Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Secure a home router by keeping its firmware supported and up to date, replacing default administrator credentials, using WPA3 Personal or WPA2 Personal, and turning off remote management and convenience features you do not need. If the router is no longer supported or cannot offer WPA2 or WPA3 after updates, replace it with a supported model.

1. Identify your router and check whether it is supported

Find the router’s manufacturer and model on its label, in its companion app, or in the internet service provider’s account or equipment information. Check the manufacturer’s support page for its current support status and firmware instructions. If your ISP supplied the router, ask whether it sends updates automatically and how to check for them.

Support matters because a router that no longer receives security updates can remain exposed to known vulnerabilities. The FBI recommends replacing unsupported network devices with equipment vendors still support: FBI guidance on end-of-life routers.

2. Install firmware updates

Firmware is the software built into the router. Updates can address vulnerabilities affecting the network, so install available updates using the manufacturer’s or ISP’s instructions. The FTC recommends checking the manufacturer’s site for newer software, registering for update notices when offered, and asking the ISP about updates for provider-supplied equipment: FTC guidance on securing home Wi-Fi.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Sale
TP-Link Smart WiFi 6 Dual Band Router 4 Gigabit LAN Ports
  • OneMesh Compatible Router - Form a seamless WiFi when work with TP-Link OneMesh WiFi Extenders
  • Next-Gen Wi-Fi 6 Technology – The Archer AX10 leverages advanced Wi-Fi 6 features like OFDMA and 1024-QAM to deliver improved efficiency across your entire network. Perfect for high-bandwidth activities like streaming, gaming, and smart home connectivity.
  • Next-gen Dual Band router - 300 Mbps on 2. 4 GHz (802. 11n) plus 1201 Mbps on 5 GHz (802. 11ax)
  • Connect more devices than ever before - Wi-Fi 6 technology simultaneously communicates more data to more devices using OFDMA and MU-MIMO while reducing lag dramatically
  • Powerful Dual-Core 900MHz Processor – Handles multiple data streams simultaneously for reliable performance across your devices. Ensures smooth streaming, online gaming, and video conferencing without buffering or lag.
  • If the router offers automatic firmware updates, enable them if they suit your needs.
  • If updates are manual, check the manufacturer or ISP’s update channel periodically.
  • Use instructions for your exact model; update menus and procedures vary. CISA also explains the role of firmware updates in home-router security: CISA Home Router Security.

3. Replace the default administrator credentials

Change the router’s default administrator username and password to unique credentials. This administrator login controls router settings; it is different from the Wi-Fi password that household devices use to connect. Avoid credentials that reveal your name, address, or router brand. Use the model’s instructions to find the setting—there is no universal menu path. The FTC suggests searching for instructions using the router manufacturer’s name and “change admin password.”

4. Choose WPA3 or WPA2 for Wi-Fi encryption

In the router’s wireless security settings, choose WPA3 Personal if it is available. If not, choose WPA2 Personal. The FTC says: “WPA3 is the newer — and best — encryption available, but both will work to scramble your information.” See the FTC’s Wi-Fi security guidance.

Rank #2
Sale
TP-Link AX1800 WiFi 6 Router (Archer AX21 V5)
  • DUAL-BAND WIFI 6 ROUTER: Wi-Fi 6(802.11ax) technology achieves faster speeds, greater capacity and reduced network congestion compared to the previous gen. All WiFi routers require a separate modem. Dual-Band WiFi routers do not support the 6 GHz band.
  • AX1800: Enjoy smoother and more stable streaming, gaming, downloading with 1.8 Gbps total bandwidth (up to 1200 Mbps on 5 GHz and up to 574 Mbps on 2.4 GHz). Performance varies by conditions, distance to devices, and obstacles such as walls.
  • CONNECT MORE DEVICES: Wi-Fi 6 technology communicates more data to more devices simultaneously using revolutionary OFDMA technology
  • EXTENSIVE COVERAGE: Achieve the strong, reliable WiFi coverage with Archer AX1800 as it focuses signal strength to your devices far away using Beamforming technology, 4 high-gain antennas and an advanced front-end module (FEM) chipset
  • OUR CYBERSECURITY COMMITMENT: TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement.

If the router offers only older WPA or WEP, first check whether a firmware update makes WPA2 or WPA3 available. If neither is available afterward, the FTC advises replacing the router. Use the manufacturer’s instructions to locate the wireless security setting; names and options differ by model.

5. Turn off internet-based remote management

Remote management or remote administration allows router controls to be changed over the internet. Disable it if you do not need to manage the router from outside your home network. Both the FTC and FBI recommend turning off this capability as a security measure. The option’s name and location vary, so consult the router or ISP documentation rather than relying on a generic menu path.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Sale
TP-Link Dual-Band AX3000 Wi-Fi 6 Wireless Gigabit Internet Router for Home
  • Next-Gen Gigabit Wi-Fi 6 Speeds: 2402 Mbps on 5 GHz and 574 Mbps on 2.4 GHz bands ensure smoother streaming and faster downloads; support VPN server and VPN client¹
  • A More Responsive Experience: Enjoy smooth gaming, video streaming, and live feeds simultaneously. OFDMA makes your Wi-Fi stronger by allowing multiple clients to share one band at the same time, cutting latency and jitter.²
  • Expanded Wi-Fi Coverage: 4 high-gain external antennas and Beamforming technology combine to extend strong, reliable, Wi-Fi throughout your home.
  • Improved Battery Life: Target Wake Time helps your devices to communicate efficiently while consuming less power.
  • Improved Cooling Design: No heat ups, no throttles. A larger heat sink and redefined case design cools the WiFi 6 system and enables your network to stay at top speeds in more versatile environments.

6. Review WPS and UPnP

The FTC recommends turning off Wi-Fi Protected Setup (WPS) and Universal Plug and Play (UPnP) if you do not need them. Check your router and connected-device documentation before disabling a feature your household relies on.

  • WPS: lets devices connect without entering the Wi-Fi password.
  • UPnP: lets devices on the network discover one another.

Find the controls in your model’s settings or documentation; router interfaces differ. The FTC’s router recommendations explain why these features merit review.

Rank #4
Sale
NETGEAR Nighthawk WiFi 6 Router R6700AX, Up to 1,500 sq ft, 1.8 Gbps
  • NIGHTHAWK WIFI 6 ROUTER FOR YOUR WHOLE HOME: Delivers fast, reliable WiFi across every room of your apartment or small home for streaming, gaming, video calls, and smart home devices, all running at the same time without slowing each other down.
  • WORKS WITH YOUR EXISTING INTERNET SERVICE: Pairs with your existing modem or gateway via ethernet. Compatible with most cable, fiber, DSL, and satellite providers. Some gateways and modem router combos may require bridge mode. No coax needed.
  • SET UP AND MANAGE YOUR NETWORK WITH THE NIGHTHAWK APP: Download the free Nighthawk app on iOS or Android for guided setup. Manage WiFi, run speed tests, pause devices, and set up guest networks from anywhere. Active internet required.
  • READY FOR THE DEVICES YOU ALREADY OWN: Your phones, laptops, and TVs work right out of the box. WiFi 6 delivers speeds up to 1.8 Gbps across 2.4 GHz and 5 GHz bands. Backward compatible with WiFi 5 and earlier.
  • COVERAGE IN EVERY ROOM: Covers up to 1,500 sq. ft. for up to 20 connected devices. Walls, floors, and interference can reduce range. Larger or multi-story homes may benefit from a NETGEAR Orbi mesh WiFi system.

7. Finish the router checkup

  • Set up a guest network: give visitors a separate login rather than sharing the primary Wi-Fi credentials. A guest network can help keep visitor devices apart from the main network.
  • Check the firewall: confirm that the router firewall is enabled.
  • Log out of the administrator account: end the settings session when you finish making changes.

These are additional steps in the FTC’s home Wi-Fi guidance. Router settings do not secure every device connected to the network; the FTC also recommends updating and securing those devices: FTC guidance for internet-connected devices at home.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Keep or replace the router?

Situation What to do
The router is supported, can receive updates, and offers WPA2 Personal or WPA3 Personal. Keep using it, install available updates, and review the settings above.
The router is unsupported or has reached end of life. Replace it with a router whose manufacturer or ISP provides security updates. The FBI recommends replacing unsupported network devices.
The router offers only WPA or WEP, even after checking for updates. Replace it with a supported router that offers WPA2 or WPA3, as advised by the FTC.

Check current support and update commitments for the specific model with its manufacturer or ISP. A new router is not necessary solely because a device is old if it remains supported, receives updates, and offers WPA2 or WPA3.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Quick Recap

SaleBestseller No. 2
TP-Link AX1800 WiFi 6 Router (Archer AX21 V5)
TP-Link AX1800 WiFi 6 Router (Archer AX21 V5)
VPN SERVER: Archer AX21 Supports both Open VPN Server and PPTP VPN Server
$59.98
Best Value
TP-Link AX5400 WiFi 6 Router (Archer AX73)
  • 𝐆𝐢𝐠𝐚𝐛𝐢𝐭 𝐖𝐢𝐅𝐢 𝐟𝐨𝐫 𝟖𝐊 𝐒𝐭𝐫𝐞𝐚𝐦𝐢𝐧𝐠 – Up to 5400 Mbps WiFi for faster browsing, streaming, gaming and downloading, all at the same time. Performance varies by conditions, distance to devices, & obstacles such as walls.
  • 𝐅𝐮𝐥𝐥 𝐅𝐞𝐚𝐭𝐮𝐫𝐞𝐝 𝐖𝐢𝐅𝐢 𝟔 𝐑𝐨𝐮𝐭𝐞𝐫 – Equipped with 4T4R and HE160 technologies on the 5 GHz band to enable max 4.8 Gbps ultra-fast connections.Power:12 V 2.5 A
  • 𝐂𝐨𝐧𝐧𝐞𝐜𝐭 𝐌𝐨𝐫𝐞 𝐃𝐞𝐯𝐢𝐜𝐞𝐬 – Supports MU-MIMO and OFDMA to reduce congestion and 4X the average throughput
  • 𝐄𝐱𝐭𝐞𝐧𝐬𝐢𝐯𝐞 𝐂𝐨𝐯𝐞𝐫𝐚𝐠𝐞 - Covers up to 2,000 sq. ft. High-Power FEM, 6× Antennas, Beamforming, and 4T4R structures combine to adapt WiFi coverage to perfectly fit your home and concentrate signal strength towards your devices.
  • 𝐌𝐨𝐫𝐞 𝐕𝐞𝐧𝐭𝐬, 𝐋𝐞𝐬𝐬 𝐇𝐞𝐚𝐭 – Improved vented areas help unleash the full power of the router

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.