s settings from outside your home network. Most people don’t need this, and leaving it on opens a door for attackers.

1. In your router settings, find “Remote Management,” “Remote Access,” or “Web Access from WAN.”
2. Make sure it’s disabled.

If you need to manage your router remotely, use the manufacturer’s app (Netgear Nighthawk, TP-Link Tether, ASUS Router) instead. These apps communicate through the manufacturer’s secure cloud servers rather than directly exposing your router to the internet.

Check Connected Devices Regularly

Periodically review the list of devices connected to your network. If you see something you don’t recognize, it could be an unauthorized user.

1. Log in to your router or open the router’s app.
2. Go to “Connected Devices” or “Client List.”
3. Count the devices and compare against what you know is connected.
4. Block any device you don’t recognize using MAC filtering or the block/pause feature.

Some devices show up with generic names. You can usually identify them by looking up the MAC address prefix online – the first six characters reveal the manufacturer (Apple, Samsung, Amazon, etc.).

Troubleshooting

Devices can’t connect after changing encryption. Some older devices (early smart home gadgets, old laptops, older gaming consoles) don’t support WPA3 or even WPA2-AES. Use “WPA2/WPA3 Mixed” mode if available, or keep WPA2-AES as a fallback. If a specific device still can’t connect, it may only support WEP – consider replacing that device, as it weakens your entire network’s security.

Forgot the new admin password. If you changed the admin password and forgot it, the only option is a factory reset. Press and hold the reset button on the router for 10 to 15 seconds. This restores all settings to defaults, including the admin login. You’ll need to set up your WiFi name, password, and all other settings again.

Firmware update fails. Don’t unplug the router during an update. If it fails, try again using a wired Ethernet connection instead of WiFi. Download the firmware file from the manufacturer’s website and upload it manually through the admin page if the automatic update keeps failing.

Can someone hack my WiFi?

With WPA2-AES or WPA3 encryption and a strong password (12+ characters), breaking into your WiFi through brute force is extremely difficult and impractical. Most “hacked” home networks result from weak passwords, default credentials, or outdated encryption (WEP). Follow the steps in this guide and your network is well protected against typical threats.

Do I need a firewall on my router?

Most routers have a built-in firewall enabled by default (SPI Firewall or NAT Firewall). Check your router’s security settings to make sure it’s on. The router firewall blocks unsolicited incoming traffic from the internet. Your computer’s built-in firewall (Windows Defender Firewall or macOS firewall) adds another layer of protection. Both should be enabled.

Should I use a VPN on my router?

A VPN on the router encrypts all traffic from every device on your network. This provides privacy from your ISP and protection on public-facing services, but it slows down your connection since the router’s processor handles the encryption. Most home users are better off running a VPN on individual devices (phone, laptop) rather than on the router. If you want full-network VPN, make sure your router has a fast enough processor to handle it without major speed drops.

See also: How to Log In to Your WiFi Router, How to Remove Devices From WiFi Router, How to Secure Your Smart Home Devices

Sources

CISA – Securing Wireless Networks | NIST – Guidelines for Securing WLANs