This post has been updated. It was originally published on December 6, 2018.
Your router’s features make easier to use, but these same properties often make it less secure. In recent years, vulnerabilities in the common Universal Plug and Play (UPNP) protocol, which facilitates communication between devices on a network, was used to hack thousands of routers. There’s a good chance your device remains vulnerable to this and many other security holes.
The problem gets worse if you rely on an older model, which may not have patches for recently discovered vulnerabilities. If you haven’t upgraded your router since the early 2000s, you probably should think about buying a new one soon. In the meantime, these tips on how to change your router settings will help protect your home network from intruders.
Update your firmware and reset to factory settings
Your computer updates itself automatically, but many routers don’t. Instead, they require you to go through an arduous process to install new firmware. Annoying as it may be, this practice is crucial for good security. So before doing anything else, we recommend you reset your router to factory settings (in case it’s been compromised already) and install the latest firmware.
The process will vary a bit for each router, but here’s the basic gist. Type your router’s IP address into your browser’s address bar (usually something like 192.168.0.1, 192.168.1.1, or 10.0.0.1) and press Enter. If you’re having trouble, check your router’s manual or try one of the IP addresses from this TechSpot list. Enter your username and password to access the router’s web interface—if you don’t know what your login information is, look for it on the side of your router or in your manual. If you still can’t find it, the database at RouterPasswords.com may be able to help.
Once you reach the main interface, poke around the menus until you find the administrative settings. There, you’ll want to do the following things.
- Update the firmware. You may be able to do this with the click of a button, or you may have to go to your router’s support page, download the latest firmware, and manually upload it to your router. While you’re doing this, make note of the date that the firmware came out—if the manufacturer released it a few years ago, that company probably does not support your router anymore, and you may want to upgrade it soon.
- Reset to factory settings. If your router offers to back up your settings, do that now—just in case. Then find the option to restore your router to factory defaults, and click on it. This will erase your settings, but also ensure any previous hacks will no longer compromise your system. If you run into issues setting the router back up from scratch later on, you can always restore from the backup to see what settings you might have forgotten to re-enable.
- Change your password. After restoring your router to factory settings, it’ll go back to using the default password. This is bad, since these codes are easy for anyone to find online. So look for the option to change the router login password. This is not the Wi-Fi code, which we’ll get to in a moment, but the password you use to log into this web interface. This option should be in the same administrative settings as the firmware update you just ran. Create a memorable username and a strong password, and write it down somewhere so you don’t forget—preferably in a secure password manager like LastPass.
If you see an option for automatic updates, enable it. This probably won’t be vital though—many routers don’t have this feature, and the ones that do often have turned it on already.
Set up a strong password
Once you’ve updated your router’s firmware, it’s time to set up your Wi-Fi.
From the router’s web interface, find the Wireless section of its settings, and give your network a name, ideally something unique to you and your household—not just “linksys.” Make sure the password type is set to WPA2 or WPA3, not WEP, which is insecure and incredibly easy to crack. Then enter a strong password and apply your settings.
[Related: How to keep people from stealing your Wi-Fi]
While you’re in this section, you may be tempted to “hide” your network’s name, or Service Set Identifier (SSID), in an effort to keep it secret from nearby villains. But you shouldn’t do this. Not only are SSIDs kind of a hassle to deal with (some devices don’t properly support hidden networks), but in some cases, your laptop or phone can actually leak that “hidden” name when you’re out and about, making your network less secure. Finding a hidden network is trivial for even the m