More than 1.3 million Americans were victims of a late summer data breach (where hackers stole Social Security numbers and personal information), a number that could continue to rise as the year ends. If you were one of the victims of the national public data breach – where some estimates put the number of people affected in the hundreds of millions – or a Cash App user who lost money due to a similar data breach, you may be thinking on how to batten down the hatches on your home network.
Wi-Fi is convenient and we often assume that in the comfort of our homes our data will be safe. If someone with bad intentions gains access to your network, they can take control of any of your connected devices, install malicious software, and spy on sensitive data like credit card numbers and live camera footage.
A secure home network will help reduce the risk of being hacked and someone accessing your confidential information. It will also keep away unwanted or unauthorized users and devices that could slow down your connection or use up the Internet service you pay for.
Below you will find 10 quick and simple steps to secure your home network. Some are more effective than others at keeping hackers and freeloaders at bay, but they are all useful in their own way.
It is important to note that nothing can guarantee absolute security against hacking attempts. These tips just make it much harder for someone to compromise your network and data. (For more Wi-Fi tips, check out how to tell if your ISP is throttling your Wi-Fi and our tips on how to speed up your Wi-Fi connection).
Tips for securing your Wi-Fi network at home
Here are the basics for securing your home Wi-Fi network. Keep reading for more information on each below.
- Place your router in a central location.
- Create a strong Wi-Fi password and change it frequently.
- Change the router's default login credentials.
- Turn on firewall and Wi-Fi encryption.
- Create a guest network.
- Use a VPN.
- Keep your router and devices updated.
- Disable remote access to the router.
- Check connected devices.
- Upgrade to a WPA3 router.
1. Place your router in a central location
Strong network security starts with optimized configuration. If possible, place the router near the center of your home. Routers send wireless signals in all directions, so placing your router strategically in a central location will help maintain your connection within your home. As a bonus, it will probably also provide the best connection quality.
For example, if you have Internet in an apartment where neighbors are immediately to your left and right, placing your router near a shared wall can send a strong, tempting signal your way. A good router can transmit signals next door or across the street, even if you're not in an apartment. Placing your router in a central location reduces the distance these signals travel outside your home. CNET recommends the TP-Link Archer AX21, which performed well in terms of speed and range and had low latency when we tested it.
2. Create a strong Wi-Fi password and change it frequently
That he must It goes without saying, but I'll still cover this to emphasize its importance: creating a unique password for your Wi-Fi network is essential to maintaining a secure connection. Avoid passwords or phrases that are easy to guess, such as someone's name, birthday, phone number, or other common information. Although simple Wi-Fi passwords are easier to remember, they are also easier for others to guess. You can easily access your router settings to update your Wi-Fi password.
Oh, and be sure to change your password every six months or whenever you suspect your network security may have been compromised. The more frequently you change your password, the less compromised it will be.
3. Change the router's default login credentials
Along the same lines as password-protecting your Wi-Fi network, you also want to prevent anyone from directly accessing your router's settings.
To do this, go ahead and change your router's administrator name and password. You can log into your router's settings by typing its IP address into the URL bar, but most routers and providers have an app that lets you access the same settings and information. If you're not sure how to determine your IP address, read our guide.
Your router's login credentials are separate from your Wi-Fi network name and password. If you're not sure what the default is, you can find it at the bottom of your router. Or, if the default has changed at some point, here's how to go into your router's settings to update your username and password.
4. Enable Firewall and Wi-Fi Encryption
Most routers have a firewall to prevent outside hackers and Wi-Fi encryption to prevent anyone from eavesdropping on the data sent and received between the router and connected devices. Both are normally on by default, but you should check to see if they are enabled in your router settings.
Now that you know how to log into your router's settings, make sure your firewall and Wi-Fi encryption are turned on. If they are off for some reason, turn them on. Your network security will thank you.
5. Create a guest Wi-Fi network
Before sharing access to your main home network, consider creating a separate guest network for visitors. I'm not suggesting that your guests will try anything nefarious with your main Wi-Fi connection, but their devices or anything they download while connected to your network could be infected with malware or viruses that hit your network without them knowing.
A guest network is also ideal for your IoT devices like Wi-Fi cameras, smart thermostats, and smart speakers—devices that may not contain a lot of sensitive information and are perhaps more easily hackable than a smarter device like a computer or telephone.
6. Use a VPN
There are a few reasons to use a good VPN, and network security is one of them. A virtual private network hides your IP address and Wi-Fi activity, including browsing data.
VPNs are most useful when connected to a public network, but they can still add a level of security and privacy to your home network. Some VPNs are better than others, but like anything, you often get what you pay for. Free VPN services are available, but if you pay a few extra dollars a month you can get a much more secure service. Other advantages of using a VPN are that it can be great for streaming and online gaming.
7. Keep your router and devices updated
Software updates can be annoying, but they often include security updates. When companies become aware of potential or exposed security vulnerabilities, they release updates and patches to minimize or eliminate the risk. Stay updated on how to download them regularly.
Keeping your router and connected devices up to date with the latest updates will help ensure you have the best protection against known malware and hacking attempts. Set your router to auto-update in your admin settings if possible, and check periodically to make sure your router is up to date.
8. Disable remote access to the router
Remote router access allows anyone who is not directly connected to your Wi-Fi network to access your router settings. Unless you need to access your router outside of the home (to check or change the configuration of a child's connected device, for example), there should be no reason to turn on remote access.
You can disable remote access in your router's admin settings. Unlike other security measures, remote access to the disabled router may not be the default.
9. Check connected devices
Frequently inspect the devices connected to your network and make sure you know what they are. If anything looks suspicious, unplug it and change the Wi-Fi password. After changing your password, you'll have to reconnect all your previously connected devices, but any users or devices that aren't authorized to use your network will boot.
Some devices, especially obscure IoT ones, may have strange default names of random numbers and letters that you don't immediately recognize. If you find something like this when auditing your connected devices, disconnect them. Later, when you can't turn on your robot vacuum cleaner from your phone, you'll know that was it.
10. Upgrade to a WPA3 Router
WPA3 is the latest security protocol for routers. All new routers must be equipped with WPA3, so if you buy a new router there should be nothing to worry about. Many people rent their routers directly from the provider, which may not include the most up-to-date equipment.
If your router was manufactured before 2018, you may have a WPA2 device, which does not have the same security protocols as newer WPA3 devices. A quick search for your device model should tell you when it was released and any specific features, like whether it has WPA2 or WPA3. If you have a router with WPA2, call your provider and negotiate for a newer, better router.
End result? Network security is not guaranteed
Again, even with the latest and most effective methods of protecting your home network, security will never be 100% certain. As long as the Internet exists, hackers and cybercriminals will find ways to exploit it. With the tips above, you can keep your network more secure against anyone trying to use your connection or access your data.
For more tips, check out how to find free Wi-Fi anywhere in the world and the ideal location for your router.
