Securing Home Wi-Fi

The Front Door to Your Home

Think of your home Wi-Fi router as the front door to your house. Every piece of data—from your banking app on your phone, to your smart TV’s Netflix stream, to the video feed from your baby monitor—must pass through this single box to get to the internet.

If a hacker breaks into your Wi-Fi router, they are essentially inside your house. They can intercept your traffic, see what websites you are visiting, and potentially infect your computers with malware.

4 Steps to Lock Down Your Network

1. Change the Admin Password Immediately

When you buy a router from Best Buy or get one from your internet provider, it comes with a default administrator password printed on a sticker on the bottom. Hackers know these passwords. They have massive lists of every default password for every router brand in existence.

• Open a web browser and type in your router’s IP address (usually 192.168.1.1 or 10.0.0.1).
• Log in using the sticker credentials.
• Find the “Administrator Settings” and change the password to a strong, unique Passphrase (and save it in your Password Manager).

2. Upgrade the Wi-Fi Encryption (WPA3)

Your Wi-Fi password (the one you give to guests when they visit) is used to encrypt the airwaves in your house.

• In your router settings, look for “Wireless Security.”
• Ensure the security type is set to WPA3 (or at minimum, WPA2-AES).
• Never use WEP or WPA (without the 2 or 3). These older standards can be hacked in seconds by a teenager using free software.

3. Change the Network Name (SSID)

The name of your Wi-Fi network (the SSID) tells hackers a lot about you. If your network is named “Netgear-5G-Router,” you are telling a hacker exactly what brand of router you own, making it easier for them to search for known vulnerabilities for that specific brand.

• Change your network name to something completely random and unidentifiable.
• Never include your family name or address in the Wi-Fi name (e.g., “SmithFamily-Web”).

4. Create a “Guest Network” for Smart Devices

Modern routers allow you to broadcast a second, separate Wi-Fi network called a “Guest Network.” This network provides internet access, but it places an invisible wall between the devices connected to it and the devices on your main network.

• Put all your cheap, insecure “Smart” devices (smart lightbulbs, cheap security cameras, smart thermostats) on the Guest Network.
• If a hacker compromises a cheap smart lightbulb, the invisible wall prevents them from jumping over to your main network to hack your work laptop.