Lock Down Your Home Wi-Fi
Router passwords, WPA3, guest networks, and IoT segmentation for households.
Home Wi-Fi is the invisible backbone of remote work, cameras, and smart devices. Default router passwords and outdated firmware turn that hub into an easy entry point. Start by changing the admin password, disabling remote administration if you do not need it, and updating firmware from the vendor site.
Use WPA3 when every device supports it; otherwise WPA2-AES with a long random passphrase. Hide SSID only as mild obscurity—it is not a real control. Create a guest network for visitors and IoT gadgets so a compromised bulb cannot reach your laptop.
Place the router centrally, change the default network name so it does not reveal the model, and turn off WPS. Enable automatic updates if offered. Segment work devices when possible, and prefer Ethernet for critical machines.
Monitor the client list for unknown devices. Disable UPnP if you do not need it. For travel routers or mesh systems, apply the same hardening. A weekend of router hygiene dramatically shrinks the attack surface of an entire household.
Beyond the basics, build a personal security routine you can sustain. Once a month, skim login alerts, revoke stale sessions, and confirm backup jobs completed. Teach household members the same short checklist so one weak link does not undo everyone else's effort. When friends ask for help after a scare, walk them through password resets and MFA enrollment instead of only removing malware symptoms.
Threat actors automate reconnaissance. They scan for default credentials, outdated plugins, and cloud buckets left public. Your individual choices still matter because commodity attacks seek the easiest wins. Making your accounts boringly hard to abuse pushes opportunistic crime elsewhere. That is not victim blaming—it is practical risk reduction in an uneven landscape.