How to Secure Your Home Wi-Fi Network: A 12-Step Checklist

Your home router is the front door to every laptop, phone, camera, smart speaker and thermostat in the house. Most people set it up once, maybe years ago, and never look at it again. That is exactly what attackers count on.

The good news: securing home Wi-Fi does not require technical expertise or new gear in most cases. Federal guidance from the FTC and the NSA boils down to a short list of settings, and you can work through all of them in under an hour. This checklist walks you through each step, explains why it matters and flags the one situation where you really do need a new router.

Why home Wi-Fi security matters more now

A typical household now has far more connected devices than it did a few years ago: work laptops, kids’ tablets, video doorbells, TVs, speakers and appliances. Each one is a possible way in, and many smart devices rarely get security updates.

Old routers are a growing target too. In May 2025, the FBI warned that criminals were taking over end-of-life routers, devices the manufacturer no longer updates, and renting them out as proxies to hide other attacks. The FBI noted that routers from 2010 or earlier likely no longer receive updates. An infected router can slow your internet, expose your traffic and make your connection look responsible for someone else’s crimes.

If your Wi-Fi is also simply slow, that is usually a separate issue. See why your Wi-Fi is slow after you finish the security steps.

Before you start: get into your router

Every step below happens in your router’s settings. There are 2 common ways in:

• The router’s app. Most current routers and mesh systems, including many from internet providers, are managed through a phone app.
• A web browser. Type the router’s address, often printed on a sticker on the device, into a browser while connected to your network.

If your internet provider supplied the router, some settings may be locked or managed through the provider’s own app or account page. Check its support site if you cannot find an option.

The home Wi-Fi security checklist

1. Change the router admin password

The admin password protects the router’s settings, not the Wi-Fi itself. Many routers ship with a default admin login that anyone can look up online. Change it to a long, unique password, and if the router lets you, change the admin username too. The FTC recommends using 2 different passwords: one for joining the Wi-Fi and a separate one for the admin login. A password manager makes this painless.

2. Turn on WPA3, or WPA2 at minimum

Look for the security or encryption setting and choose WPA3-Personal. The FTC says to use WPA2-Personal if WPA3 is not available, and to avoid older WEP and WPA settings entirely. Many routers offer a WPA2/WPA3 transition mode that lets older devices connect while newer ones use WPA3. That is a sensible choice if some devices cannot join a WPA3-only network.

If your router only offers WEP or the original WPA, check for a firmware update. If none exists, it is time to replace the router.

3. Use a long, unique Wi-Fi password

Length beats complexity. A passphrase of 4 or 5 random words is easier to type on a TV and much harder to crack than a short jumble. Do not reuse a password from any other account.

4. Rename your network

The FTC recommends changing the default network name to something that does not reveal personal details or the router brand. “Smith Family 2B” tells a stranger more than they need. A neutral name works fine.

5 and 6. Update the firmware and turn on auto-updates

Firmware updates patch security holes that attackers actively exploit. In the router app or settings page, look for “Firmware,” “Software update” or “Administration,” and install anything available. Then turn on automatic updates if offered. If your provider supplied the router, ask whether it pushes updates automatically.

7, 8 and 9. Turn off remote management, WPS and UPnP

These 3 features trade security for convenience, and the FTC recommends turning all of them off:

• Remote management lets someone change router settings over the internet. Most people never need it, and the FBI specifically advised disabling it on older routers.
• WPS (Wi-Fi Protected Setup) connects devices with a button or PIN. The PIN method in particular has long been a known weak point.
• UPnP (Universal Plug and Play) lets devices on your network open ports to the internet automatically, without asking you.

If a game console complains after you turn off UPnP, you can usually set up a specific port forward for that one device instead.

10. Confirm the firewall is on

Most routers include a basic firewall that is on by default. Check that it is enabled. If you want to understand what it actually blocks, see our explainer on what a firewall is.

11. Create a guest network for visitors and smart devices

A guest network is a separate Wi-Fi name and password that cannot reach the computers and phones on your main network. Use it for:

• Visitors, so you never have to share your main password
• Smart TVs, speakers, plugs, bulbs and cameras, which often get fewer security updates than laptops and phones

If one of those gadgets is compromised, the attacker is stuck on the guest side. The NSA’s home network guidance also recommends this kind of wireless network segmentation. Some routers call it an “IoT network” rather than a guest network. If you are building out a connected home, our guide on how to set up a smart home covers device choices.

When shopping for smart devices, look for the U.S. Cyber Trust Mark, a voluntary FCC label for connected products that meet baseline security criteria based on NIST standards. The program is still ramping up, so many good products will not carry it yet.

12. Review connected devices and log out

Look at the list of connected devices in your router app. If you see something you do not recognize, change the Wi-Fi password, which kicks everything off, and reconnect only your own devices. Finally, log out of the admin session, as the FTC recommends.

Key takeaway: Five settings do most of the work: a new admin password, WPA3 or WPA2, current firmware, remote management turned off and a guest network for smart gadgets. If your router cannot do those things, the router itself is the security problem.

When to replace your router

Replace your router if any of these apply:

• The manufacturer no longer releases firmware updates for it (check its support page for “end of life” or “end of support”)
• It only supports WEP or the original WPA
• It is roughly 2010-era or older, which the FBI says likely means no more updates
• Your provider’s rented router is outdated and the provider will swap it at no cost

When you buy, look for WPA3 support, automatic updates and a simple app with a guest or IoT network option. Mesh systems make all of this easier in larger homes. Compare options in our guide to mesh Wi-Fi vs router vs extender.

Extra protection worth considering

• Protect your devices, not just the network. Keep phones, laptops and smart devices updated, and turn on two-factor authentication for important accounts, including your router or mesh app account.
• Set up parental controls at the router or device level if you have kids. See how to set up parental controls.
• Use a VPN on public Wi-Fi. At home, a properly secured network does most of the job. Our guide on whether you need a VPN explains when one helps.
• Reboot occasionally. The FBI noted that much router malware does not survive a reboot, so restarting after you apply updates is a good habit.

Where to start tonight

1. Open your router’s app or web settings page.
2. Install any available firmware update and turn on auto-updates.
3. Change the admin password and save it in a password manager.
4. Switch encryption to WPA3-Personal or WPA2/WPA3 transition mode.
5. Turn off remote management, WPS and UPnP.
6. Create a guest network and move smart home devices and visitors onto it.
7. Check the connected devices list, then log out.

Set a calendar reminder to repeat steps 2 and 7 every 3 months.

The bottom line

Securing home Wi-Fi comes down to replacing defaults, encrypting properly, staying updated, switching off risky shortcuts and isolating the devices you trust least. None of it requires special skills, and most of it takes a few minutes. Do it once, check in every few months and replace the router when updates stop.

Sources

• FTC: How to secure your home Wi-Fi network — WPA3/WPA2, separate passwords, firmware, disabling remote management, WPS and UPnP, guest networks
• NSA: Best Practices for Securing Your Home Network (PDF) — updating equipment, WPA3/WPA2 and wireless segmentation
• FBI IC3: Cyber criminal proxy services exploiting end of life routers — May 2025 warning on outdated routers, replacing devices and disabling remote administration
• Wi-Fi Alliance: Security — WPA3 protections and certification requirement