Your router is probably still using the factory password
Most people plug in their ISP router and never touch the settings again. That's like leaving your front door unlocked because the builder gave you a key.
Good news: you can fix the biggest security holes in about 15 minutes. No special equipment needed.
Step 1: Change the admin password (5 minutes)
The sticker on your router shows the default login — usually "admin" and "password" or similar. Attackers know these defaults.
How to do it:
- Open a browser and go to
192.168.1.1or192.168.0.1(check your router's sticker) - Log in with the default credentials
- Find "Administration" or "System Settings"
- Change the admin password to something unique (use a password manager)
- Save and log back in to confirm it worked
Some routers force you to change this on first login. Most don't.
Step 2: Update the firmware (3 minutes)
Router manufacturers patch security holes regularly. Your router won't update itself unless you tell it to.
How to do it:
- Still in your router settings, find "Firmware Update" or "Software Update"
- Click "Check for Updates"
- If one exists, click "Install" and wait 3-5 minutes
- Don't unplug the router during this process
Set a phone reminder to check again in 3 months.
Step 3: Change your Wi-Fi password (2 minutes)
That random string on the router sticker is better than "password123" but still printed on a sticker anyone can see.
How to do it:
- Find "Wireless Settings" or "Wi-Fi"
- Look for "WPA2" or "WPA3" security (not WEP — that's broken)
- Change the password to something strong but memorable for guests
- Reconnect all your devices with the new password
Bonus: change the network name (SSID) to something that doesn't broadcast your router model.
Step 4: Turn off WPS (1 minute)
WPS (Wi-Fi Protected Setup) lets you connect devices by pushing a button. It also has a well-known security flaw that makes your network easier to crack.
How to do it:
- Find "WPS Settings" in wireless options
- Disable it
- Save
You'll manually enter Wi-Fi passwords from now on. That's fine.
Step 5: Check who's connected (2 minutes)
See if any mystery devices are using your network right now.
How to do it:
- Find "Connected Devices" or "Device List"
- Look for names or MAC addresses you don't recognize
- If you find something suspicious, change your Wi-Fi password immediately (Step 3)
Most routers let you block specific devices if needed.
Step 6: Turn off remote management (2 minutes)
Some routers let you manage settings from outside your home network. Unless you specifically need this, it's an unnecessary risk.
How to do it:
- Find "Remote Management" or "Remote Access"
- Disable it
- Save
You can still access settings when connected to your Wi-Fi.
What about guest networks?
If your router supports it (most do), create a separate guest network. Give this password to visitors instead of your main network.
Why this matters: guests can't see your devices or access shared folders. Their potentially sketchy phone app can't snoop on your smart home.
When to consider upgrading
Your ISP router is fine for basic use. Consider your own router if:
- You have more than 15 connected devices
- Your current router is over 5 years old
- You want features like VLANs or advanced parental controls
- You're running a home lab or self-hosted services
But most people don't need to spend $200 on a router. Securing what you have is 80% of the battle.
The reality check
These six steps won't make you anonymous or block nation-state hackers. They will stop:
- Neighbors stealing your Wi-Fi
- Drive-by attacks on default credentials
- Malware spreading through known router vulnerabilities
- Casual snooping on your network traffic
That covers 95% of what home users actually face.
Do this today
Set a 15-minute timer. Work through these steps. You'll forget about it until the next firmware update reminder — which is exactly the point.
Your router is the front door to everything in your home that connects to the internet. Lock it.