Most Routers Are Plug And Play, But You Should Probably Take These Easy Extra Steps

Most people understand that the first thing you should do with a new Wi-Fi router is set up a unique administrative password. At least, you'd think so. According to a Broadband Genie report, the reality is that over 80% of people never change their router admin password, and 47% never adjust factory settings. It seems straightforward: a plug-and-play router arrives and comes online, already secure, but that's wrong. Changing just a few minor settings can shore up security quite a bit and put you far ahead of the average consumer, especially if those survey numbers are accurate.

Every time you get a new router — even if you've been using one for years, this still applies — you can take advantage of some fairly simple settings to protect your network from would-be hackers. Step one: change your default administrative password. You might even change the default admin account, too. Your router admin account and its password are separate from the Wi-Fi password you use to connect your devices to your local network. With the admin login, you unlock access to a private page with advanced router and network settings, many related to security.

If someone nefarious has that information, they could take control of your network and everything connected to it. This is why the U.S. ban on foreign routers is such a big deal, though that's more about integrated backdoor access. The problem with the default account details is that manufacturers tend to use the same or very rudimentary info, like "admin" for the account and "password" for the password, and most people don't change it.

With the admin account and password changed, and confirming you now have access to the system's advanced settings, there are a few other things you should consider adjusting while you're in there. You should change the default SSID, or your local network name, to something impersonal. A Linksys router might use "Linksys5G" or some variation, for instance. Instead, your SSID should use something like "Wi Believe I Can Fi." Or, you could even turn the SSID broadcast off, so others can't discover the network without having the name already. Also, use the highest level of WPA security available, at least WPA2, but most modern routers have WPA3.

Next, turn on automatic updates if it's a setting available in the advanced menu. TP-Link, Netgear, ASUS, eero, Google Nest, and a wide variety of router manufacturers support automatic updates; the system will auto-download, install, and reboot the device when an update is available, as long as it maintains an active internet connection. This is important because system updates often include up-to-date security fixes for potential vulnerabilities alongside other enhancements like small performance changes.

Updating as soon as possible can protect you and your network against these risks. It's really not safe to use a router that no longer gets firmware support, either. You should upgrade if that's the case. You should also make sure you understand the difference between a modem and a router and what they actually do. They are not the same; though there are combo units, they still merge two separate devices into one.

If you really want to dig around in the administrative dashboard, there are a ton of additional tools. Bear in mind, not all of them will be useful, nor will everything apply to your personal network, depending on how you use it. You can use the guest network as intended, so anyone visiting can access your Wi-Fi safely, but you could also treat it as a separate 2.4GHz network for other functions, like segmented smart home tech. If a smart device or something connected to the guest network is compromised, it won't compromise your core network.

Use strong passwords for your accounts, especially for your Wi-Fi account. Moreover, sift through the administrative settings and turn off any extra features you're not using. If you don't use the guest network, turn it off. You should also disable remote management features, Universal Plug-and-Play (UPnP), WPS (Wi-Fi Protected Setup), USB file sharing, and port forwarding rules or DMZ host if you don't use those. Many of these steps are some of the easiest ways to make your router more secure than ever.

It takes a few minutes to log in to the administrative dashboard and adjust most of those settings. Usually, you have to reboot your router for the changes to take effect as well, but that's also a quick and minor interruption. Ultimately, it's a low-lift task for a significant boost in security.