How do I secure my home Wi-Fi and network?
Wi-Fi security starts with the router: change its default admin password, use WPA3 or WPA2 encryption with a long passphrase, and turn on automatic firmware updates. Give every smart device its own strong password and keep it updated. Put cameras, plugs and TVs on a guest network, so one hacked gadget can't reach your laptop or phone.
▶ Try it
Why it matters
Default passwords, old firmware and cheap smart devices are the easiest ways into a home. Putting IoT devices on a guest network limits what a compromised camera can reach.
In 7 minutes you'll be able to
- Change the router's admin password and turn on automatic updates.
- Give every smart device its own strong password and keep it updated.
- Put smart gadgets and visitors on a guest network.
What you'll practise
Lock the router
This is your router's settings page. Set every switch to the safe position, then check.
- Admin password changed from the default
- Wi-Fi encryption: WPA3 (or WPA2)
- Automatic firmware updates
- Remote admin from the internet
- WPS PIN pairing
- Guest network for visitors and smart devices
Secure the house
Which network should each device join?
- Your NovaCorp work laptop → Main network
- Smart plug from an unknown brand → Guest network
- Baby monitor camera → Guest network
- A visitor's phone → Guest network
- Smart TV → Guest network
- Your phone with your banking app → Main network
- Home storage drive with family photos → Main network
Smart device check
Three choices you'll meet at home. What would Ada do?
Setting up a new smart doorbell, the app lets you keep the password "admin". Do you?
- No, set a long, unique password (Answer)
- Yes, nobody knows my doorbell exists
Your router is nine years old and its maker no longer releases updates. What now?
- Replace it with a model that still gets updates (Answer)
- Keep it, it still works fine
- Just restart it once a month
Two cheap security cameras look the same. Which do you buy?
- The one whose maker says how long it will get security updates (Answer)
- The cheaper one, they're identical
Remember
Every connected device is a computer that needs updates and a real password.
Key facts
- In 2016 the Mirai botnet took over cameras, routers and other connected devices by trying their default usernames and passwords, then used them for huge traffic floods. · Source: CISA, Alert TA16-288A: Heightened DDoS Threat Posed by Mirai and Other Botnets (2016)
- Since 29 April 2024, UK law bans universal default passwords on consumer smart devices and requires makers to say how long they will provide security updates. · Source: UK DSIT, Product Security and Telecommunications Infrastructure (PSTI) regime (2024)
- WPA3, the newest Wi-Fi security standard, was introduced in 2018 and protects passwords better against guessing attacks than WPA2. · Source: Wi-Fi Alliance, WPA3 announcement (2018)
- Rebooting an infected device can clear some IoT malware, but the device can be reinfected quickly unless its default password is changed first.
Updated:
Questions people ask
What is a guest network and should I use it for smart devices?
A guest network is a second Wi-Fi network on your router that is kept apart from your main one. Putting smart devices and visitors on it means a hacked gadget can't reach your computers and files.
WPA2 or WPA3: which should I use?
Use WPA3 if your router and devices support it, because it resists password guessing better. WPA2 with a long passphrase is still fine. Avoid WEP or an open network.
How do I change my router's admin password?
Open the router's settings page, usually by typing the address on the label into your browser, and log in with the details on the label. Find the admin or system settings and set a long, unique password.
Can smart home devices be hacked?
Yes. Many have weak default passwords or stop getting updates. Use a unique password, install updates, and keep them on a guest network to limit any damage.
Related terms