10 steps to secure your home Wi-Fi

A secure home Wi-Fi network starts with a strong, unique password with WPA2 or WPA3 encryption. Then change the router's admin password, keep its firmware updated, turn off features you do not use, like WPS, and check who is connected now and then. The ten steps below take about half an hour in total.

Why a secure home Wi-Fi matters

Your Wi-Fi is the front door to every device in your home: phones, laptops, the TV, cameras and smart plugs. Someone on your network can use your connection, slow it down and, in the worst case, reach devices or shared folders you assumed were private. Most of the protection comes from a few settings that are easy to change.

You will need your router's admin page or app for most steps. The address and default login are often on a sticker on the router. Menus differ by brand, so search for the setting name if you cannot find it.

The 10 steps

1. Change the router's admin password. This login controls every setting. If it is still the default from the sticker, anyone on your network who looks it up could change your settings. Pick a long, unique password.

1. Set a strong Wi-Fi password. Use a long passphrase of several random words, rather than a short word with a number on the end. Length matters more than odd symbols. Avoid names, addresses and phone numbers.

1. Use WPA3 or WPA2 (AES). In the wireless security setting, choose WPA3 if all your devices support it, or a WPA2/WPA3 mixed mode. If you must use WPA2, pick AES rather than TKIP. Never use WEP or an open network.

1. Turn off WPS. WPS lets devices join by pressing a button or typing a PIN. The PIN method has known weaknesses, and most people never use the feature.

1. Update the router's firmware. Firmware is the router's own software. Updates fix security holes. Turn on automatic updates if your router offers them, or check for an update every few months.

1. Turn off remote management. Some routers let you change settings from outside your home over the internet. Unless you need it, switch it off so the admin page is only reachable from inside.

1. Review UPnP and port forwarding. UPnP lets devices open ports on your router by themselves. It is convenient for games and some apps, but it also means devices can expose themselves without asking. Check which ports are open and close anything you do not recognise. Our guide on what an open port is explains the risks.

1. Set up a guest network. Give visitors and smart gadgets their own network, separate from your laptops and phones. If a cheap gadget has a security flaw, it is kept away from your main devices.

1. Check who is connected. Look at the device list and make sure you can explain every entry. Our guide on how to see who is connected to your Wi-Fi shows how.

1. Store the password safely and share it carefully. Keep it in a password manager or an encrypted vault, not in a plain note. When guests need it, share the guest network by QR code instead of reading out your main password. See where to keep Wi-Fi passwords safely and how to share Wi-Fi with a QR code.

Does hiding the network name help?

Hiding your network name, sometimes called hiding the SSID, does very little for security. The network still sends signals that a scanner can see, and your own devices have to call out for it, which can reveal the name anyway. It also makes joining harder for you. A strong password and modern encryption protect you far better.

Is changing the network name worth it?

It does not add much protection, but it can help a little. Default names often reveal the router brand or model, which tells an attacker which default weaknesses to try. Choose a neutral name that does not include your surname, flat number or address.

How often should you check?

A secure home Wi-Fi is not a one-off job. A quick review every few months is a good habit: look for firmware updates, scan the device list and make sure the guest network is still separate. Change the Wi-Fi password if you think it has been shared too widely, or when someone moves out.

How CellRadar helps

CellRadar has a Network Health Report that gives a score out of 100 with performance and security findings, so you can see what to fix first. Its Device Scanner shows the devices on your Wi-Fi, Network Guard alerts you when a new one joins, and the port check tool shows whether a port is open. The password vault keeps your Wi-Fi passwords in encrypted storage on your phone.

Frequently asked questions

Is WPA2 still safe for home Wi-Fi?

WPA2 with AES and a strong password is still a reasonable choice for most homes. WPA3 is stronger, so use it if all your devices support it.

Should I turn off my Wi-Fi at night for security?

It is not necessary if your network is set up well. A strong password, modern encryption and updated firmware protect you around the clock.

Does a VPN secure my home Wi-Fi?

A VPN protects the traffic of the device it runs on, but it does not secure the router or stop others joining your Wi-Fi. You still need the steps above.

How do I know if someone hacked my router?

Warning signs include settings you did not change, an admin password that no longer works or unfamiliar devices. If you suspect it, reset the router to factory settings and set it up again with new passwords.