Why Your Home Network Deserves a Security Audit

Most Americans configure their home router once — when it's first set up — and never revisit those settings. That one-time configuration often includes factory-default passwords, outdated firmware, and open permissions that leave the door ajar for anyone who knows where to look.

This checklist walks you through the specific settings, credentials, and configurations that matter most. You don't need to be a networking expert to complete it. If you haven't already set up your network from scratch or want a refresher on the foundational steps, see our step-by-step Wi-Fi setup guide before working through this audit.

Work through each group in order. Items marked must address critical vulnerabilities. Items marked should are strongly recommended for most households. Nice-to-have items add meaningful protection but require a bit more effort.

Router Admin Credentials

Log in to your router's admin panel and change the default administrator username and password to something unique and strong. Must
Disable remote management (sometimes called "remote access" or "WAN management") unless you have a specific need for it. Must
Record your new admin credentials in a secure password manager rather than writing them on a sticky note. Should

Wi-Fi Network Settings

Set your Wi-Fi password to at least 12 characters using a mix of letters, numbers, and symbols — avoid dictionary words or personal information. Must
Confirm your network is using WPA3 or, if not available on your router, WPA2 encryption — avoid WEP or open (unsecured) configurations. Must
Rename your network (SSID) to something that doesn't identify your address, your name, or your router model. Should
Disable WPS (Wi-Fi Protected Setup) — it's convenient but has well-documented vulnerabilities. Should
Consider hiding your SSID broadcast if your router supports it, so your network name doesn't appear in nearby devices' scan lists. Nice to have

Firmware and Software Updates

Check your router's admin panel for a firmware update and install any available version — manufacturers regularly patch known security flaws. Must
Enable automatic firmware updates if your router supports them, so future patches apply without requiring manual action. Should
Check whether your router model is still receiving security updates from the manufacturer; older models may no longer be supported. Should

Device and Guest Network Management

Enable your router's guest network feature and move smart home and IoT devices (cameras, thermostats, smart speakers) onto it to isolate them from your main computers and phones. Must
Review the list of connected devices in your router's admin panel and identify any that you don't recognize. Must
Remove or block any unrecognized devices you cannot account for. Must
Set the guest network to use a separate, strong password that you change periodically. Should
Enable MAC address filtering to restrict which physical devices can join your main network. Nice to have

Firewall and Advanced Settings

Verify that your router's built-in firewall is enabled — most routers have this on by default, but confirm it hasn't been turned off. Must
Disable UPnP (Universal Plug and Play) unless a specific application requires it — it can automatically open ports that expose your network. Should
Review any port-forwarding rules currently active and delete any that are no longer needed. Nice to have

What You'll Need Before You Start

Before diving in, gather a few things so you're not interrupted mid-audit. You'll need access to your router's admin interface — typically reached by typing your router's IP address (commonly 192.168.1.1 or 192.168.0.1) into a browser while connected to your home network. Check the label on the router itself if you're unsure of the address or default login.

Required

Router admin panel access

Required to view and change all router settings covered in this checklist.

Required

Router model and documentation

Helps you locate specific settings that may be named differently across manufacturers.

Optional

Password manager

Stores new strong credentials for your router admin and Wi-Fi networks securely.

Optional

Connected device inventory (pen and paper or a notes app)

Lets you track which devices you've verified as authorized on your network.

Once you've confirmed access to the admin panel, work through each section of the checklist below. Most changes take effect immediately, though some routers will restart briefly after firmware updates.

Changing Settings Can Temporarily Drop Connections

When you update your Wi-Fi password or encryption type, all connected devices will be disconnected until you re-enter the new credentials. Plan to do this when you have time to reconnect your phones, computers, and smart home devices — and keep your phone handy as a hotspot backup if needed.

Extending Security Beyond the Router

Securing your router is the foundation, but your network security is only as strong as the devices and accounts connected to it. If you share a computer or tablet with family members, review our guide on keeping accounts secure on shared devices to close a common gap people overlook.

Strong passwords on your Wi-Fi and router admin panel are essential, but reusing passwords across your accounts multiplies risk. A password manager makes it practical to use a unique, complex password for every account. Pair that with two-factor authentication on your key accounts and you've meaningfully raised the cost of any intrusion attempt.

For context on why your home network matters more than ever, consider how vulnerable connections outside your home can be. Our article on public Wi-Fi risks illustrates what attackers look for — the same principles apply to a poorly secured home network. For a broader account-level review, see our online accounts security checkup.

Unrecognized Devices Are a Serious Warning Sign

If you find a device on your network that you cannot identify even after checking all household gadgets, treat it as a potential intrusion. Change your Wi-Fi password immediately, which will force all devices — including the unknown one — to re-authenticate. Monitor the device list again after 24 hours to confirm it hasn't returned.