How to secure your home Wi-Fi

Start with the settings that control who can connect and who can change your network.

The answer in 2 lines. Protect both access to your Wi-Fi and access to the router's settings. Use supported modern encryption, separate unique passwords, current router software and carefully configured guest access. Work from the equipment instructions or your provider's established account, rather than an unsolicited security message. An unfamiliar device name is a reason to investigate, not proof that someone has broken in. Securing Wi-Fi helps protect your household, but does not replace updates and account security on individual devices.

Start with the essentials

Find the router instructions or use the provider account you already know. Identify the wireless-security settings and administrator settings before making changes.
Select WPA3 Personal where your equipment supports it, or WPA2 Personal where needed. Avoid an open network and obsolete WEP or WPA security.
Choose different, unique passwords for Wi-Fi access and router administration. Keep them somewhere protected so you can reconnect and manage the equipment later.
Check how router updates are delivered. The FTC's official home Wi-Fi guide, linked below, explains these settings and the questions to ask your provider.

Stop: danger

Unexpected access request: stop if an unsolicited caller or message asks for your router password, a security code or remote access to fix an alleged Wi-Fi problem. Verify the claim through contact information you already trust before continuing.

Prepare before you change anything

Pick a convenient time when other household members can tolerate a disconnection. Identify devices that depend on the network, including cameras, accessibility equipment and work devices. Make sure you know how to reconnect them before changing the network name or password.

Use the FTC home Wi-Fi checklist to review encryption, default settings, guest access and the router firewall. Match its recommendations to the controls available on your equipment. If a setting is missing or unclear, ask support rather than guessing.

Change one group of settings at a time and check that you can still manage the router. Log out of the administrator session when you finish. Do not post screenshots containing passwords or connection details when asking for help.

What not to do

Reusing your email, banking or work password for the wireless network.
Choosing a recognizable quotation, home address or family name as your passphrase.
Sharing administrator credentials when a visitor only needs internet access.
Assuming that hiding the network name replaces encryption and access controls.

Choose passwords you can manage safely

A long passphrase made from unrelated words can be easier to handle than a short, predictable password. Avoid familiar sayings and personal information. The FTC password guide explains how to choose unique passwords and use a password manager; apply that advice within the router's supported password format.

After changing Wi-Fi credentials, reconnect your own devices deliberately. This is also a useful time to stop reconnecting equipment you no longer use. Keep the administrator password separate from the password you share for network access.

Review connected devices without jumping to conclusions

If your router provides a connected-device screen, compare its entries with your household equipment using the router's instructions. A generic label alone does not establish who owns a device. Check your own phones, printers and connected appliances before assuming an intrusion. If you cannot account for an entry, ask support how to identify it and review access securely.

Separate guests and maintain the equipment

Where supported, configure guest access and check whether guests can reach household devices. Do not assume the word “guest” guarantees isolation on every router. If a work device is involved, follow your employer's network requirements.

The NSA home-network security guide covers network separation, updates and limiting administration to the internal network. Use its routing-device recommendations to review unnecessary remote administration and related features with support. Disable features you do not need only after checking their effect on your setup.

Ask whether the router still receives security updates. The NIST consumer-router cybersecurity publication describes security capabilities to consider when assessing equipment; open the publication from that page if you need a detailed checklist. It is technical guidance, not a household certification tool.

In the United States, unfamiliar network activity does not by itself establish the account holder's legal responsibility. If you receive a legal notice, preserve it and seek advice appropriate to your state and circumstances.

Good to know

Router security also depends on connected devices. Use the FTC's device-security guide at https://consumer.ftc.gov/articles/securing-your-internet-connected-devices-home to review updates and devices you no longer use.
For provider-managed routers, ask which security settings you control and which are maintained automatically.
If you suspect account compromise as well as network access, review the affected accounts separately from the router.

Illustrative example: Morgan in Colorado has shared the household Wi-Fi password with many visitors. Before changing it, Morgan inventories essential devices, checks the router instructions, creates separate guest access and reconnects household equipment. Administrator credentials stay private.

A made-up story, for illustration.

Bobby

Sources, verification, confidence

Verified on November 5, 2026, for the United States. Confidence: high for the general security recommendations; medium for device identification and guest isolation, which depend on the router. No general legal liability rule is asserted.