How-To & Security
A calm, plain-language walkthrough for locking down your home network: a strong router password, modern encryption, firmware updates, a guest network, and the default settings worth changing today.
Your home router sits quietly in a corner, blinking away, and most of the time you forget it's there. That's exactly why it deserves a little of your attention. Nearly everything you do online flows through that one small box: your messages, your banking, your kids' homework, the smart speaker in the kitchen. Securing it isn't about becoming a network expert or buying anything new. It's about a handful of small, calm habits you set up once and rarely touch again.
The good news is that you don't need to do all of this today, and you don't need to be afraid of the menus. Let's walk through it the way I'd talk a friend through it on the phone: one reasonable step at a time.
Here's a distinction that trips up almost everyone, so let's clear it up first. Your router actually has two different passwords. One is the Wi-Fi password you type into your phone to get online. The other is the admin password that lets you log in and change the router's settings. They are not the same thing, and the second one matters more than people realize.
Many routers ship with a default admin login — something like "admin" and "password," or a label printed right on the box. Those defaults are widely published online, which means anyone who can reach your router could potentially walk straight into its control panel. So your very first move is to log in (usually by typing an address like 192.168.0.1 or 192.168.1.1 into a browser, or through the router maker's app) and change that admin password to something long and unique.
While you're in there, set a strong Wi-Fi password too. Length beats complexity here. A passphrase of a few unrelated words is easier to remember than a jumble of symbols and just as hard to guess.
The admin password is the lock on the door to every other setting on your network — change it before you change anything else.
Encryption is what scrambles the traffic between your devices and your router so that someone nearby can't simply read it out of the air. Your router almost certainly has it switched on already, but the type matters, because older standards have known weaknesses.
In your router's wireless settings, look for the security or encryption option. You'll see names like WPA2 or WPA3. Choose the most modern one your router and devices support — at the time of writing that's typically WPA3, with WPA2 as a solid fallback if some of your older gadgets won't connect to WPA3. What you want to avoid is anything labeled WEP or an "open" network with no password at all. Those leave the door wide open.
If you see an option called WPS — a feature that lets devices join by pushing a button or typing a short PIN — consider turning it off. It's convenient, but the PIN method has long been considered a weak point. You can always connect devices the normal way with your Wi-Fi password instead.
Firmware is the router's built-in software, and like any software, it occasionally has flaws that the manufacturer fixes over time. Updating it is how those fixes actually reach you. An out-of-date router can stay vulnerable to problems that were solved months ago, simply because no one pressed update.
Many modern routers can update themselves automatically, and if yours offers that, turning it on is the kindest thing you can do for your future self. If it doesn't, make a small recurring habit of checking — say, when you pay a monthly bill, glance at the router's admin page or app for a firmware update. It takes a minute or two, the router usually restarts on its own, and then you can forget about it again.
One related note: if your router is genuinely old, it may stop receiving updates entirely. When a manufacturer stops supporting a model, that's a reasonable signal it's time to replace it, the same way you'd eventually retire a phone that no longer gets security patches.
Most routers let you create a second, separate Wi-Fi network for visitors, and it's one of my favorite quiet wins. A guest network gives friends, houseguests, and casual visitors internet access without putting them on the same network as your personal computers, files, and devices.
It's useful in a few practical ways:
Setting it up is usually just a checkbox in the wireless settings, plus a name and password of its own. Give it a friendly name and a separate password, and you've added a layer of separation without inconveniencing anyone.
Beyond the admin password, a few default settings are worth a second look while you're already in the menus.
Consider renaming your network. The default name, sometimes called the SSID, often reveals the brand or model of your router, which gives a curious stranger a small head start. Pick something that doesn't broadcast your equipment or your identity — your apartment number or full name aren't ideal choices.
Finally, take a slow look at the list of features your router has enabled by default. Remote management, which lets you administer the router from outside your home, is convenient for some people but an unnecessary exposure for most — if you don't need it, leave it off. The same goes for any features you don't recognize and aren't using.
A small caution as you do all this: routers differ a lot. The exact wording, the menu layout, and even what's switched on out of the box vary by brand, model, and region. Treat the steps here as the what and the why, then confirm the precise how in your router's official manual or support site. And if you ever suspect your network has actually been broken into, rather than just tidying up settings, that's a moment to get help from a qualified professional.
None of this is a one-evening fortress project. Change the admin password tonight, switch on modern encryption and automatic updates, add a guest network when you have ten minutes, and tidy the defaults when you're already poking around. Each small habit quietly does its job, and your blinking little box in the corner goes back to being something you can comfortably forget about.
Mara is a digital-security writer who believes good security is a set of small habits, not constant paranoia. She turns intimidating topics — passwords, backups, phishing, privacy — into calm, doable steps. She's helped enough people recover from avoidable disasters to take backups very, very seriously.
Keep reading
A calm, practical guide to online privacy for normal people — what data you quietly leak, the settings worth tightening, and why sharing less is the simplest protection you have.
Mara Lindqvist
Forget the symbols-and-numbers gymnastics. A calm guide to passwords that are actually strong — why length beats complexity, how to build memorable passphrases, and why a manager does the heavy lifting.
Mara Lindqvist