Skip to main content

📡 Wireless Router

Last review date
2026-02-24

Securing a wireless router is hard.​

  • General home users have little knowledge about how its works and the meaning of the different settings of it.
  • Lots of users are using it with outdated firmware which have serious security vulnerabilities.

Router security checklist​

  • Change the default administration portal password of the router that come out of the box.

  • Change the Wi-Fi network default password, it should be a strong password.

  • Change the default SSID (Wi-Fi network name), the name of it can't be used to identify yourself.

  • Wi-Fi encryption should be WPA3 (preferred) or WPA2 with AES as a fallback for older devices.

  • Turn off WPS, turn off UPnP

  • Setup a password protected guest Wi-Fi network. Use it for guests and IoT devices too.

  • Disable remote access to the administration portal, you don't need it when you are not at home.

  • Disable port forwarding completely if you don't know what it is and have no use what it.

  • Ensure IPv6 firewall is enabled. Most modern routers support IPv6 — don't disable it, but make sure your router's firewall covers IPv6 traffic (not just IPv4). Some consumer routers ship with IPv6 firewall off by default.

  • Check for new firmware periodically. Time for a new router if there is no firmware update for more than a year. There is a high chance that the router is discontinued by the manufacturer.

  • Review device connection log regularly, to spot for any unknown or suspicious device(s) connected to your network.

Reference​

LinkByDescription
Router SecurityMichael Horowitz"This site focuses on the security of routers. Period. If you are interested in faster WiFi, look elsewhere."