Most of us set up a router once and never open its admin panel again unless something breaks. I was in that camp too, until I actually logged in one day and realized how many defaults I’d never touched. Here’s what I changed, and why each one actually matters rather than being security theater.
The admin login is the first thing to fix, not an afterthought
Routers ship with default credentials like admin/admin, and these aren’t secret — they’re published in enormous, searchable lists online specifically because they’re so common. Anyone who gets onto your network, even briefly, could use these to take over your router’s settings entirely if they’re never changed. This was the single most obvious gap in my own setup, and it took about two minutes to fix once I found the right settings page.
Pick real encryption, not whatever’s already selected
WPA3-Personal is the strongest option currently available on consumer routers, and worth using if both your router and your devices support it. WPA2/WPA3 mixed mode is the sensible middle ground if you’ve got older devices that can’t handle WPA3 alone. WEP, if your router still offers it as an option, should never be used — it’s old enough that it can be cracked in minutes with tools anyone can download.
WPS and UPnP sound convenient. They’re mostly not worth the risk.
WPS lets you connect a device by pressing a button rather than typing a password, which sounds great until you learn it’s a known weak point that’s been exploited through brute-force attacks in the past. UPnP automatically opens ports for devices that request it, which is convenient for some smart home gadgets but also a door left ajar for anything malicious that manages to get onto your network. I turned both off and haven’t noticed any real inconvenience since.
A guest network is worth setting up even if you rarely have guests
It’s less about visitors and more about keeping your main devices separate from anything less trusted — including smart home gadgets whose security you may not fully vouch for. Set a different password than your main network, and turn on guest isolation if the option exists, so guest devices can’t see or interact with each other either.
Firmware updates matter more than the name suggests
This is the internal software running your router, and it’s patched periodically to close security holes that get discovered after the device ships. Check your router’s dashboard for an update section, and turn on automatic updates if that’s available — leaving firmware outdated indefinitely is one of the more common ways home networks end up compromised.
Rename your network to something that isn’t the factory default
Leaving your SSID as “NETGEAR” or “Linksys” or whatever came printed on the box signals to anyone scanning nearby that the router likely hasn’t been configured at all — which makes it a more attractive target. Pick something unique, but skip anything that identifies you personally, like your name or apartment number.
Turn on the firewall if it isn’t already
Most routers include a basic firewall that filters unwanted inbound traffic, and in my case it was already enabled by default — but it’s worth checking rather than assuming, since some routers ship with it off.
If you’ve got a lot of smart home devices, consider separating them
Putting IoT devices — smart lights, cameras, that sort of thing — on their own separate network segment from your main computers and phones means a compromised smart bulb can’t act as a stepping stone into your laptop or personal files. This is a bit more setup than the rest of this list, but worth it if your smart home collection has grown the way most people’s have.
Actually look at who’s connected
Most router dashboards show a live list of connected devices. I found one I didn’t recognize the first time I checked — turned out to be an old tablet I’d forgotten was still on the network, harmless in my case, but it’s exactly the kind of thing worth catching regularly rather than assuming everything connected is something you put there yourself.
Turn off remote admin access unless you specifically need it
This feature lets you change router settings from outside your home network, which is genuinely useful in specific situations but an unnecessary open door for the vast majority of households that never use it.
What changed for me
None of this took more than about twenty minutes total, spread across the settings I’d genuinely never opened before. The network isn’t just theoretically more secure now — it also runs slightly better, since I disconnected a couple of forgotten devices and cleaned up settings that had been left on factory defaults since the day I unboxed the router. It’s worth the twenty minutes, even if nothing feels broken right now.
Tanimur Rahman is the founder of Internet Fix Guide. He writes step-by-step tutorials to help users solve WiFi, router, and internet connectivity problems quickly.