Most people plug in a new router, connect to the default network, and never touch another setting again. That works, technically — but it leaves real speed and security on the table. Here’s the setup process I actually follow now, having learned a few of these the hard way.
Before you plug anything in
Gather the router, its power adapter, the Ethernet cable it came with, and your ISP’s modem. Also find the default admin login — usually a sticker on the router itself, or in the included manual. You’ll need this once, briefly, before changing it to something better.
Physical connection order matters more than people think
Power off the modem completely, unplugging it if there’s no separate switch.
Disconnect any cable running directly from the modem to a computer, if you had one set up that way before.
Connect the modem to your new router using an Ethernet cable, plugged into the router’s WAN or “Internet” port specifically — not one of the regular LAN ports.
Power the modem back on and give it a full one to two minutes to fully reconnect before touching the router.
Power on the router and wait for its lights to stabilize completely.
Connect a device — ideally via Ethernet for this first setup step, since it’s more reliable than wireless while you’re still configuring things.
Getting into the router’s dashboard
Open a browser and type the router’s default IP address into the address bar — commonly 192.168.1.1 or 192.168.0.1, though some brands use a custom address instead (Netgear uses routerlogin.net, for instance, and TP-Link uses tplinkwifi.net). Log in with the default credentials from the sticker, and most modern routers will walk you through an initial setup wizard from there.
The single most important step people skip
Change the default admin username and password immediately, before doing anything else. Default router credentials are published online in enormous lists — leaving them unchanged means anyone on your network, or in some cases anyone within WiFi range, could get into your router’s settings.
Setting up the actual WiFi network
Head into the Wireless or WiFi settings section and:
Give your network a name (SSID) that isn’t a default like “NETGEAR” or “TP-Link” — generic default names are specifically what attackers scan for, since they suggest an unconfigured, likely-vulnerable router.
Set a WiFi password that’s at least 12 characters, mixing letters, numbers, and symbols. This is separate from the admin password you just changed — don’t reuse it.
If your router supports dual-band (2.4GHz and 5GHz), decide whether to keep them separate or use a “Smart Connect” style feature that automatically assigns each device to whichever band suits it best.
Choosing your security protocol
Use WPA3-Personal if your router and devices support it. If you have older devices that don’t, WPA2/WPA3 mixed mode is the practical compromise. Never use WEP — it’s decades out of date and can be broken in minutes with freely available tools.
Worth turning on before you walk away
Enable the firewall if it isn’t already on by default — most routers include one, and it’s a meaningful layer of protection against unwanted inbound traffic.
Set up a guest network with its own separate password. This keeps visitors off your main devices entirely, which matters more than people expect once you consider how many personal files and smart home devices sit on a typical home network.
Check for a firmware update right away, even on a brand new router — manufacturers frequently ship a slightly older firmware version than what’s currently available, and updates often patch real security issues.
Placement, because it genuinely changes performance
Put the router somewhere central and elevated, away from thick walls, metal objects, and large appliances. A router tucked in a closet or behind the TV will underperform no matter how well you’ve configured everything else.
A couple of optional extras for anyone who wants to go further
Manually selecting a WiFi channel (1, 6, or 11 on 2.4GHz) can reduce interference in crowded apartment buildings where auto-select sometimes struggles to find genuinely open airwaves. MAC address filtering exists too, but it’s a minor speed bump for a determined attacker rather than real security — strong encryption and a strong password do the actual heavy lifting.
Testing before you consider it done
Connect your usual devices, run a speed test, and walk to the rooms that are typically weakest to check signal there specifically. If a room is still struggling after correct placement, that’s the point to consider a mesh system or a WiFi extender rather than assuming something in the setup itself is wrong.
Setting a router up properly takes maybe twenty extra minutes over just plugging it in and walking away — but it’s the difference between a network that’s fast and genuinely secured, versus one that just happens to work until it doesn’t.
Tanimur Rahman is the founder of Internet Fix Guide. He writes step-by-step tutorials to help users solve WiFi, router, and internet connectivity problems quickly.