Your home router connects phones, laptops, televisions, cameras and smart devices to the internet. A few sensible settings can reduce avoidable risk without turning your home network into a technical project. This Fapeza checklist explains how to secure home Wi-Fi in the UK.
Router menus differ between internet providers and models. If a setting has a different name, check the manufacturer’s current help page rather than guessing.
Start with the router account
Change the router’s administrator password if it still uses a default or easily guessed value. This password controls settings such as Wi-Fi names, encryption and connected devices, so it should be different from your Wi-Fi password and other online accounts.
Use a long, unique passphrase that you can store safely. The National Cyber Security Centre recommends protecting important accounts with strong, separate passwords and two-step verification where available. Its online security guidance is a useful companion to this checklist.
Use modern Wi-Fi encryption
Open the wireless settings and choose WPA3 if every important device supports it. WPA2 with a strong password is a sensible fallback for older equipment. Avoid open networks and outdated encryption options. If the router uses a combined setting such as WPA2/WPA3 mixed mode, follow the provider’s guidance and update older devices where possible.
Change the Wi-Fi network name if it reveals your address, surname, router model or provider account details. A neutral name makes it harder for a passer-by to connect a network to your household.
Install updates and disable unnecessary features
- Check whether the router firmware is current and enable automatic updates if the option exists.
- Turn off remote administration unless you genuinely need it and understand the risk.
- Disable WPS if you do not use it, especially if the router exposes a PIN-based connection method.
- Remove old port-forwarding rules that were created for a game, camera or server you no longer use.
- Replace a router that no longer receives security updates, subject to your provider’s support terms.
Updates are not only about new features. They can fix vulnerabilities in the router software, so treating the network box as a set-and-forget appliance is risky.
Create a guest network for visitors and smart devices
A guest network gives visitors internet access without sharing the main household password. It can also be useful for lower-trust smart devices, although the exact isolation depends on the router. Use a separate password and review the list of connected devices from time to time.
For cameras, speakers, plugs and other connected products, the NCSC’s smart-device guidance recommends practical steps such as changing default credentials, applying updates and considering what data the device can access.
Check the devices connected to your network
Open the router’s connected-device list and give each familiar device a useful label. Look for old phones, unknown names or products you no longer own. If you cannot identify an item, change the Wi-Fi password and reconnect your own devices one by one. The list may show technical names or MAC addresses, so do not assume every unfamiliar label is automatically an attack.
Wi-Fi safety when working from home
Use the latest updates on your laptop and phone, protect your email account with a separate password and turn on two-step verification. If you need to work on public Wi-Fi, avoid sensitive tasks unless you understand the network and use an approved secure connection. A home network is only one part of your overall digital security; combine it with the steps in Fapeza’s secure digital identity guide and digital-life organisation guide.
Home Wi-Fi security FAQ
How often should I change my Wi-Fi password?
Change it when you suspect someone unwanted has access, when a housemate or visitor should no longer use it, or when your provider advises it. A long unique password is more useful than changing a weak password on a fixed schedule.
Is WPA2 still safe?
WPA2 is older than WPA3 but remains widely used. Use the strongest option supported by your router and devices, keep firmware updated and use a strong passphrase. Avoid obsolete open or weak encryption modes.
Should smart devices use a guest network?
It can reduce exposure when the router properly isolates the network, but the feature is not identical on every model. Check the router manual and keep the devices updated.
If you suspect unwanted access
Do not assume an unknown device in the router list proves that someone has broken into your network. It may be a television, printer or phone with a technical name. First, compare the list with devices in your home. If the concern remains, change the Wi-Fi password and router administrator password, update the router and reconnect trusted devices. Contact your broadband provider or the manufacturer if you cannot regain control.
If an online account may also be exposed, change its password from a trusted device and enable two-step verification. Do not share one-time security codes with anyone who calls unexpectedly. Keep a short record of the date, settings changed and devices reconnected.
Make security maintenance easy
Put a recurring reminder in your calendar for router updates, connected-device review and password recovery checks. When someone moves out or a long-term visitor no longer needs access, change the relevant password instead of relying on memory. Keep the router in a ventilated place and make sure you know how to contact the provider if the connection fails.
Security works best as a set of small habits: current software, unique passwords, careful permissions and a quick response when something looks unfamiliar. It does not require constant monitoring of every technical detail.