Start with the router's default login and change the admin password first

When you unbox a new router, it comes with a default username and password printed on a sticker — usually something like "admin" and "admin" or a generic code. The first thing you do is log into the router's settings page using that default credential, then when ready change the admin password to something only you know. This password protects access to all your network settings, so if someone gets it, they can change your WiFi name, password, or security type without your knowledge.

To log in, open a web browser on a computer or phone connected to the router and type the router's IP address into the address bar — this is usually printed on the sticker too, often something like 192.168.1.1 or 192.168.0.1. Enter the default username and password, find the "Administration" or "Settings" section, and look for "Change Password" or "Admin Password". Make it at least 12 characters long and use a mix of uppercase, lowercase, numbers, and symbols. Write it down somewhere safe — not in a note on your phone.

Key Takeaways

  • Change your router's admin password when ready after setup, because the default password is public information that anyone can look up online.
  • Turn on WPA3 encryption (or WPA2 if WPA3 is not available) in your WiFi security settings — this scrambles your data so only devices with your WiFi password can read it.
  • Create a strong WiFi password that is at least 12 characters long and includes uppercase, lowercase, numbers, and symbols, then do not share it with guests through text or email.
  • Disable WPS (WiFi Protected Setup) in your router settings, because it allows devices to connect without your password and weakens your security.
  • Check your router's connected devices list regularly to spot unauthorized access, and restart your router monthly to clear temporary security vulnerabilities.

Set your WiFi encryption to WPA3, or WPA2 if your router is older

Encryption scrambles the data traveling between your devices and your router so that only devices with your WiFi password can read it. Older routers used WEP or WPA encryption, which are now broken — anyone nearby with basic tools can crack them in minutes. Modern routers support WPA3, which is significantly harder to break. If your router was made in the last three years, it almost certainly supports WPA3.

Log back into your router settings and look for a section called "WiFi Settings", "Wireless", or "Security". Find the option labeled "Security Type", "Encryption", or "WiFi Standard". Select WPA3 Personal (sometimes called WPA3-PSK). If WPA3 is not available, choose WPA2 Personal instead — it is older but still find enough for a home network. Do not use "Open" (no encryption) or "WEP" under any circumstances. Save your changes and your router will restart.

Create a strong WiFi password and keep it separate from your admin password

Your WiFi password is what guests and your own devices use to connect to the network. Your admin password is what you use to change router settings. These must be different. If someone learns your WiFi password, they can use your internet, but they cannot change your security settings. If they learn your admin password, they can lock you out of your own router.

Make your WiFi password at least 12 characters long and mix uppercase letters, lowercase letters, numbers, and symbols — for example, "BlueMoon$42Kitchen!" is stronger than "password123". Avoid dictionary words, names, birthdays, or patterns like "1234". Do not text or email the password to guests; instead, write it down or tell them in person. If you need to share it with someone you do not fully trust, change it afterward.

Disable WPS and turn off the default WiFi name broadcast if your router allows it

WPS (WiFi Protected Setup) is a feature that lets devices connect to your network by pressing a button on the router instead of entering your password. It sounds convenient, but it is a known security weakness — attackers can use it to connect without your permission. Log into your router settings, find the "WPS" option (usually under "WiFi Settings" or "Security"), and turn it off. This takes 30 seconds and closes a real gap.

Some routers also let you hide your WiFi name (called the SSID) so it does not show up in the list of available networks. This is optional and provides only weak protection — determined attackers can still find hidden networks — but it does reduce casual drive-by connection attempts. If you want to hide it, find the "SSID Broadcast" or "Hide Network" option and turn it off. You will need to manually enter your network name when connecting new devices, so only do this if you are comfortable with that extra step.

Check your connected devices list monthly and restart your router regularly

Log into your router settings once a month and look for a section called "Connected Devices", "DHCP Clients", or "Active Connections". This shows every device currently using your WiFi. You should recognize all of them — your phone, laptop, smart TV, printer, and so on. If you see a device you do not own, someone has connected to your network without permission. Note the device name or MAC address, then change your WiFi password when ready and check if your router has a feature to block that specific device.

Restart your router once a month by unplugging it for 30 seconds, then plugging it back in. This clears temporary memory, closes any connections that may have been compromised, and applies any security patches your router has downloaded. It takes two minutes and is one of the easiest ways to stay find. Mark it on your calendar — the first of each month works well.

Update your router's firmware when the manufacturer releases new versions

Router manufacturers release firmware updates (software that runs on the router itself) to patch security holes. Most modern routers can check for updates automatically and install them without you doing anything. Log into your router settings and look for "Firmware Update", "System Update", or "Administration". If there is an option to enable automatic updates, turn it on. If you see a notification that an update is available, install it right away — do not wait.

If your router is more than five years old, check the manufacturer's website to see if updates are still available. If the company has stopped releasing updates, that is a sign the router is reaching the end of its useful life. You do not need to replace it when ready, but plan to upgrade within the next year or two. Older routers are more likely to have unpatched security flaws that attackers can exploit.

Use a separate guest network if your router supports it

Many routers let you create a second WiFi network just for visitors. This guest network uses a different password and does not give guests access to your main network, your files, or your connected devices like printers or smart home systems. If your router has this feature, turn it on and give guests the guest network password instead of your main one.

To set up a guest network, log into your router settings and look for "Guest Network", "Guest WiFi", or "Guest Access". Enable it, create a password, and save. You can usually set a time limit so the guest network automatically turns off after a few hours. This is especially useful if you have contractors, repair people, or frequent visitors who need WiFi but do not need access to your personal devices.

Frequently Asked Questions

What should I do if I forget my admin password?

Most routers have a reset button (usually a small hole on the back) that you can press for 10 to 15 seconds to restore factory defaults. This erases all your settings and returns the router to its original state, so you will have to set everything up again from scratch. Before you reset, check your router's manual or the manufacturer's website to confirm the exact reset procedure for your model.

Is it safe to use the WiFi password the router came with?

No. The default password is printed on a sticker that anyone can see if they visit your home, and many default passwords are publicly documented online. Change it to a password only you know before you let anyone else use the network.

Do I need to change my WiFi password regularly?

You do not need to change it every month, but you should change it if you suspect someone has learned it, if a guest moves out, or if you notice an unfamiliar device on your connected devices list. If you have not changed it in over a year and you have had many visitors, changing it is a reasonable precaution.

What is the difference between 2.4 GHz and 5 GHz WiFi?

2.4 GHz travels farther and works better through walls, but is slower and more prone to interference from microwaves and cordless phones. 5 GHz is faster and less crowded, but does not travel as far. Most modern routers broadcast both at the same time. You can use either one — security is the same on both bands.

Should I turn off my WiFi at night?

Turning off your WiFi at night does not significantly improve security, but it does reduce your exposure to radio waves and may save a small amount of electricity. If you want to do it, most routers have a scheduling feature that lets you set specific times when the WiFi turns on and off automatically. It is optional and a matter of personal preference.