How to Secure Your Home or Office Router and Wi-Fi

By J. Mesa

New laptops, smart speakers, cameras, and game consoles will join your network this month. Each one connects through the same small box: the router. Most people plug it in once and never look at it again. Attackers look at it often. Twenty minutes of setup closes the gaps they use.

Why does router security matter?

Your router sits between the internet and every device you own. A criminal who controls it can watch your traffic, send you to fake websites, attack the devices behind it, or rent your connection to other criminals who want to hide their location.

The FBI warned in 2025 that criminals target older routers that no longer receive updates and install malware that turns them into proxies for hire. The owners saw nothing wrong. Their internet kept working while strangers committed crimes through their address.

How do I log in to my router?

Use one of two methods.

• The app. Most routers sold in the last several years come with a phone app from the maker or from your internet provider.
• The web page. Connect to your network, open a browser, and type the router’s address. Common addresses are 192.168.0.1 and 192.168.1.1. The label on the router lists the address and the default login.

What settings should I change first?

Work through this list in order.

1. Change the administrator password. This is the password for the router’s settings, separate from the Wi-Fi password. Default admin passwords appear in public lists. Create a long, unique one and save it in your password manager.
2. Update the firmware. Firmware is the router’s built-in software. Find the update option in the app or the settings page and install what it offers.
3. Turn on automatic updates if the router supports them.
4. Set the Wi-Fi security to WPA3. If some of your devices can’t connect, choose the WPA2/WPA3 mixed mode. Never use WEP or an open network.
5. Set a strong Wi-Fi password. Use at least 16 characters. A phrase of four random words works.
6. Turn off WPS. Wi-Fi Protected Setup lets devices join with a button or a PIN, and the PIN method has a known weakness.
7. Turn off remote management. Nobody needs to reach your router’s settings from the internet.
8. Turn off UPnP unless a specific device requires it. Universal Plug and Play lets devices open ports to the internet without asking you.
9. Rename the network. Remove the router brand and your family or business name from the network name. Do not put your address or unit number in it.

What is WPA3, and do I need it?

WPA3 is the current standard for Wi-Fi encryption. It replaced WPA2 and resists the password-guessing attacks that work against WPA2 networks with weak passwords. Devices made since about 2020 support it. Use WPA3 where you can, and use WPA2 with a long password where you can’t.

Should I hide my network name?

No. Hiding the name does not stop an attacker, because free tools reveal hidden networks in seconds. It also makes your own devices broadcast the name wherever they go while they search for it. Leave the name visible and rely on strong encryption and a strong password.

How do I update router firmware?

Open the app or the settings page and look for “Firmware,” “Software update,” or “Router update.” Install the update and let the router restart. Check again every few months if the router lacks automatic updates.

If your internet provider supplied the router, the provider usually pushes updates. Restarting the router once a month helps it pick them up and clears some kinds of malware that live only in memory.

When should I replace my router?

Replace it when the maker stops releasing security updates. Search the model number plus “end of life” on the maker’s support site. As a rule of thumb, a router older than five or six years has reached that point or soon will.

An unsupported router keeps its known flaws for the rest of its life. No setting fixes that. A new router costs $80 to $250 and brings WPA3, automatic updates, and better speed.

What is a guest network, and why should I use one?

A guest network is a second Wi-Fi network that reaches the internet but can’t reach the devices on your main network. Use it for:

• Visitors and customers
• Smart TVs, speakers, cameras, doorbells, thermostats, and other smart home devices
• Children’s game consoles and tablets

Smart devices receive few updates and get hacked often. On the guest network, a hacked camera can’t reach the laptop that holds your tax returns or your customer files. Give the guest network its own password, and change that password a few times a year.

How do I secure an office network?

A business needs more than a consumer router from a big-box store.

• Buy business-grade equipment. A firewall or router built for business use receives longer support and offers logging and network separation.
• Separate the networks. Keep staff computers, guest Wi-Fi, payment terminals, cameras, and phones on separate segments. PCI DSS requires you to isolate the systems that handle card data.
• Lock up the hardware. Put the router and switches in a locked room or cabinet. A visitor with thirty seconds and a paperclip can reset a router that sits on the front counter.
• Change every default. That includes the admin passwords on cameras, printers, and network storage devices.
• Stop sharing one Wi-Fi password forever. Change it when an employee leaves, or use a system that gives each person a login.
• Record the setup. Document the model, firmware version, admin account, and settings. Export a backup of the configuration.
• Review the logs or have your IT provider do so.

What about employees who work from home?

A home router is part of your business network the moment an employee opens company email on it. Set expectations in a remote work policy:

• Change the default admin password and use WPA2 or WPA3.
• Keep the router’s firmware current and replace unsupported models.
• Put work devices on the main network and smart home devices on the guest network.
• Use the company VPN or secure access tool where you require it.

Share this article with remote staff and add the topic to your training.

Do I need a VPN on my home Wi-Fi?

For most people, no. Websites and apps already encrypt their traffic, and your own secured network is a trusted place. A VPN makes sense for reaching company systems that require one and for using public Wi-Fi in airports, hotels, and coffee shops.

How can I tell whether my router has been hacked?

Look for these signs:

• Settings you did not change, such as a new admin password or different DNS servers
• Websites that redirect to strange pages, or security warnings on sites you trust
• Unknown devices in the router’s list of connected devices
• A connection that slows down for no clear reason
• Remote management turned on when you turned it off

If you suspect a problem:

1. Reset the router to factory settings with the button on the back.
2. Update the firmware before you do anything else.
3. Set a new admin password and a new Wi-Fi password.
4. Walk through the settings list above again.
5. Change the passwords for your email and banking accounts from a device you trust.
6. Replace the router if the maker no longer supports it.

How often should I check my router?

Twice a year. Tie it to the clock changes or to the start of each school term. Confirm the firmware is current, review the list of connected devices, and remove anything you do not recognize.

Your next step

Find the label on your router tonight, log in, and change the admin password. Then check for a firmware update. For an office network, Cerberus Cybersecurity reviews network setup, segmentation, and remote work practices as part of our risk and compliance assessments. Contact us to schedule one for the new year.