I will be honest: I checked our home router settings properly for the first time about eighteen months ago and found the default admin password was still set to “admin”. We had had that router for three years. It had never been a problem, but it absolutely could have been.
Most families set up their router when the broadband engineer installs it, connect their devices, and never look at the settings again. Which means most home networks are running on defaults that were designed for ease of setup, not security. In 2026, with the average UK home having 15 or more connected devices — phones, laptops, smart TVs, doorbells, thermostats, kids’ tablets — it is worth spending 30 minutes getting this right.
This guide covers the changes that actually matter, in plain English.
Step 1: Log Into Your Router
Everything in this guide starts here. Your router has an admin panel you access through a web browser.
Open a browser on a device connected to your home Wi-Fi. Type your router’s IP address into the address bar. The most common addresses are 192.168.0.1, 192.168.1.1, or 10.0.0.1. If none of those work, look on the sticker on the back of your router — it is usually printed there.
You will be asked for a username and password. If you have never changed these, they are almost certainly “admin/admin” or “admin/password” or printed on the same router sticker. These defaults are publicly known, which is why changing them is the first thing on this list.
Step 2: Change the Router Admin Password
Once logged in, look for an Administration, Management, or System section. Find the option to change the admin password. Set a strong, unique password — at least 12 characters, mixing letters, numbers, and symbols. Write it down somewhere safe (a password manager is ideal) because you will not need it often but you will definitely need it eventually.
This is the single most important step. With the default password unchanged, anyone on your network — including a tech-curious 17-year-old — can access your full router settings.
Step 3: Update Your Wi-Fi Password
If your Wi-Fi password is the one printed on your router sticker, it has probably been shared with every visitor, delivery driver who asked for the code, and your kids’ friends over the years. Time for a refresh.
In the router admin panel, find Wireless Settings or Wi-Fi Settings. Look for the Security or Password section. Change the Wi-Fi password to something strong — again, 12 characters or more. Update all your devices. This takes a while but is worth doing every year or two.
While you are here, make sure the Security Type is set to WPA3 if your router supports it. If not, WPA2-AES is the minimum acceptable. Avoid WEP or TKIP, which are outdated and easily cracked.
Step 4: Update Your Router’s Firmware
Router manufacturers push firmware updates that patch security vulnerabilities, and most routers do not install them automatically. Check if your router has an auto-update option and turn it on. If not, check the Administration or Firmware section and update manually.
Some ISP-provided routers (BT Hub, Sky Hub, Virgin Media Hub) do update automatically. If you have your own router, it almost certainly needs checking manually.
Step 5: Set Up a Guest Network
Most modern routers let you create a separate guest Wi-Fi network. Do this. Connect visitors, smart home devices, and anything else you do not fully trust to the guest network rather than your main one.
Why this matters: if a smart device is compromised — a cheap smart plug, an older security camera, anything with questionable firmware — it can be used as a foothold to access other devices on the same network. Keeping IoT devices on a separate network limits what an attacker can reach. Your phones, laptops, and computers stay on the main network. Everything else goes on the guest one.
In the router admin panel, look for Guest Network or Guest Wi-Fi and enable it. Give it a different name and password from your main network. Disable the option that lets guest devices communicate with each other and with your main network.
Step 6: Check What Is Connected
Most router admin panels have a section called Connected Devices, DHCP Clients, or Device List. This shows you everything currently on your network.
Go through the list. Most devices will show a device name or a manufacturer name that makes them identifiable. If you see something you do not recognise, it could be a neighbour who has somehow connected (uncommon but possible with weak passwords), an old device you have forgotten about, or in rare cases, something more concerning. Anything unrecognised can be blocked from the admin panel.
This is also a useful exercise for knowing what is on your network — most people are surprised by how many devices appear.
Step 7: Disable Remote Management
Remote management allows you to access your router admin panel from outside your home network. Unless you have a specific reason for this, it should be off. Find it in the Administration or Security section and make sure it is disabled.
Common Problems and Fixes
I cannot log into the router admin panel. Triple-check the IP address. If your ISP provided the router, the login details might be different from the standard ones — check their support page for your specific router model.
I changed the Wi-Fi password and now cannot connect. You will need to reconnect each device manually with the new password. On most devices, go to Wi-Fi settings, tap the network name, select Forget, then reconnect with the new password.
My router does not have WPA3. WPA2-AES is acceptable. If your router is more than 5 or 6 years old, it may be worth upgrading — not just for security reasons but for performance with modern devices.
The Family Angle
The guest network tip is particularly relevant if you have teenagers who have friends round regularly. You can give the guest network password freely and change it occasionally without affecting your main network or your own devices.
For families with young children and smart home devices — baby monitors, connected toys, smart speakers — the IoT isolation approach is worth taking seriously. Some older connected toys have had documented security issues. Keeping them on a separate network from the devices that hold your sensitive data is simple and effective.
It is also worth having a brief conversation with older kids about not sharing the main Wi-Fi password. Not because you distrust them, but because they will share it with friends who will share it further, and eventually you have no idea who has access to your main network.
For more practical guides like this one on home tech and family security, the Tech Dads Life newsletter covers it weekly. Sign up free at Tech Dads Life on Beehiiv.