Your broadband router connects phones, computers, televisions, cameras and other smart devices to the internet. You do not need to understand networking to make it safer. These seven checks cover the settings that matter most.
Find the instructions supplied by your broadband provider or router manufacturer. Make one change at a time, and do not factory-reset the router unless the provider tells you to: a reset can remove settings needed for your broadband, telephone or television service.
Two passwords that do different jobs
Most routers have at least two important passwords:
- The Wi-Fi password lets a phone, computer or other device join your home network.
- The router administrator password lets somebody change how the router and network work.
They should not be the same, and neither should be reused for email, banking or another online account.
1. Know which router you have
Find the manufacturer and model number on the router label, in your broadband provider’s app or in your account. Knowing the model allows you to find the correct instructions and check whether it still receives security updates.
If the router was supplied by your broadband provider, start with the provider’s official help pages or contact its support team. Avoid instructions from an unexpected pop-up, telephone caller or message.
2. Protect the router administrator account
Older routers were sometimes supplied with administrator details such as admin and password. Criminals know common defaults.
If your router uses a shared or easily guessed administrator password, replace it with a strong, unique one. Three random words can make a memorable starting point. Store it in a password manager or another secure place because you should not need to enter it frequently.
Newer equipment may already have a unique administrator password printed on its label. It is still important to keep that password private.
3. Use a strong Wi-Fi password
Your Wi-Fi password should be long, difficult to guess and different from the router administrator password. Do not use your surname, address, telephone number, pet’s name or anything easily found on social media.
If you discover that an unknown person has the password, change it. Every legitimate phone, television and other device will then need to join the network again using the new password.
4. Check that Wi-Fi security is WPA2 or WPA3
The router’s wireless security setting should normally say WPA2, WPA3, or a compatible mode that supports both. WPA3 is newer, but some older household devices may still require WPA2.
Do not use an Open network, WEP or the original WPA. These older options do not provide appropriate protection. If your router cannot offer WPA2 or WPA3, ask your provider or manufacturer whether it should be replaced.
5. Make sure the router still receives updates
Updates correct security weaknesses as well as faults. Provider-supplied routers are often updated automatically, but it is worth confirming this with the provider.
For a router you bought yourself, check the manufacturer’s official support page for its latest software and support period. Only install updates using the router’s own controls or the manufacturer’s official instructions.
If the manufacturer no longer supplies security updates, plan to replace the router. New UK product-security rules require manufacturers of relevant new connected products to provide information about their minimum security-update period, but older equipment may not include this information.
6. Turn off access you do not use
Some routers allow their settings to be managed from outside your home. This may be called remote administration, remote management or web access from the internet.
If you do not knowingly use this feature, turn it off. If your broadband provider manages the router remotely as part of its service, check with the provider before changing anything.
Also protect the online account or app supplied by your broadband provider. Use a unique password and turn on two-step verification when it is offered.
7. Use a guest network and review connected devices
Many routers can provide a separate guest Wi-Fi network. It can be useful for visitors and, where appropriate, smart speakers, plugs, cameras and other connected products. This reduces the need to share the password used by your main devices.
Guest networks vary. Some prevent devices from communicating with one another, which can stop casting, printing or smart-home controls from working. Follow your provider’s instructions and test important equipment after making a change.
While checking the router or provider app, review its list of connected devices. Names are not always obvious, so compare the list with your phones, televisions, speakers and other equipment before removing anything. If a device remains unexplained, change the Wi-Fi password and ask the provider for help.
A five-minute version
If you only have a few minutes today:
- Find your router’s make and model.
- Confirm it updates automatically or is still supported.
- Check that Wi-Fi uses WPA2 or WPA3.
- Make sure the administrator and Wi-Fi passwords are not obvious or reused.
- Turn off unnecessary remote administration.
When to ask for help
Contact your broadband provider or a trusted technical helper if:
- you cannot identify the router or find its official instructions;
- it offers only WEP, WPA or an open network;
- it no longer receives security updates;
- you see devices you cannot account for;
- changing a setting interrupts broadband, telephone or television services; or
- you believe somebody has taken control of the router.
Do not give an unexpected caller remote access to your computer or router. Contact the provider using the number on your bill, its official app or its official website.