A Practical Home Wi-Fi Security Checklist

A few settings can make a home network safer and easier to manage. Start with your router maker's instructions, change the defaults, and keep its software current.

WSDK Technology Guide · Published October 26, 2026 · 5 minute read

Your router connects phones, laptops, televisions, cameras and other devices to the internet. The Federal Trade Commission's home Wi-Fi guidance recommends a handful of straightforward protections. The exact menu names vary, so use the instructions from your router manufacturer or internet provider rather than guessing at settings.

Start with the two passwords

Routers usually have a Wi-Fi password for connecting devices and a separate administrator password for changing router settings. Replace both defaults with unique passwords that you do not reuse elsewhere. Store them in a trusted password manager or another secure place so you can still administer the network later.

Choose a network name that does not identify your name, home address or router brand. A plain, generic name is easier to share without broadcasting personal details.

Use a current encryption option

In your router's wireless-security settings, use WPA3 Personal if your router and devices support it. If they do not, use WPA2 Personal. Avoid outdated options such as WEP or the original WPA. If an older router offers only outdated choices, check for a software update; if modern encryption is still unavailable, consider replacing it with a supported model.

Some older devices may not support WPA3. Check their documentation before switching modes; if needed, WPA2 Personal may keep compatibility while providing the FTC-recommended encryption option.

Keep the router up to date

1. Find the router manufacturer and model on the device label or in the provider's app.
2. Check the manufacturer's or internet provider's instructions for firmware updates.
3. Turn on automatic updates if the router offers them and the provider recommends them.
4. Set a reminder to check for updates periodically if updates are manual.
5. Replace a router that no longer receives security updates when a supported option is available.

Use the official manufacturer or internet-provider app and site for update instructions. Avoid third-party downloads or utilities claiming to update router firmware.

Review convenience features and guest access

The FTC recommends turning off remote management, Wi-Fi Protected Setup (WPS) and Universal Plug and Play (UPnP) when you do not need them, since these features can reduce security. Some devices or services may rely on them, so first check your router's guide and the needs of the equipment you use. Keep the router's built-in firewall enabled, and log out of the administrator interface when you finish changing settings.

When friends or visitors need internet access, create a separate guest network if your router supports one. Give it a different password from your main network, and change it when you no longer want it shared. Use the router documentation to understand whether guest devices can see other devices on your home network.

Do a quick check a few times a year

• Confirm the router still receives updates and uses WPA3 or WPA2 Personal.
• Check that the administrator and Wi-Fi passwords have not reverted to defaults.
• Review the connected-device list and remove devices you no longer use, following the router's instructions.
• Update connected devices too; a secure router does not replace updates and passwords on phones, cameras and smart-home equipment.

Read the FTC's full guide to securing home Wi-Fi and its advice on protecting connected devices. For account-level security, see WSDK's passkeys and account-security guide; for a broader technology read, visit our money and technology briefing. Follow your router maker's instructions, especially before disabling a feature that a device or service depends on.