I will be honest: I checked our home router settings properly for the first time about eighteen months ago and found the default admin password was still set to “admin”. We had had that router for three years. It had never been a problem, but it absolutely could have been.
Most families set up their router when the broadband engineer installs it, connect their devices, and never look at the settings again. Which means most home networks are running on defaults that were designed for ease of setup, not security. In 2026, with the average UK home having 15 or more connected devices — phones, laptops, smart TVs, doorbells, thermostats, kids’ tablets — it is worth spending 30 minutes getting this right.
This guide covers the changes that actually matter, in plain English.
Step 1: Log Into Your Router
Everything in this guide starts here. Your router has an admin panel you access through a web browser.
Open a browser on a device connected to your home Wi-Fi. Type your router’s IP address into the address bar. The most common addresses are 192.168.0.1, 192.168.1.1, or 10.0.0.1. If none of those work, look on the sticker on the back of your router — it is usually printed there.
You will be asked for a username and password. If you have never changed these, they are almost certainly “admin/admin” or “admin/password” or printed on the same router sticker. These defaults are publicly known, which is why changing them is the first thing on this list.
Step 2: Change the Router Admin Password
Once logged in, look for an Administration, Management, or System section. Find the option to change the admin password. Set a strong, unique password — at least 12 characters, mixing letters, numbers, and symbols. Write it down somewhere safe (a password manager is ideal) because you will not need it often but you will definitely need it eventually.
This is the single most important step. With the default password unchanged, anyone on your network — including a tech-curious 17-year-old — can access your full router settings.
Step 3: Update Your Wi-Fi Password
If your Wi-Fi password is the one printed on your router sticker, it has probably been shared with every visitor, delivery driver who asked for the code, and your kids’ friends over the years. Time for a refresh.
In the router admin panel, find Wireless Settings or Wi-Fi Settings. Look for the Security or Password section. Change the Wi-Fi password to something strong — again, 12 characters or more. Update all your devices. This takes a while but is worth doing every year or two.
While you are here, make sure the Security Type is set to WPA3 if your router supports it. If not, WPA2-AES is the minimum acceptable. Avoid WEP or TKIP, which are outdated and easily cracked.
My practical approach is to make the main Wi-Fi password strong but typeable. A long phrase with a couple of numbers is usually better for a family than a heroic mess of symbols that nobody can enter correctly on a TV remote. Save the really complex passwords for the router admin login and your password manager.
Step 4: Update Your Router’s Firmware
Router manufacturers push firmware updates that patch security vulnerabilities, and most routers do not install them automatically. Check if your router has an auto-update option and turn it on. If not, check the Administration or Firmware section and update manually.
Some ISP-provided routers (BT Hub, Sky Hub, Virgin Media Hub) do update automatically. If you have your own router, it almost certainly needs checking manually.
Step 5: Set Up a Guest Network
Most modern routers let you create a separate guest Wi-Fi network. Do this. Connect visitors, smart home devices, and anything else you do not fully trust to the guest network rather than your main one.
Why this matters: if a smart device is compromised — a cheap smart plug, an older security camera, anything with questionable firmware — it can be used as a foothold to access other devices on the same network. Keeping IoT devices on a separate network limits what an attacker can reach. Your phones, laptops, and computers stay on the main network. Everything else goes on the guest one.
In the router admin panel, look for Guest Network or Guest Wi-Fi and enable it. Give it a different name and password from your main network. Disable the option that lets guest devices communicate with each other and with your main network.
Step 6: Check What Is Connected
Most router admin panels have a section called Connected Devices, DHCP Clients, or Device List. This shows you everything currently on your network.
Go through the list. Most devices will show a device name or a manufacturer name that makes them identifiable. If you see something you do not recognise, it could be a neighbour who has somehow connected (uncommon but possible with weak passwords), an old device you have forgotten about, or in rare cases, something more concerning. Anything unrecognised can be blocked from the admin panel.
This is also a useful exercise for knowing what is on your network — most people are surprised by how many devices appear.
When I do this at home, I start by naming the obvious devices in the router app: phones, laptops, tablets, TVs, consoles, printers, smart speakers, cameras, and anything plugged into Ethernet. Then the weird entries become much easier to investigate. A mystery device is less scary when you can narrow it down to “probably the old Chromecast in the spare room”.
Step 7: Disable Remote Management
Remote management allows you to access your router admin panel from outside your home network. Unless you have a specific reason for this, it should be off. Find it in the Administration or Security section and make sure it is disabled.
While you are in that part of the settings, also look for WPS. WPS is the push-button or PIN-based pairing feature that lets devices join without typing the full Wi-Fi password. It was convenient years ago, but I would turn it off on a modern family network. The normal password route is safer and only mildly more annoying.
Step 8: Change the Network Name Sensibly
Your Wi-Fi network name, or SSID, does not need to identify your family, address, router model, or broadband provider. Avoid names like SmithFamilyWiFi, Number42, or BT-Hub-ABCD if you can. You do not need to be paranoid or theatrical about it; just choose something boring that does not reveal anything useful.
Do not hide the network name. Hidden SSIDs sound more secure than they are, and they can make devices behave awkwardly. A visible network with WPA2/WPA3 and a strong password is the sensible target.
Step 9: Retire Old Smart Devices
The weakest thing on a family network is often not the laptop or phone. It is the forgotten smart plug, old baby monitor, cheap camera, or no-name gadget that has not had a firmware update in years. If a device has an app that no longer works, a manufacturer that has vanished, or firmware that cannot be updated, think carefully about whether it still deserves a place on your network.
This is where the guest network helps. I do not mind a cheap smart bulb being a bit dim in the security department if it is isolated from laptops, phones, and anything with personal files. I do mind it sitting on the same network as everything important.
My 30-Minute Home Wi-Fi Security Checklist
If you only have half an hour, do this in order:
- Change the router admin password.
- Turn on router firmware auto-updates if available.
- Set Wi-Fi security to WPA3 or WPA2-AES.
- Change the main Wi-Fi password if it has been widely shared.
- Create a guest network for visitors and smart home devices.
- Disable remote management and WPS.
- Check the connected-device list and rename the devices you recognise.
That list will not make you invincible, but it removes the easy mistakes. For a normal home, that is the aim: reduce the obvious risks without turning family Wi-Fi into a part-time job.
Common Problems and Fixes
I cannot log into the router admin panel. Triple-check the IP address. If your ISP provided the router, the login details might be different from the standard ones — check their support page for your specific router model.
I changed the Wi-Fi password and now cannot connect. You will need to reconnect each device manually with the new password. On most devices, go to Wi-Fi settings, tap the network name, select Forget, then reconnect with the new password.
My router does not have WPA3. WPA2-AES is acceptable. If your router is more than 5 or 6 years old, it may be worth upgrading — not just for security reasons but for performance with modern devices.
The Family Angle
The guest network tip is particularly relevant if you have teenagers who have friends round regularly. You can give the guest network password freely and change it occasionally without affecting your main network or your own devices.
For families with young children and smart home devices — baby monitors, connected toys, smart speakers — the IoT isolation approach is worth taking seriously. Some older connected toys have had documented security issues. Keeping them on a separate network from the devices that hold your sensitive data is simple and effective.
It is also worth having a brief conversation with older kids about not sharing the main Wi-Fi password. Not because you distrust them, but because they will share it with friends who will share it further, and eventually you have no idea who has access to your main network.
For more practical guides like this one on home tech and family security, the Tech Dads Life newsletter covers it weekly. Sign up free at Tech Dads Life on Beehiiv .
