How to Secure Your Home Network

The settings that actually matter, in the order that matters. Ten minutes gets you most of the way.

Home network advice usually swings between "change your Wi-Fi password" and a forty-step guide involving VLANs. Here's the practical middle: what genuinely reduces risk, ordered so that if you stop after step two, you've still fixed most of it.

01Change the router's admin passworddo this first

Not the Wi-Fi password — the admin password you use to log into the router itself. A huge number of routers still run with the default printed on the sticker, and default credential lists are public. Anyone who gets on your network can then own the router.

Log in (usually 192.168.1.1 or 192.168.0.1).
Set a long, unique password. Store it in a password manager, not on a sticky note.
While you're there: turn off remote/WAN administration if it's on. Nobody needs to reach your router's admin page from the internet.

02Turn on automatic firmware updates

Router firmware has vulnerabilities like everything else, and an unpatched router is a permanent open door. Most modern routers can update themselves — turn it on. If yours can't, set a calendar reminder to check quarterly, and if the manufacturer has stopped issuing updates entirely, that router is past retirement.

03Use WPA3 (or WPA2), and a real passphrase

Set encryption to WPA3 if available, WPA2 otherwise. If you see WEP or WPA (original), change it now — those are broken, not merely dated.

Use a passphrase of several words. Length beats symbol soup.
Turn off WPS. The push-button pairing feature has known attacks and you almost certainly don't need it.

04Put smart devices on the guest network

Cameras, plugs, TVs, doorbells, and speakers are the least-maintained computers in your house. Many never receive another update after purchase. The fix is isolation, not hoping.

The easy version: enable your router's guest network and put every smart device on it. Guest networks are typically isolated from the main network, so a compromised camera can't reach your laptop, your NAS, or your work machine. No VLAN knowledge required.

05Turn off what you're not using

UPnP — convenient, but it lets any device on your network silently open holes in your firewall. Off unless something specific breaks without it.
Port forwarding — review the list and delete anything you don't recognize or no longer use. Every forward is a door.
Remote access to devices — if you've exposed a camera or NAS to the internet, put it behind a VPN instead.

The single most dangerous setting in a home network is a port forward pointing at a device with a default password. That's how consumer cameras end up on public streaming sites. If you forward anything, that device needs a strong unique password and current firmware — no exceptions.

06Know what's actually connected

Your router has a list of connected devices. Look at it once. Anything you can't identify, chase down — it's usually a forgotten tablet, occasionally something a neighbor is on. Renaming your devices to something recognizable makes this check take thirty seconds next time.

07Cover the endpoints, not just the network

A secure network doesn't help if the laptop on it is compromised. Keep automatic updates on for your computers and phones, use a password manager, and turn on MFA for email and banking. Those three do more for you personally than any router setting.

Want the full checklist to work through?

The Home Network Setup & Security Checklist — the complete step-by-step, in order, so nothing gets missed. Instant download.

Get the checklist — $4 →

The ten-minute version

If you do nothing else: change the router admin password, turn off remote administration and WPS, enable automatic firmware updates, and move your smart devices to the guest network. That's the large majority of realistic home network risk, handled.

Securing accounts rather than the network? The Personal Cybersecurity Checklist covers the account side. Running a business from home? Start with the small business security checklist.