For a safer home network, set Wi-Fi to WPA3-Personal if your router and devices support it, replace the default administrator and Wi-Fi passwords, install firmware updates, and turn off internet-facing or automatic features you do not use. The exact labels vary by router and internet provider; check your model’s manual or provider support if a setting is missing.
Which router settings should you change first?
Start with the controls that protect access to the network and its administration. Then review convenience features that may expose more functionality than your household needs.
- Choose strong Wi-Fi encryption. Select WPA3-Personal when your router and connected devices support it. If older devices need to connect, use WPA2/3 mode if available, or WPA2-Personal as the fallback. Avoid WEP and older WPA options. If updates do not make WPA2 or WPA3 available, consider replacing the router with a supported model. The FTC’s home Wi-Fi guidance and the NSA’s 2023 guidance recommend modern wireless security.
- Change both default passwords. Set a unique administrator password for the router’s settings and a separate Wi-Fi password for devices joining the network. A strong Wi-Fi passphrase is harder to guess; the NSA recommends at least 20 characters. Don’t use the same password for both purposes.
- Choose a non-identifying network name. Avoid an SSID that gives away your name, address, location, or router brand. Hiding the SSID is not a security substitute: the NSA says it adds no additional wireless security and may cause compatibility issues.
- Update the router’s firmware. Check for updates from the manufacturer or ISP, and enable automatic updates if the option is available. Firmware updates can fix security flaws, but update support and delivery depend on the model and provider.
- Turn off remote management unless you need it. This feature lets someone access router settings over the internet, increasing exposure of the administrative interface.
- Turn off WPS if you do not use it. Wi-Fi Protected Setup connects devices without requiring the Wi-Fi password. The FTC includes disabling WPS among steps to improve home Wi-Fi security.
- Review UPnP and disable it if nothing depends on it. Universal Plug and Play lets devices on the network discover one another automatically. It may be needed by a particular device or application; if turning it off breaks a feature, check that device’s requirements before deciding whether to restore it.
Should you use WPA3 or WPA2?
WPA3-Personal is the preferred choice when both the router and household devices support it. Compatibility is the main reason to choose another mode: older devices may not join a WPA3-only network. In that case, use a WPA2/3 mixed mode if your router offers one, or WPA2-Personal for compatibility. Avoid WEP and obsolete WPA regardless of device age.
If the router cannot offer WPA2 or WPA3 after its software is updated, it lacks the recommended modern security options. Consider replacing it with a supported router rather than relying on older encryption.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minute#1 Best Overall
Should you turn off WPS, remote management, and UPnP?
Turn off remote management and WPS when you have no specific use for them: remote management exposes the administration interface to internet access, while WPS provides a password-free way to join Wi-Fi. UPnP is more dependent on your household’s devices. Disable it if possible, but first check whether a device or application requires it; restore it only if that known need outweighs the extra automatic behavior.
How can you separate guests and smart-home devices?
Use a guest network for visitors and, where your router supports it, a separate network for internet-connected devices such as smart-home equipment. Separation can limit how directly those devices interact with personal computers and phones, but the degree of isolation varies by router. Check the manufacturer’s instructions to confirm what the guest or segmented network actually isolates.
Rank #2
How should you review devices connected to the router?
If your router has a connected-device list, check it periodically for unfamiliar entries. A name you do not recognize is not proof of an intruder; some devices appear under manufacturer or technical names. Use the router manufacturer’s instructions to identify or investigate an entry before taking action.
Do router settings make your browsing private?
No single router setting makes all online activity private or anonymous. DNS settings determine which resolver receives requests that translate domain names into network addresses. Choosing a resolver is a trust and policy decision, not a way to hide browsing from every party. NIST’s final SP 800-81r3, published March 19, 2026, discusses DNS integrity, availability, and confidentiality, including protecting recursive DNS queries and minimizing information leakage; it does not identify one best consumer resolver.
Free tools Windows power users keep installed
One-click scans. No signup required.
When comparing DNS options, consider the resolver operator’s privacy policy, the features you need, and whom you trust with lookup requests. Changing DNS alone does not make a network anonymous.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.When should you replace a router?
Consider replacement if the manufacturer or ISP no longer provides security updates, or if the router still cannot offer WPA2 or WPA3 after available updates. The FTC advises considering replacement when an update cannot provide modern wireless security, and the NSA recommends WPA3-capable equipment. This is not a reason for every household to buy new hardware: the relevant questions are whether your current router receives updates and supports modern encryption.
Quick Recap
Rank #4
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
