Securing Your Home Wi-Fi and Router

Lesson 5.9 was about networks you don't control. This final lesson of Unit V is about the one you do: your home Wi-Fi. Your router is the front door between every device in your home and the Internet, and a handful of settings decide how well it is locked. Some of the classic advice still holds, some has been strengthened, and two well-known tips are no longer recommended.

What you'll be able to do

Harden a home router with a current checklist and explain why two classic tips are no longer recommended. By the end of this lesson you will be able to:

• explain what piggybacking is and why an open or weakly protected home network matters;
• work through a current router checklist: passwords, encryption, updates, risky features and a guest network;
• explain why hiding your network name and filtering devices by MAC address are not security controls.

Why Your Router Matters

Dr. Al-Doori identifies the main threat to a home network as unauthorized access, often called piggybacking: someone using your Wi-Fi without permission. That might sound harmless, like a neighbor borrowing a cup of sugar, but the book explains why it is not. An intruder on your network may be able to watch your traffic or attack your devices, and anything they do online, including crimes, can be traced back to your connection.

The router is also a small computer in its own right. Like any computer, it has software (called firmware) that can contain weaknesses, and it needs updates to stay secure.

The 2026 Router Checklist

You change router settings through its administration page or the maker's app. Settings are named differently on each model, so keep the router's instructions or the maker's support page handy. Current guidance from the US Federal Trade Commission (FTC) and the US National Security Agency (NSA) comes down to these steps:

1. Change the default administration password, and username if you can. This is the password for changing the router's settings, not your Wi-Fi password. Default passwords are often widely known. Make it long and unique; your password manager can generate and keep it for you.
2. Use WPA3 Personal, or WPA2 Personal if WPA3 isn't available, with a long Wi-Fi passphrase. WPA2 and WPA3 are names for Wi-Fi encryption, which scrambles traffic between your devices and the router. The FTC describes the older WEP and original WPA as outdated and not secure. WPA3-Personal also makes it harder for someone to guess your Wi-Fi password, according to the Wi-Fi Alliance, the industry body that certifies Wi-Fi products.
3. Keep the firmware updated. Turn on automatic updates if your router offers them; otherwise check the maker's site regularly. The NSA recommends automatic firmware updates.
4. Replace an end-of-life router. If the maker no longer releases updates, or the router only offers WEP or the original WPA, replace it. A router that can't be updated can't be fixed.
5. Turn off WPS, UPnP and remote management. WPS (Wi-Fi Protected Setup) is a push-button or PIN shortcut for joining the network, with known weaknesses. UPnP (Universal Plug and Play) lets devices on your network open doors in the router automatically, which malware can misuse to open doors of its own. Remote management lets the router be administered from anywhere on the Internet; most homes never need it. The FTC advises turning off all three.
6. Use a guest network for visitors, and consider it for smart-home gadgets, so they are kept apart from your laptops and phones.
7. Keep the router's firewall on, as the book advises.
8. Change the default network name, as the FTC suggests, and leave personal details such as your family name or address out of it.
9. Restart the router regularly. The NSA suggests scheduling at least a weekly reboot of your router, phones and computers.

Two Classic Tips No Longer Recommended

Hiding the network name (disabling SSID broadcast). The idea was that if your router stops announcing its name, attackers won't find it. In practice the network still exists and can be discovered by anyone with the right tools. Microsoft's documentation states that hidden networks are not a security feature and recommends against them. Worse, devices that have joined a hidden network keep calling out its name to find it, which can reveal the name wherever those devices go. Hiding the name does not appear in FTC or NSA home-network guidance.

MAC address filtering. A MAC address is an identifier for a device's network connection. The idea was to let in only an approved list. But modern phones and laptops use private addresses that change from network to network: Apple's documentation explains that its devices use a different random address for each network. That makes allow-lists unreliable and awkward to maintain, and MAC filtering is not part of FTC or NSA guidance either. A strong WPA2 or WPA3 passphrase does the real work.

Neither tip does much harm on its own, but both can give a false sense of security. Spend the effort on the checklist instead. The book's other suggestion, switching the router off when you are away for a long time, does no harm, but it is not a priority compared with updates and strong settings.

Try It: Your Router Checklist

Only inspect, test or change devices, accounts and systems you own or are explicitly authorized to work with. For this activity, that means a router you own or manage, or one whose owner has given you permission. Open the router's app or administration page and check each item privately, noting only whether it is done. Do not write your router credentials anywhere, do not take screenshots of the settings, and do not paste anything from the router into notes, chats or this course.

• Admin password changed from the default (kept only in your password manager)
• Wi-Fi encryption set to WPA3 Personal or WPA2 Personal, with a long passphrase
• Firmware up to date, with automatic updates on if available
• Router still supported by its maker
• WPS off
• UPnP off
• Remote management off
• Guest network set up for visitors (and smart gadgets if you have them)
• Firewall on
• Default network name changed, with no personal details
• A reminder set to restart the router regularly

If you can't find a setting, note "couldn't find" privately and look up your model on the maker's support site. Your action plan, the only thing you would ever report, might read: "Router medium risk; turn off WPS; check whether replacement is needed."

Real-World Example

Imagine the Haddad family's router, supplied by their internet provider eight years ago. It still uses the original WPA, WPS is switched on, and the admin password is the one printed in the manual. A neighbor's teenager joins the network using the WPS shortcut and starts streaming and downloading on their connection. The family only notices when their internet slows to a crawl, and they cannot be sure what else was done using their connection.

When they check, the router has had no firmware updates for years and cannot offer WPA2 or WPA3. Following the checklist, they replace it, set WPA3 with a long passphrase, change the admin password, turn off WPS, UPnP and remote management, and put visitors on a guest network.

From the Book to 2026

What the book teaches. Chapter 20 identifies piggybacking as the main home-network threat and gives six habits: set a strong router password, turn on wireless encryption such as WPA, enable the router's firewall, disable SSID broadcast, filter MAC addresses, and turn the router off when away for long periods.

Why it made sense. Changing default passwords, encrypting Wi-Fi and using the firewall were, and remain, essential. When the book's advice was first written, hiding the name and filtering devices looked like sensible extra barriers.

What has changed. Security guidance has evolved since the original text. The FTC now recommends WPA3 Personal or WPA2 Personal and describes WEP and the original WPA as not secure. Firmware updates, replacing end-of-life routers, and turning off WPS, UPnP and remote management have become core advice, along with a guest network. Microsoft states that hidden networks are not a security feature, and modern devices' private, changing MAC addresses make filtering unreliable; neither appears in FTC or NSA guidance.

What to do now. Current guidance now recommends the checklist in this lesson: strong admin and Wi-Fi passwords, WPA3 or WPA2, automatic firmware updates, replacing unsupported routers, WPS, UPnP and remote management off, a guest network, the firewall on, and regular restarts.

Watch: 8 Steps to Securing Your Router

In this video Leo Notenboom of Ask Leo! walks through router security step by step. He uses an older router as his example, so the screens will look different from yours, but the concepts apply to almost any home router.

As you watch, notice:

• his distinction between the router's administration password and your Wi-Fi password, and why the admin password comes first;
• why he says WPS "does not live up to its name", and why he turns off UPnP and remote management;
• the "two steps not to take" at the end: MAC address filtering and hiding the network name, and why they give a false sense of security.

He describes firmware updates as a manual step; many newer routers can now update automatically, so check your router's settings for that option. The video reinforces what you just read — the lesson is complete without it.

What Would You Do?

Your parents' router came from their internet provider many years ago. Its settings offer only WEP or WPA, and the maker's website lists no updates for it since long ago. Your parents say: "It still works, and we hid the network name, so nobody can find it." What would you advise?

Knowledge Check

Key Takeaways

• Piggybacking means strangers using your network, and anything they do can be traced to your connection.
• Change the router's default admin password, use WPA3 or WPA2 with a long passphrase, and keep firmware updated.
• Turn off WPS, UPnP and remote management; use a guest network; replace routers that no longer get updates.
• Hiding the network name and MAC filtering are not security controls; a strong passphrase does the real work.
• Never write down, share or screenshot your router credentials.

Further Study

Optional and external; the lesson is complete without it.

• Wi-Fi Security Compared: WPA2 vs. WPA3 (Eye on Tech) — a short history of Wi-Fi encryption from WEP to WPA3, ending on the same advice as this lesson: never WEP or WPA, and WPA2 only where WPA3 isn't supported. It is aimed at IT professionals, so expect some jargon.

Sources

• US Federal Trade Commission — How To Secure Your Home Wi-Fi Network
• US National Security Agency — Best Practices for Securing Your Home Network (2023)
• BleepingComputer — NSA shares guidance on how to secure your home network (2023, summary)
• Wi-Fi Alliance — Wi-Fi CERTIFIED WPA3 Technology Overview
• Microsoft — Non-broadcast Wireless Networks with Microsoft Windows
• Apple — Privacy features when connecting to wireless networks (Apple Platform Security)
• Dr. Tahseen Al-Doori — Cyber Security Essentials, Chapters 18 and 20