Skip to content
LatchkeyDaily
Subscribe

Lockdown guide · about 15 minutes

Lock down your home Wi-Fi router

By The Latchkey Daily Team, EditorsPublished Updated Verified January 22, 2027

What's at risk: The router is the front door for every device in the house, and most are still on the password printed on the box.

Verified against Varies by router, January 2027.

You'll need: the router's app or settings address, a password manager.

One account a day

The Deadbolt series runs in the daily brief. Get the next guide tomorrow morning.

Free. Weekday mornings. Includes free access to In Case and Serum, the Latchkey tools. Unsubscribe in one click.

Step by step

  1. Find the router's settings page. On a device connected to the Wi-Fi, open the router's app or type its address (often 192.168.1.1 or 192.168.0.1, printed on the router) into a browser. Log in with the admin details printed on the router if you never changed them.
  2. Change the admin password. In the settings, find Administration or System and change the admin password to a long one saved in your password manager. This is the password that controls the router, and the default one is public.
  3. Set the Wi-Fi security and password. In Wireless settings, choose WPA3 if offered, otherwise WPA2 (AES). Set a long Wi-Fi password; a phrase of four words is fine. You will need to reconnect devices once.
  4. Turn on automatic updates. Find Firmware or Software update and turn on automatic updates. If the router has no update in two years, it is time to replace it.
  5. Turn off remote management and WPS. Remote management (sometimes "access from the internet") off. WPS (the push-button connect) off; it has a known weakness.
  6. Set up a guest network. Turn on the guest network with its own password. Put visitors, smart TVs, cameras and plugs on it so a compromised gadget cannot see your laptop.
  7. Rename the network if it reveals the brand. If the network name is the router model or your family name, change it to something neutral. Attackers look up default passwords by model.

Routers are the device nobody thinks about and everybody depends on. The two fixes that matter most take five minutes: the admin password and automatic updates. The guest network is the third, because the cheap smart plug from the holidays is the weakest thing on your network.

Do this for a parent

  1. If the router came from the internet provider, call the provider and ask them to change the admin password and turn on updates; they can often do it remotely.
  2. Write the Wi-Fi password on a card by the router, not the admin password.
  3. If the router is more than five years old, replace it; new ones update themselves.

The whole set, in one afternoon: the Family Setup Kit.

If you get locked out

  1. Locked out of the settings? Hold the reset button on the router for ten seconds to restore factory settings, then redo the steps above.

Questions people ask

Do I really need to change the admin password?
Yes. Default admin passwords are listed online by model. Anyone on your network, including a hacked smart plug, can take over a router that still has one.
Is the provider's router good enough?
Usually, if it updates itself and you change the admin password. Ask the provider; many now push updates automatically.

Related

  • Guide

    Lock down your Gmail account

    Your email is the master key. Anyone inside it can reset the password on your bank, your Amazon and everything else.

  • Guide

    Lock down your Outlook or Microsoft account

    Your Microsoft account is your email, your OneDrive files and often your Windows login. It resets everything else.

  • The scam this stops

    The tech support scam

    The tech support scam is a pop-up, call or email claiming your computer is infected or a subscription is about to renew, which leads to a "technician" taking remote control of your computer and either charging for fake repairs or using the access to get into your bank.