5 steps to keep your router from being hacked

January 31, 2024

By Kim Komando

Most of us don’t give a second thought to the router that manages our home internet. We assume it’s working fine, just like the day we installed it, which is why hackers can break into your network and wreak havoc without you even realizing it.

It may have happened already. Tap or click here for a free test to see if your router has been hacked. Remember, every device on your network is at stake.

Many people believe gadgets are set for security right out of the box. So, we purchase cameras, speakers, thermostats, and more, thinking they are locked down at the get-go. The reality is we need to take cybersecurity steps on all of our devices, including routers. Let’s get started.

1. Regular or automatic updates

When a router gets an update, you probably won’t know about it. Newer routers can download them automatically, and nearly every model has options to update firmware manually. But if it’s not an automatic process, you’ll need to check for them every three months.

To access your router’s admin page, you’ll need the device’s IP address (found on the router) and admin password. The default password may be in the user guide for your router brand, but some sites can help you find them if you don’t have this information. Tap or click here for a list of default router passwords.

Once you’ve opened your router’s admin page, find a section called “Advanced” or “Management” to look for firmware updates. Download any updates. If there is an option in your router’s settings that enables automatic updates, turn it on.

2. Stronger encryption

Most routers include encryption by default. If you’re required to enter a password to connect, you already have it set up. But don’t move on just yet — there are different types of Wi-Fi encryption, and some are weaker than others. Don’t forget, many routers ship with options for outdated encryption settings.

Your router needs to support WPA3. This is the latest wireless standard available.

To check your encryption settings, go to the router’s admin menu. You should be able to find encryption under the “Wireless” or “Security” menu. Select one that starts with “WPA3.” Never choose “Open,” which means no security at all. The same goes for WEP, which is a highly outdated standard that’s easily hacked.

If you have an older router that doesn’t support WPA3, it’s time to upgrade. Here is a nice option from TP-Link.

3. A built-in firewall

One security tool built into your router is the firewall. Nearly every router from the last decade includes one in some form or another.

Here’s how to check your router’s firewall settings and enable it:

• Access the router homepage by typing the router IP address in a browser.
• Check for the Firewall option on the router homepage. It can be grouped under different names, such as Advanced Settings.
• If the Firewall is not enabled, click to select and activate it.

4. Optimized Quad9 DNS settings

Check out the Quad9 Domain Name System service, maintained by cybersecurity advocates at IBM and The Global Cyber Alliance. Once set as your DNS service, every time you click on a web link, Quad9 will check the site against IBM X-Force’s threat intelligence database of over 40 billion analyzed web pages and images.

I have a whole write-up about it on my site, including the step-by-step instructions for your Windows PC or Mac. Tap or click here to start using this free powerful security tool.

5. No remote access

Have you ever had a technician take over your computer while you were on the phone with them? If so, you’re already familiar with “remote administration,” which is commonly used in tech support.

Scammers and hackers find remote access an easy path to access home networks. Remote desktop management is one of the pillars of several security flaws found in Windows.

When it comes to your router, you’re better off disabling these settings altogether. You can usually find this in your router settings under the “Remote Administration” heading.

Even if you do all this, you still need to take steps to lock down your Internet of Things devices. I have several tips for doing this on my site. Tap or click here to change one setting and stop hackers from taking over your smart home devices.

BONUS TIP: Fix your crappy Wi-Fi

There are plenty of reasons your Wi-Fi keeps slowing down (and at the worst times, too, it seems). It could be signal congestion, physical location, firmware issues, hardware limitations or maybe your space is just too big for your router to cover.

If you want to boost your home Wi-Fi to stop constant video buffering or slow webpage loading, try a Wi-Fi extender. If you have a large home, try going with a mesh system. Here’s a mesh Wi-Fi System from eero.

We may receive a commission when you buy through our links, but our reporting and recommendations are always independent and objective.