Before you start
- Access to your router’s app or admin page
Method 1 Lock down access to the router
-
Step 1: Change the admin password
In System/Administration, replace the default admin password with a long unique one. Save it in a password manager.
-
Step 2: Update firmware
Check for updates in the app or under Firmware Upgrade, and turn on automatic updates if offered.
-
Step 3: Turn off remote management
Disable Remote Management/Web Access from WAN unless you need to manage the router away from home (then use the maker’s secure app).
Method 2 Secure the Wi-Fi
-
Step 1: Use WPA3
Set security to WPA3-Personal, or WPA2/WPA3 if some devices are older. Never WEP or open.
-
Step 2: Strong password
12+ characters, not your name, address or phone number.
-
Step 3: Turn off WPS
WPS PIN can be brute-forced. Disable it in wireless settings.
-
Step 4: Neutral network name
Don’t include your surname, flat number or router model in the SSID.
Method 3 Reduce exposure
-
Step 1: Disable UPnP if not needed
UPnP lets devices open ports automatically. If you don’t game online or host services, turn it off.
-
Step 2: Review port forwarding
Remove old port forwarding rules you no longer use.
-
Step 3: Use a guest network
Keep visitors and smart gadgets separate from your computers.
-
Step 4: Check connected devices
Review the device list regularly and remove anything unknown.
Troubleshooting
Gaming or video calls broke after disabling UPnP
Re-enable UPnP or create specific port forwarding rules for that console or app.
I can’t find firmware updates
Check the manufacturer’s support page for your exact model and hardware version. Provider routers update automatically.
Frequently asked questions
Can hackers access my router from the internet?
Not easily if remote management is off, firmware is current and the admin password is strong.
Should I hide my SSID?
Hiding the name doesn’t add real security and can cause connection issues. A strong password and WPA3/WPA2 matter more.
Summary
Change the admin password, keep firmware updated, use WPA3/WPA2 with a strong password, turn off WPS, remote management and unneeded UPnP, and put guests and gadgets on a guest network.
