📡 Wireless Router
| Last review date |
|---|
| 2026-02-24 |
Securing a wireless router is hard.
- General home users have little knowledge about how its works and the meaning of the different settings of it.
- Lots of users are using it with outdated firmware which have serious security vulnerabilities.
Router security checklist
-
Change the default administration portal password of the router that come out of the box.
-
Change the Wi-Fi network default password, it should be a strong password.
-
Change the default SSID (Wi-Fi network name), the name of it can't be used to identify yourself.
-
Wi-Fi encryption should be WPA3 (preferred) or WPA2 with AES as a fallback for older devices.
-
Setup a password protected guest Wi-Fi network. Use it for guests and IoT devices too.
-
Disable remote access to the administration portal, you don't need it when you are not at home.
-
Disable port forwarding completely if you don't know what it is and have no use what it.
-
Ensure IPv6 firewall is enabled. Most modern routers support IPv6 — don't disable it, but make sure your router's firewall covers IPv6 traffic (not just IPv4). Some consumer routers ship with IPv6 firewall off by default.
-
Check for new firmware periodically. Time for a new router if there is no firmware update for more than a year. There is a high chance that the router is discontinued by the manufacturer.
-
Review device connection log regularly, to spot for any unknown or suspicious device(s) connected to your network.
Reference
| Link | By | Description |
|---|---|---|
| Router Security | Michael Horowitz | "This site focuses on the security of routers. Period. If you are interested in faster WiFi, look elsewhere." |