Home Wi-Fi and Public Networks: Set It Up Safely

Your router is the front door to every device you own, and most people never touch its settings after the day it was installed. Fifteen minutes fixes the important parts.

Router settings that matter

Log into your router’s admin page (the address and default login are usually printed on the router itself) and:

  1. Change the admin password. Default router logins are in public lists; drive-by attacks try them automatically.
  2. Use WPA3 encryption (or WPA2 if that’s the best your router offers) with a strong Wi-Fi passphrase. If your router only supports WEP or WPA, replace it — those are broken.
  3. Turn off WPS (the push-button pairing feature) and remote administration unless you actively use them.
  4. Update the firmware, and enable automatic firmware updates if the option exists. A router that stopped receiving updates years ago is a permanent open hole; ISPs will often swap old units for free.

Quarantine the smart gadgets

Smart plugs, cameras, TVs and doorbells are historically the least-secure devices in the house — and once one is compromised, it can see the rest of your network.

  • Put them on the guest network (most routers can run one alongside the main network). Your laptop and phone stay on the main network; the gadgets can reach the internet but not your files.
  • Give the guest network a different password, and hand that one to visitors too.
  • Change any default password a gadget ships with, especially cameras.

Public Wi-Fi, hotel networks and travel

Modern HTTPS encrypts most of what you do, so public Wi-Fi is less dangerous than it was a decade ago — but it still exposes you to fake hotspots, snoopy network operators and login-page tricks.

  • Prefer your phone’s hotspot over café/airport Wi-Fi for anything sensitive.
  • If you use public Wi-Fi regularly, a reputable VPN encrypts everything leaving your device regardless of the network — see our VPN guide.
  • Never enter passwords on a page that appears after a certificate warning, and be suspicious of hotspot names like “Free_Airport_WiFi_2” — anyone can broadcast any network name.
  • Turn off auto-join for open networks on your phone so it doesn’t silently connect to a hostile hotspot with a familiar name.

Do this today

  • Change your router’s admin password and check its firmware.
  • Confirm your Wi-Fi uses WPA2/WPA3 with a strong passphrase.
  • Move smart-home devices to the guest network.
  • Disable auto-join for open Wi-Fi on your phone.