Routers often run for years with default settings. Changing the admin password, Wi-Fi password, encryption, risky convenience features, and firmware settings closes most practical home-network risks.
Does this affect you?
Use this for ISP routers, Netgear, TP-Link, ASUS, Eero, Google Nest Wifi, Orbi, Deco, and most home Wi-Fi routers or mesh systems.
Change the two important passwords
The admin password and Wi-Fi password protect different things.
- Find the router admin address on the sticker or in network settings, often 192.168.1.1 or 192.168.0.1.
- Type it into a browser while connected to your network and sign in.
- Under Administration or System, change the router admin password to something long and unique.
- Under Wireless or Wi-Fi Settings, change the Wi-Fi network password to a different long unique password.
- Set security to WPA3 if available, or WPA2 at minimum. Do not use WEP.
Turn off risky features and separate devices
These settings reduce unnecessary exposure.
- Turn off WPS unless you actively need it. Its convenience comes with security weaknesses.
- Disable Remote Management or Remote Access unless you intentionally administer the router from outside home.
- Create a Guest Wi-Fi or IoT network for visitors and smart-home devices.
- Consider disabling UPnP unless a game console or specific device requires it.
Keep it updated
Router security needs occasional maintenance.
- Open Firmware Update in the router admin page or app.
- Install available firmware updates.
- Enable automatic firmware updates if offered.
- Replace routers that are more than 5 to 7 years old or no longer supported by the maker or ISP.
- Check Connected Devices every few months for unfamiliar devices.
More control
ISP routers still have settings
Provider routers from Xfinity, Spectrum, AT&T, and others usually have admin controls through an IP address or provider app. The same checklist applies.
Mesh systems use apps
Mesh routers usually expose Wi-Fi password, guest network, updates, and device lists through a phone app instead of a browser page.
Router security is not everything
A secure router does not stop phishing emails, scam calls, or malicious downloads. Keep device security and safe habits in place too.
Sources
- FTC Consumer Advice – How to secure your home Wi-Fi network (2025)
- CISA – Securing wireless networks (2025)
- FCC Consumer Guide – Wi-Fi network security (2025)