Start with the default login, then change it when ready

When you first plug in a Netgear router, it comes with a default username and password printed on the back or in the manual — usually "admin" and "password" or a variation. Your router's web interface (the settings page you log into) is accessible at 192.168.1.1 or 192.168.0.1 in any browser on your home network. The first thing you do is log in with those defaults, then change both the username and password to something only you know.

This matters because anyone on your network — a guest, a visitor, someone who has been in your home — can physically access your router and log in with the factory defaults if you don't change them. Once logged in, they can see your Wi-Fi password, change your DNS settings to redirect you to fake websites, or disable security features entirely. Changing the login credentials takes two minutes and closes that door.

Go to the Advanced tab in the router settings, find Administration or System Settings, and look for the option to change the router password. Create a password that is at least 12 characters long, uses uppercase and lowercase letters, numbers, and symbols. Write it down somewhere safe — not in a note on your phone or computer, but in a physical location like a locked drawer or a password manager you trust.

Key Takeaways

  • Change the default admin password on your router before you do anything else, because the factory defaults are public knowledge and anyone in your home can use them.
  • Turn on WPA3 encryption (or WPA2 if WPA3 is not available) in the wireless settings, and use a Wi-Fi password that is at least 12 characters long with mixed character types.
  • Disable WPS (Wi-Fi Protected Setup) in the wireless settings, because it creates a backdoor that lets people join your network even if they do not know your password.
  • Update the router firmware through the Administration or System Settings menu as soon as you set it up, then check for updates every month or two.
  • Turn off remote management and UPnP unless you have a specific reason to use them, because both let outside devices or software reach into your router without your knowledge.

Set up WPA3 encryption for your Wi-Fi network

The wireless settings menu is where you choose how your Wi-Fi is encrypted. Netgear routers typically offer WPA3, WPA2, or older options like WEP or WPA. Use WPA3 if your router supports it — most newer Netgear models do. If your router is older and does not have WPA3, use WPA2. Do not use WEP or WPA alone, because both are broken and can be cracked in minutes.

In the wireless settings, find the Security Options or Wireless Security section. Select WPA3-Personal (or WPA2-Personal if that is all you have). Then create a Wi-Fi password — this is different from your router admin password. Make it at least 12 characters long, with uppercase letters, lowercase letters, numbers, and symbols. This is the password people will enter when they connect to your network.

Write down this Wi-Fi password and keep it in the same safe place as your admin password. You will need to give it to guests, but you do not need to change it often. The encryption itself — WPA3 or WPA2 — is what keeps the traffic between your devices and the router private, even if someone knows the password.

Disable WPS and other default-on features that weaken security

WPS (Wi-Fi Protected Setup) is a feature that lets people join your network by pressing a button on the router or entering an 8-digit PIN, without knowing your Wi-Fi password. It sounds convenient but it is a security hole: the PIN can be guessed or brute-forced, and it bypasses your strong password entirely. Turn it off.

Go to the wireless settings and look for Wi-Fi Protected Setup, WPS, or a similar label. Disable it. While you are in the wireless settings, also look for and disable any "guest network" features you do not plan to use — they create an extra network that you have to manage and monitor.

In the Advanced tab, find the UPnP setting (Universal Plug and Play). UPnP lets applications on your network automatically open ports in the router without asking you. This is convenient for gaming or video calls, but it also means malware on one of your devices can open ports and expose services to the internet without your knowledge. Unless you have a specific process that needs UPnP, turn it off. You can always turn it back on later if something stops working.

Update the firmware and set up automatic updates

Firmware is the software that runs the router itself. Netgear releases updates to patch security holes, fix bugs, and add features. A router with old firmware is vulnerable to attacks that newer routers are protected against. Check for updates as soon as you set up the router, then check again every month or two.

Go to Administration or System Settings and look for Firmware Update or Software Update. Click the option to check for updates. If an update is available, read and install it. The router will restart during the update — this takes a few minutes and your internet will go down briefly, so do this when you are not in the middle of something important.

Some Netgear routers have an option to enable automatic updates. If yours does, turn this on. Automatic updates mean you do not have to remember to check manually, and you get security patches as soon as they are released. If automatic updates are not available on your model, set a calendar reminder to check every 30 days.

Turn off remote management unless you specifically need it

Remote management lets you log into your router from outside your home network — from your phone on a coffee shop Wi-Fi, for example. This sounds useful, but it also means the router's login page is reachable from the internet. If someone guesses or cracks your admin password, they can change your settings from anywhere in the world. Leave this off unless you have a specific reason to use it.

Go to Administration or Advanced Settings and look for Remote Management, Remote Access, or a similar label. Make sure it is disabled. If you ever need to access your router from outside your home, you can turn this on temporarily, make your change, and turn it back off. That is safer than leaving it on all the time.

Check your connected devices and remove ones you do not recognize

The router keeps a list of every device that has ever connected to your network. Go to the Connected Devices, Device List, or Attached Devices section — the exact name varies by model. You should see your phone, laptop, smart TV, and any other devices you own. If you see a device you do not recognize, it means someone else has connected to your network at some point.

If you find an unknown device, you have two options: block it permanently, or change your Wi-Fi password so it cannot reconnect. Blocking is faster if you are sure you do not want that device on your network ever again. Changing the password is safer if you are not sure what the device is — the new password will kick it off, and you can investigate before deciding what to do.

Check this list every few months, especially if you have had guests or service people in your home. A device that connected once and is no longer active is usually not a threat, but one that is actively connected and you do not recognize is worth investigating.

Set a strong password for your Wi-Fi network, not the router admin account

You now have two passwords: the router admin password (which you use to log into the settings page) and the Wi-Fi password (which guests use to connect). They are not the same, and they should not be. The Wi-Fi password is the one people will ask for, write down, and share. The admin password is the one that controls the router itself.

Make the Wi-Fi password long and complex — 12 to 16 characters with mixed types — so it is hard to guess. Make the admin password equally strong, because anyone who knows it can change everything. Do not use the same password for both, and do not use a password you have used anywhere else online.

Frequently Asked Questions

What is the difference between the router password and the Wi-Fi password?

The router password (admin password) is what you use to log into the settings page at 192.168.1.1. The Wi-Fi password is what people enter to connect to your network. They are separate. If someone knows the Wi-Fi password, they can use your internet but not change your router settings. If someone knows the admin password, they can change everything.

Do I need to change my Wi-Fi password regularly?

No. A strong Wi-Fi password does not get weaker over time. Change it only if you think someone has learned it, if you want to kick a device off your network, or if you are removing a guest who should no longer have access. Changing it frequently creates more work and more chances to write it down somewhere unsafe.

What should I do if I forget my admin password?

You can reset the router to factory defaults by holding down the reset button on the back for 10 to 15 seconds. This erases all your settings and returns the router to the state it came in. You will have to set everything up again from scratch, including the Wi-Fi password and encryption type.

Is it safe to leave the guest network on?

A guest network is safe if you monitor it and use a strong password. It creates a separate Wi-Fi network that does not give guests access to your main network or devices. If you do not plan to use it, turn it off — one less thing to manage. If you do use it, give guests a password and change it when they leave.

Why does my router keep asking me to update the firmware?

The router is reminding you that a security update is available. Install it. Firmware updates patch holes that attackers can use to break into your router. Delaying updates leaves you vulnerable. Set a reminder to check for updates monthly so you catch them before the router starts nagging you.