Default passwords, outdated firmware, unprotected IoT devices — practical steps to protect your Wi-Fi and everything connected to it.
Change Your Default Passwords
Every router ships with a default admin password — often printed on a sticker on the device itself. This means anyone who can see your router (or find its model online) knows how to access your network settings.
Change the admin password immediately. Use a strong, unique password: at least 12 characters with a mix of letters, numbers, and symbols. Also change the default Wi-Fi network name (SSID) — a generic name like "HUAWEI-5G-B823" tells potential attackers exactly what hardware you're running.
Enable WPA3 Encryption
Your Wi-Fi encryption protocol determines how well your network traffic is protected. WPA3 is the current standard and should be enabled if your router supports it. WPA2 is acceptable as a fallback.
Older standards like WEP and WPA are easily cracked and should never be used. Check your router settings under Wireless Security. If your router doesn't support at least WPA2, it's time for an upgrade — both for security and performance.
Keep Everything Updated
Security vulnerabilities in routers and connected devices are discovered constantly. Manufacturers release firmware updates to patch these holes, but many people never install them.
Check your router's admin panel for firmware updates at least monthly. Enable automatic updates if available. Do the same for smart home devices — smart speakers, cameras, doorbells, and thermostats are all potential entry points for attackers.
Create a Separate Guest Network
Most modern routers support a guest network — a separate Wi-Fi network that shares your internet connection but is isolated from your main network.
Use your guest network for: - Visitors (they get internet access without seeing your devices) - IoT devices like smart plugs, robot vacuums, and smart bulbs - Any device you don't fully trust
This way, even if a cheap smart device gets compromised, the attacker can't reach your laptops, phones, or NAS drives on the main network.
Use DNS-Level Protection
DNS filtering blocks malicious websites before they can even load. Configure your router to use a secure DNS provider:
- Cloudflare Family (1.1.1.3) — blocks malware and adult content - Cloudflare Security (1.1.1.2) — blocks malware only - CleanBrowsing — family-focused filtering options
Set this in your router's DNS settings and it protects every device on your network automatically — no software installation needed on each device.
Monitor Your Connected Devices
Regularly check which devices are connected to your network through your router's admin panel. Most modern routers show a list of connected devices with their names and MAC addresses.
If you see something you don't recognise, change your Wi-Fi password immediately. An unknown device could be a neighbour using your Wi-Fi — or something more concerning.
Some routers also show data usage per device, which can help identify unusual activity.
