Quick answer: To secure your home Wi-Fi in about 12 minutes, run six 2-minute stations: (1) log in to your router, (2) change the router admin password and turn off remote management, (3) use WPA3 (or WPA2-AES) with a strong Wi-Fi password, (4) check for firmware updates and your router’s age, (5) put guests and smart-home gadgets on a guest network, and (6) review the list of connected devices. If your router no longer gets security updates, replace it, because no setting can fix that.
Your router is the front door to every phone, laptop, TV and camera in your house. Most of us set it up once, years ago, and never looked at it again. That “set it and forget it” habit is exactly what attackers count on. This guide gives you the 6×2 Checkup, a timed routine that anyone can finish in one sitting, no tech degree required. It follows guidance from the National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA), plus a May 2025 FBI warning about outdated routers.
Why does home Wi-Fi security matter?
Everything you do online at home passes through your router. According to the NSA’s home network guidance, your router is the gateway into your home network, and malicious cyber actors can use a poorly secured home network as a foothold. If you work from home, that foothold can lead to your employer’s systems too. A compromised router can also be used for crime you never see: the FBI warned in May 2025 that cybercriminals were hijacking old, unsupported routers and turning them into proxies to hide their own activity.
The good news? Most of the fixes are free, take a couple of minutes each, and don’t require buying anything.
Author’s note: [PLACEHOLDER: add 2–4 sentences from your own run-through, such as how old your router was, what default settings you found, how many unknown devices showed up, and how long it really took. First-hand detail is the strongest trust signal on this page.]
What do you need before you start?
- A phone or computer connected to your home Wi-Fi (or plugged in with an Ethernet cable).
- Your router’s admin login. If you’ve never changed it, it’s often printed on a sticker on the router.
- A pen and paper (or a password manager) to record your new passwords.
- 12 minutes, plus a few extra if you decide to change your Wi-Fi password and need to reconnect devices.
Heads-up before you begin: take a screenshot or jot down your current settings first. If something stops working, you’ll know what to undo. And if your internet provider manages your equipment, some settings may live in their app or may be locked. In that case, use the app or call their support line rather than forcing it.
What is the 6×2 Checkup?
Station |
What you do |
Time |
|---|---|---|
1 |
Find and log in to your router |
2 min |
2 |
Lock the admin doors (password and remote access) |
2 min |
3 |
Fix Wi-Fi encryption and password |
2 min |
4 |
Update firmware and check router age |
2 min |
5 |
Set up the guest and smart-home lane |
2 min |
6 |
Do a device roll call |
2 min |
Station 1 (2 minutes): How do you log in to your router?
If you use a mesh system or an ISP gateway with a phone app, open that app and look for Settings or Advanced. Otherwise, you’ll log in through a web browser.
Device |
How to find your router’s address |
|---|---|
iPhone |
Settings > Wi-Fi > tap the (i) next to your network and look for “Router” |
Windows |
Open Command Prompt, type ipconfig, and look for “Default Gateway” |
Mac |
System Settings > Network > Wi-Fi > Details > TCP/IP and look for “Router” |
Android |
Settings > Network & internet > Wi-Fi > your network’s details; look for “Gateway” or “Router” (labels vary by phone) |
Type that number (commonly something like 192.168.1.1, 192.168.0.1 or 10.0.0.1) into your browser’s address bar and sign in. If you can’t log in, check the sticker on the router. If the login still fails, you may have changed it before, or your provider manages it.
Station 2 (2 minutes): How do you lock the router’s admin settings?
Your router actually has two passwords: the Wi-Fi password your devices use, and the admin password that controls the router’s settings. Attackers love routers still using the factory-set admin login.
- Change the admin username and password (if your router lets you). The NSA recommends changing default usernames and passwords on your router and connected devices. Use a long, unique password and store it in a password manager or somewhere safe offline.
- Turn off remote management (also called remote administration, remote access or “manage from internet”). The NSA advises disabling it so settings can only be changed from inside your network. The FBI’s May 2025 alert noted that some compromised end-of-life routers had remote administration turned on.
- Turn off WPS (Wi-Fi Protected Setup, the push-button or PIN pairing feature) if you don’t use it. It’s commonly recommended to disable because PIN-based setup has known weaknesses.
- Consider turning off UPnP (Universal Plug and Play). The Canadian Centre for Cyber Security recommends disabling it on home routers because it can expose you to several security risks, but it also warns that some devices need it to work, so test your game consoles, cameras and apps afterward.
Station 3 (2 minutes): Which Wi-Fi security setting should you use?
Open the Wireless, Wi-Fi or Security section and look for the encryption type.
Setting |
Verdict |
Notes |
|---|---|---|
WPA3-Personal |
Best |
Use it if all your devices support it |
WPA2/WPA3 mixed (transition) mode |
Great compromise |
NSA suggests this if some older devices can’t use WPA3 |
WPA2-Personal (AES) |
Acceptable |
CISA lists WPA3 Personal or WPA2 with AES as the options to look for |
WPA, WEP, TKIP or “Open” |
Replace now |
Outdated or no protection; change the setting right away |
Wi-Fi password rules: make it long (a few random words plus numbers works great), keep it unrelated to your name, address or network name, and don’t reuse it anywhere else. Skip changing it if it’s already strong and only shared with people you trust, because you’ll have to reconnect every device. If you do change it, plan about 10 to 15 extra minutes for the reconnect.
Also check your network name (SSID). Avoid putting your last name, apartment number or address in it.
Station 4 (2 minutes): Is your router up to date, and is it too old?
Firmware is the router’s built-in software, and it needs security patches like your phone does. The NSA recommends keeping routing devices updated with the latest patches.
- Find Firmware, Software Update or Administration in the settings.
- Turn on automatic updates if available (CISA’s guidance suggests installing automatic updates when possible). Otherwise, install the update now and add a monthly reminder to your calendar.
- Note your router’s model number and age from the sticker.
The Router Age Test
This is a rule of thumb, not an official rating. Always confirm with the manufacturer’s support page.
Router age |
What to do |
|---|---|
Under 3 years |
Probably fine. Keep auto-updates on. |
3 to 6 years |
Search the model number plus “end of life” or “support.” Confirm it still gets updates. |
7+ years |
Start budgeting for a replacement, and check that updates are still being released. |
Manufacturer says “end of life,” or no update in years |
Replace it. Settings can’t fix unpatched flaws. |
The FBI said in May 2025 that routers dated 2010 or earlier likely no longer receive manufacturer updates and could be compromised through known vulnerabilities. Its advice: replace end-of-life routers with newer models when possible and keep updates installed. If you’re shopping, look for a router that clearly states how long it will receive security updates. The FCC’s voluntary U.S. Cyber Trust Mark label for smart devices is still being finalized (the FCC picked a new program administrator in April 2026), so don’t count on seeing it on store shelves yet. Check the manufacturer’s support period yourself.
Station 5 (2 minutes): How do you set up a guest and smart-home lane?
The NSA recommends, at a minimum, separating your primary Wi-Fi, a guest Wi-Fi and an IoT network (IoT stands for “Internet of Things,” like smart TVs, cameras and speakers). CISA similarly advises using guest Wi-Fi for visitors and for smart devices that only need internet access, so they can’t discover other devices on your network or reach your router settings.
- Find Guest Network in your router or app and turn it on.
- Give it a different name and its own strong password.
- If your router offers it, enable “isolate” or “client isolation” so guest devices can’t see each other.
- Move the gadgets using the lane table below.
The Three-Lane Rule: which devices go where?
Lane |
Devices |
Notes |
|---|---|---|
Main lane |
Your phones, laptops, tablets and work devices |
Keep this network to the devices you control and trust |
Guest lane |
Visitors, kids’ friends, short-term devices |
Share this password freely; change it now and then |
Smart-home lane |
Smart TVs, cameras, speakers, plugs, thermostats, robot vacuums, video doorbells |
Put these on the guest network (or a dedicated IoT network, if your router has one) if they only need the internet |
Pro tip: some gadgets need to talk to your phone or each other on the same network, like casting to a TV, printing wirelessly or controlling a smart-home hub. If something stops working after you move it, put it back on the main network and just keep its firmware updated.
Station 6 (2 minutes): How do you do a device roll call?
Find Connected Devices, Client List or DHCP clients, or open your router’s app. Match each entry to something you own. Use this worksheet:
Device name |
What is it? |
Lane |
Last update checked |
|---|---|---|---|
[e.g., “Living Room TV”] |
Smart TV |
Smart-home |
[date] |
Unknown devices are often just a smart bulb with a weird name, so don’t panic. Unplug or disconnect things one at a time to identify them. If you find a device you truly can’t explain, change your Wi-Fi password, and check for unfamiliar settings in your router.
What should you NOT waste time on?
Lots of old advice sounds technical but adds little protection. Don’t burn your 12 minutes on these:
Old tip |
Reality |
|---|---|
Hiding your network name (SSID) |
Easy to bypass and can make devices act up. Strong encryption and a strong password matter far more. |
MAC address filtering |
MAC addresses can be spoofed and the list is a hassle to maintain. Low return for the effort. |
Shrinking your Wi-Fi range or hiding your router |
Won’t stop a determined attacker; focus on updates and settings. |
Relying on antivirus to protect the router |
Antivirus on your laptop doesn’t scan your router. Keep the router’s own firmware current instead. |
How do you know if your router may be compromised?
Warning signs include: you suddenly can’t log in with a password you know is right, settings changed that you didn’t change, devices you don’t recognize, strange redirects or constant pop-ups, or a notice from your internet provider about suspicious activity. None of these proves a hack, but together they’re worth acting on.
- Disconnect the router from the internet.
- Back up the settings you care about, then factory reset it (usually a small reset button held for about 10 seconds; check the manual).
- Update the firmware before reconnecting everything, and set a new admin password.
- If the router is end-of-life, replace it instead of resetting it.
- Change passwords on your important accounts, starting with email and banking, and consider switching to passkeys.
- You can report internet crime to the FBI’s Internet Crime Complaint Center at ic3.gov.
How often should you repeat the checkup?
How often |
What to do |
Time |
|---|---|---|
Monthly |
Check for firmware updates (if auto-update is off) and glance at the device list |
2 min |
Every 6 months |
Re-run all six stations and review guest-network access |
12 min |
Yearly |
Check your router’s support status and age |
5 min |
Anytime |
Run it again after a houseguest-heavy holiday, a move, a new router, or news of a router flaw |
12 min |
Your 12-minute checklist
- ☐ I logged in to my router (or its app)
- ☐ Changed the default admin username and password
- ☐ Remote management is off (and WPS is off; UPnP considered or tested)
- ☐ Wi-Fi uses WPA3 or WPA2-AES (mixed mode if needed), with a strong, unique password
- ☐ Firmware is up to date, auto-updates are on, and my router is still supported
- ☐ Guests and smart gadgets are on the guest or IoT network
- ☐ I know what every connected device is
- ☐ I set a reminder for the next checkup
Frequently asked questions
How do I check if my home Wi-Fi is secure?
Log in to your router and confirm four things: the admin password is not the factory default, remote management is off, Wi-Fi encryption is WPA3 (or WPA2-AES), and the firmware is current. Then review the connected-device list for anything you don’t recognize.
What is the most secure Wi-Fi setting for home?
WPA3-Personal is the strongest option for home networks if all your devices support it. If some older devices can’t connect, use WPA2/WPA3 mixed mode, or WPA2 with AES encryption. Avoid WEP, TKIP and open networks.
How often should I update my router firmware?
Turn on automatic updates if your router offers them. If not, check for updates at least once a month, and any time you hear about a router vulnerability.
Should I replace my router if it’s old?
Yes, if the manufacturer no longer releases security updates. The FBI warned in 2025 that routers dated 2010 or earlier likely no longer get updates and can be compromised. Even newer routers should be replaced once support ends.
Do I really need a guest network?
It’s a smart move. A guest network keeps visitors, and often your smart-home gadgets, off the network where your computers and phones live. Both NSA and CISA guidance recommend separating these devices.
Is it safe to leave remote management on?
For most households, no. Remote management lets someone change your router’s settings from outside your home, and security guidance recommends turning it off unless you have a specific need and know how to secure it.
Does hiding my Wi-Fi name make it safer?
Not really. Hidden networks are easy to discover and can cause connection problems. A strong Wi-Fi password, modern encryption and updated firmware do far more.
Can a hacked router steal my passwords?
A compromised router can redirect or observe some of your traffic and be used for crimes without your knowledge. Websites that use HTTPS encrypt your data in transit, and using unique passwords and passkeys limits the damage if something goes wrong.
