# Router hardening checklist: 10 settings to change in 15 minutes

> Ten changes that make your router harder to attack, in plain English and in order of importance.

- URL: https://wifiweekly.com/guides/router-hardening-checklist/
- Type: Guide
- Topic: Security & Privacy
- Author: Tehseen Arbab
- Published: 2026-09-25
- Last updated: 2026-09-25
- Publisher: WiFi Weekly (https://wifiweekly.com/)

## Short answer

Most router attacks succeed because of weak admin passwords, old firmware, or services you never use. Change the admin password, turn on automatic updates, use WPA3 or WPA2 with AES, and put smart-home gear on a guest network. A VPN protects traffic on your device but does not secure your router.

---


Your router is the front door to your home network. These ten changes take about 15 minutes, and they are in order of importance. Settings names vary by brand, so look for the closest match in your router's app or admin page.

## The checklist

1. **Change the router admin password.** This is separate from your WiFi password. Use a long, unique password and store it in a password manager.
2. **Install updates and turn on automatic updates.** Firmware updates fix security problems. If your router no longer receives updates, replace it. See [how to check whether your router still gets updates](https://wifiweekly.com/guides/is-my-router-still-getting-security-updates/).
3. **Use WPA3, or WPA2 with AES.** Avoid the older WEP and WPA settings, and avoid "TKIP." If a device can't connect on WPA3, a mixed WPA2/WPA3 mode is a reasonable compromise. Our [WPA2 vs. WPA3 guide](https://wifiweekly.com/guides/wpa2-vs-wpa3/) explains the difference.
4. **Set a long WiFi password.** A passphrase of several random words is easy to type and hard to guess.
5. **Turn off WPS.** The push-button and PIN setup feature is convenient and a known weak spot. See [whether to turn off WPS and UPnP](https://wifiweekly.com/guides/should-you-disable-wps-and-upnp/).
6. **Turn off remote management.** Unless you deliberately use it, you don't need to reach your router's admin page from the internet.
7. **Use a guest network for visitors and smart-home gear.** This keeps cameras, plugs, and TVs away from the laptops and phones that hold your private data. See [whether smart home devices belong on a guest network](https://wifiweekly.com/guides/guest-wifi-network-smart-home-devices/).
8. **Review connected devices.** Remove anything you don't recognize and change your WiFi password if something looks wrong. See [how to see who's connected to your Wi-Fi](https://wifiweekly.com/guides/see-who-is-connected-to-my-wifi/).
9. **Check for risky services you don't use.** UPnP, port forwarding, and remote file sharing should be off unless you need them.
10. **Consider DNS filtering.** Many routers let you choose a DNS service that blocks known malicious sites. See [how to change your router's DNS](https://wifiweekly.com/guides/change-router-dns-settings/).

## What does a VPN do?

A VPN encrypts your connection from your device to the VPN provider, which is useful on public WiFi. It doesn't secure your router, and it won't protect you from a weak admin password. Treat it as an extra, not a replacement for the checklist.

## What about smart-home devices?

Put them on a guest network and keep their apps updated. Our guide to [Matter and Thread](https://wifiweekly.com/guides/matter-thread-smart-home-explained/) explains how smart-home devices connect to your network.

## When is it time to replace the router?

Replace your router when the maker stops releasing security updates, or if it can't use WPA3 and you have devices that do. If you're shopping, our [guide to picking a router for a large house](https://wifiweekly.com/guides/best-wifi-router-for-large-house/) has current picks and notes on FCC rules.


## Frequently asked questions

### Does a VPN secure my home network?

No. A VPN encrypts traffic between your device and the VPN provider. It does not fix an out-of-date router or a weak admin password.

### Should I hide my WiFi network name (SSID)?

Hiding it adds little protection and can make devices harder to connect. A strong password and WPA3 or WPA2 with AES do much more.

### How often should I update router firmware?

Turn on automatic updates if your router offers them. If not, check every few months. If the maker no longer publishes updates for your model, plan to replace it.

### What is the easiest win if I only have five minutes?

Change the router's admin password and make sure firmware is current.

## Sources

- Secure Our World, Cybersecurity and Infrastructure Security Agency (CISA): https://www.cisa.gov/secure-our-world
- Wi-Fi Security, Wi-Fi Alliance: https://www.wi-fi.org/security