Expertspost
When I helped my parents set up their internet, I noticed their router still had the default admin password printed on a sticker on the side, and their Wi-Fi was wide open to anyone who walked past. That is the default state for a huge number of homes, because the router works fine out of the box and nobody has a reason to dig into the settings. Five changes fix the things that actually matter.
Getting into your router settings
Everything here happens in your router's settings page. You reach it in one of two ways. Newer routers, especially mesh systems like a TP-Link Deco or eero, use a phone app, and you do everything there. Older or standalone routers use a web page: open a browser and type the router's address, commonly 192.168.1.1 or 192.168.0.1, which is often printed on the router itself.
If you have never logged in, the username and password are usually on that same sticker. Which brings us neatly to the first thing to change.
1. Change the admin password
The admin password protects the router's settings themselves, and it is different from your Wi-Fi password. Default admin credentials are public knowledge, often just "admin" and "password," and anyone who gets onto your network could use them to take control of the router.
Change it to something strong and unique. This is the gatekeeper for every other setting, so it is worth doing first. If you use a password manager, store it there; if you are wondering if that is worth the bother, I made the case after two years of using one. Write it somewhere safe regardless, because you will rarely use it and will absolutely forget it otherwise.
If you ever bought your router secondhand or it was handed down, this step matters even more. A previous owner could know the default credentials or have left their own in place. Resetting to factory defaults and then setting a fresh admin password is the clean way to start. It takes two minutes and removes any leftover access from whoever had it before you.
2. Set a strong Wi-Fi password and WPA3
Your Wi-Fi password is the one devices use to join the network. If yours is still the random string on the sticker, that is actually fine for security, but many people change it to something memorable and weak. Aim for a passphrase that is long rather than complicated; a few unrelated words are both strong and easy to type on a TV remote.
While you are there, check the security type. Set it to WPA3 if your router and devices support it, or WPA2 as the minimum. If you ever see options called WEP or "open," avoid them; WEP is decades old and trivially broken. Some routers offer a "WPA2/WPA3 mixed" mode that keeps older devices working while using the newer standard where possible, which is the safe choice for a typical home.
A long passphrase of a few random words beats a short jumble of symbols every time.
3. Turn on automatic firmware updates
Firmware is the router's internal software, and updates fix security holes and bugs. The problem is that routers do not nag you the way phones do, so an un-updated router can sit for years with known vulnerabilities. Many people never update theirs once.
Look in the settings for a firmware or system update section and enable automatic updates if the option exists. If it does not, set a reminder to check manually a couple of times a year. Modern mesh systems handle this silently in the background, which is one of their quiet advantages. An old router that no longer receives any firmware updates from the manufacturer is itself a reason to consider replacing it.
4. Create a guest network
A guest network is a separate Wi-Fi name that gives visitors internet access without putting them on your main network alongside your computers, phones, and files. Almost every router supports it, and it is genuinely useful.
Two real benefits. First, you can give guests the guest password without ever sharing your main one, and you can change it freely. Second, it is a tidy place to put smart home gadgets, the cheap bulbs and plugs of the kind I covered in building a subscription-free smart home, keeping those chattier, less-trusted devices isolated from your personal computers. Set it up once, name it clearly, and you will reach for it more than you expect.
Many routers also let you enable "client isolation" on the guest network, which stops devices on it from talking to each other. That is exactly what you want for a network full of cheap gadgets and occasional visitors. The whole point is containment: if one inexpensive device turns out to have a security weakness, it sits on a network that cannot reach your laptop, your network storage, or your phone.
5. Channels, bands, and one to skip
The last category is performance, and here the advice comes with honesty about what helps and what does not.
- Use both bands wisely. Your router broadcasts on 2.4GHz (longer range, slower, more congested) and 5GHz (faster, shorter range). Many routers now use one name and steer devices automatically, which is fine. If yours has separate names, connect nearby devices to 5GHz for speed.
- Try changing the channel if your area is crowded. In an apartment building, neighbors' networks can clog the same channel. Most routers auto-select, but manually trying a different channel can help in dense areas. This is hit or miss, so only bother if you have congestion problems.
- Position matters more than settings. A central, raised, open spot beats almost any software tweak. If a room is still weak after all this, the issue may be coverage, and it is worth understanding mesh versus an extender before buying anything.
A bonus tweak if your household has kids or you just want fewer late-night distractions: most routers let you schedule access or pause Wi-Fi for specific devices. It lives under parental controls or a similarly named menu, and it is handy for setting a bedtime cutoff for a kid's tablet without confiscating anything. Mesh apps make this especially easy, often with a per-person profile you can pause with one tap.
The one I tell people to skip: do not bother hiding your network name (SSID). It feels like security but provides essentially none, since the network is still detectable, and it just makes connecting new devices a hassle. Another to skip for most homes is MAC address filtering, which is fiddly to maintain and trivial to get around, so it adds hassle without meaningful protection. Spend your five minutes on the admin password and firmware updates instead. Those are the changes that actually matter, and once they are done you can close the settings page and forget about it for a year.
