Key takeaways
- Choose a router that supports WPA3 (or at least WPA2) and automatic firmware updates.
- On day one: change the admin password, turn on the firewall, and turn off remote management, WPS and UPnP.
- Use the FCC broadband label to compare plans on price, speeds and data limits.
What to look for in a router
- WPA3 Personal encryption support; WPA2 Personal is the minimum the FTC recommends.[1]
- Automatic updates. CISA says products should have automatic updates turned on by default, and to ask the provider why if they don't.[2]
- A guest network feature, so visitors can stay off your main network.[1]
- The option to run a separate network for devices like security cameras.[3]
- A built-in firewall you can switch on.[1]
The day-one settings
- Change the router's default admin password to something unique, not your name, address or the router brand.[1]
- Set a separate, strong Wi-Fi password and choose WPA3 or WPA2 encryption.[1]
- Turn off remote management, WPS and UPnP, and turn on the firewall.[1]
- Register the router with the manufacturer or turn on automatic updates; check the maker's site for firmware updates.[1,2]
- Log out of the admin page when you are done.[1]
Cameras, speakers and other smart devices
For home security cameras, the FTC suggests choosing models that encrypt account data, livestreams and stored video. Use a unique, complex password for each account, turn on two-factor authentication and keep the software updated. You can also put cameras on a separate network.[3]
For voice assistants, the FTC recommends long passphrases (15+ characters), multi-factor authentication, auto-deleting recordings and a PIN for voice purchases. It also notes that a more secure router makes every connected device more secure.[4]
Reading the broadband label
Internet providers must show an FCC broadband label, modeled on a nutrition label, wherever a plan is sold, online and in stores. It lists the monthly price, any introductory rate, data allowances and typical speeds, with links to the provider's network-management and privacy policies.[5]
Router lock-down
- WPA3 (or WPA2) encryption on
- Unique admin password, separate Wi-Fi password
- Firewall on; remote management, WPS and UPnP off
- Automatic updates on
- Guest network for visitors; separate network for cameras if you can
Sources
Every figure in this guide comes from the official sources below. We summarize them in our own words; check the source for the full guidance.
- 1How To Secure Your Home Wi-Fi NetworkFederal Trade Commission
- 2Update SoftwareCybersecurity and Infrastructure Security Agency
- 3How To Secure Your Home Security CamerasFederal Trade Commission
- 4How To Secure Your Voice Assistant and Protect Your PrivacyFederal Trade Commission
- 5Broadband Consumer LabelsFederal Communications Commission
This guide is general consumer information, not medical, legal or professional advice. Always follow the manufacturer’s instructions for your product. See our editorial policy and affiliate disclosure.
