Search
  • Videos
  • Windows 10
  • 5G
  • CES
  • Best VPNs
  • Cloud
  • Security
  • more
    • AI
    • TR Premium
    • Working from Home
    • Innovation
    • Best Web Hosting
    • ZDNet Recommends
    • Tonya Hall Show
    • Executive Guides
    • ZDNet Academy
    • See All Topics
    • White Papers
    • Downloads
    • Reviews
    • Galleries
    • Videos
    • TechRepublic Forums
  • Newsletters
  • All Writers
    • Preferences
    • Community
    • Newsletters
    • Log Out
  • Menu
    • Videos
    • Windows 10
    • 5G
    • CES
    • Best VPNs
    • Cloud
    • Security
    • AI
    • TR Premium
    • Working from Home
    • Innovation
    • Best Web Hosting
    • ZDNet Recommends
    • Tonya Hall Show
    • Executive Guides
    • ZDNet Academy
    • See All Topics
    • White Papers
    • Downloads
    • Reviews
    • Galleries
    • Videos
    • TechRepublic Forums
      • Preferences
      • Community
      • Newsletters
      • Log Out
  • us
    • Asia
    • Australia
    • Europe
    • India
    • United Kingdom
    • United States
    • ZDNet around the globe:
    • ZDNet France
    • ZDNet Germany
    • ZDNet Korea
    • ZDNet Japan

How to lock down an insecure wireless network router

11 of 11 NEXT PREV
  • Don't use the default login information

    Don't use the default login information

    It's nearly always possible to find a router's default username and password online, depending on the brand and model. This means you can connect to the network, or tap into the router settings and lock out anyone from the network — even the owners. Worse still, hackers could monitor the traffic going in and out of the router, such as passwords and credit card information.

    Change the default settings at the earliest opportunity with a strong username (if possible) and password.

    Read more:

    • 13 best privacy tools for staying secure
    • 11 ways Apple could spend its $178 billion in cash
    • CES 2015: Meet this year's best tech
    • CES 2015: Meet the worst tech of the show
    • How to reduce your mobile data usage
    Published: February 16, 2015 -- 15:11 GMT (07:11 PST)

    Photo by: ZDNet/CBS Interactive

    Caption by: Zack Whittaker

  • Set the wifi security to WPA2

    Set the wifi security to WPA2

    WPA2 isn't perfect, but it's the best solution outside of the enterprise. It allows you to set a strong password — with letters, numbers, and other characters — that can be near-uncrackable to attackers. The stronger the password, the harder it is for anyone to jump on your wi-fi network.

    Read more:

    • 13 best privacy tools for staying secure
    • 11 ways Apple could spend its $178 billion in cash
    • CES 2015: Meet this year's best tech
    • CES 2015: Meet the worst tech of the show
    • How to reduce your mobile data usage
    Published: February 16, 2015 -- 15:11 GMT (07:11 PST)

    Photo by: ZDNet/CBS Interactive

    Caption by: Zack Whittaker

  • Set a list of 'approved' devices

    Set a list of 'approved' devices

    Every networking device has a MAC address, which uniquely identifies that device. By setting the MAC Address Filter, it means devices with pre-set MAC addresses can join the network — even if a password has been set. This means you can set only your smartphone, notebook, and other devices to the network, and no other device can join — even if they have the correct wifi password.

    Read more:

    • 13 best privacy tools for staying secure
    • 11 ways Apple could spend its $178 billion in cash
    • CES 2015: Meet this year's best tech
    • CES 2015: Meet the worst tech of the show
    • How to reduce your mobile data usage
    Published: February 16, 2015 -- 15:11 GMT (07:11 PST)

    Photo by: ZDNet/CBS Interactive

    Caption by: Zack Whittaker

  • Keep your router's firmware up to date

    Keep your router's firmware up to date

    Updating the software for your router on a regular basis squashes known security bugs and vulnerabilities. These patches not only offer fixes, but also periodically you may get new software features that can enhance your network's security. These firmware patches are generally available from the router manufacturer's website.

    Read more:

    • 13 best privacy tools for staying secure
    • 11 ways Apple could spend its $178 billion in cash
    • CES 2015: Meet this year's best tech
    • CES 2015: Meet the worst tech of the show
    • How to reduce your mobile data usage
    Published: February 16, 2015 -- 15:11 GMT (07:11 PST)

    Photo by: ZDNet/CBS Interactive

    Caption by: Zack Whittaker

  • Disable remote access, UPnP

    Disable remote access, UPnP

    Universal Plug-and-Play (UPnP) has been criticized by the security community for allowing bugs and security flaws that can give unauthorized access to networks. Disabling UPnP can mitigate these attacks.

    Also, if you have remote access to your router, disable this. It's yet another vector in which attackers can try to gain access to your network. Very few people, unless you're an enterprise network administrator, need remote access to networking devices.

    Read more:

    • 13 best privacy tools for staying secure
    • 11 ways Apple could spend its $178 billion in cash
    • CES 2015: Meet this year's best tech
    • CES 2015: Meet the worst tech of the show
    • How to reduce your mobile data usage
    Published: February 16, 2015 -- 15:11 GMT (07:11 PST)

    Photo by: ZDNet/CBS Interactive

    Caption by: Zack Whittaker

  • Disable guest access

    Disable guest access

    Some routers provide guest access. While this function often separates out your home network and your guests who use the temporary access, some hackers have been able to tunnel through the security wall into other parts of the network. If you really want to keep out people who shouldn't be on your network, disable this feature.

    Read more:

    • 13 best privacy tools for staying secure
    • 11 ways Apple could spend its $178 billion in cash
    • CES 2015: Meet this year's best tech
    • CES 2015: Meet the worst tech of the show
    • How to reduce your mobile data usage
    Published: February 16, 2015 -- 15:11 GMT (07:11 PST)

    Photo by: ZDNet/CBS Interactive

    Caption by: Zack Whittaker

  • Turn your network broadcast (SSID) off

    Turn your network broadcast (SSID) off

    Turning off your network's broadcast name (SSID) can make it harder for hackers or others to gain unauthorized access to your network. The SSID is useful if you're roaming between two or more hotspots. But, if you have just one Wi-Fi router, you don't need to roam, and can turn this off without hassle. Just make sure you remember the SSID so you can plug it in manually.

    Read more:

    • 13 best privacy tools for staying secure
    • 11 ways Apple could spend its $178 billion in cash
    • CES 2015: Meet this year's best tech
    • CES 2015: Meet the worst tech of the show
    • How to reduce your mobile data usage

    Published: February 16, 2015 -- 15:11 GMT (07:11 PST)

    Photo by: ZDNet/CBS Interactive

    Caption by: Zack Whittaker

  • Enable router firewall

    Enable router firewall

    Your network router can be the first line of defense to your network. You may not think you can be hit with a flood of traffic or a denial-of-service attack, but it can happen. Of course, having a firewall and other internet security on individual devices is helpful as well, but a router firewall can prevent some things from getting in.

    At very least, turn on the firewall for both IPv4 (and if you have it, IPv6). If you can filter anonymous requests, also enable this feature.

    Read more:

    • 13 best privacy tools for staying secure
    • 11 ways Apple could spend its $178 billion in cash
    • CES 2015: Meet this year's best tech
    • CES 2015: Meet the worst tech of the show
    • How to reduce your mobile data usage
    Published: February 16, 2015 -- 15:11 GMT (07:11 PST)

    Photo by: ZDNet/CBS Interactive

    Caption by: Zack Whittaker

  • Disable Wi-Fi Protected Setup

    Disable Wi-Fi Protected Setup

    Wi-Fi Protected Setup is not secure, despite what you might have heard. A simple way of connecting devices to your network, perhaps, but in reality it's an insecure feature. WPA2 security can be good enough if you're at home. (Enterprises may need a server-based system.) If you have WPA2 or any other password-based security enabled, you may not need to disable Wi-Fi Protected Setup. In many cases, it's one or the other.

    Read more:

    • 13 best privacy tools for staying secure
    • 11 ways Apple could spend its $178 billion in cash
    • CES 2015: Meet this year's best tech
    • CES 2015: Meet the worst tech of the show
    • How to reduce your mobile data usage
    Published: February 16, 2015 -- 15:11 GMT (07:11 PST)

    Photo by: ZDNet/CBS Interactive

    Caption by: Zack Whittaker

  • Switch to shorter 5GHz band to prevent wide broadcast

    Switch to shorter 5GHz band to prevent wide broadcast

    Most modern routers have two frequency band settings: 2.4GHz and 5GHz. The latter band is far shorter-ranged than its predecessor, without any significant compromise in network speed or reliability. If you live in a small home, or a populated neighborhood, you can set your router to 5GHz so it covers your home but no further. That alone makes it more secure against unauthorized access.

    Read more:

    • 13 best privacy tools for staying secure
    • 11 ways Apple could spend its $178 billion in cash
    • CES 2015: Meet this year's best tech
    • CES 2015: Meet the worst tech of the show
    • How to reduce your mobile data usage
    Published: February 16, 2015 -- 15:11 GMT (07:11 PST)

    Photo by: ZDNet/CBS Interactive

    Caption by: Zack Whittaker

  • Switch to OpenDNS for greater protection

    Switch to OpenDNS for greater protection

    OpenDNS offers malware and botnet protection, and Web filtering for home and family users. This helps to prevent hackers or malware getting access to your computers by tricking you into visiting sites that are insecure. You can sign up for OpenDNS on its website. Simply plug in the DNS addresses (there are often two -- one for primary and one for backup) on your router's setup page.

    Read more:

    • 13 best privacy tools for staying secure
    • 11 ways Apple could spend its $178 billion in cash
    • CES 2015: Meet this year's best tech
    • CES 2015: Meet the worst tech of the show
    • How to reduce your mobile data usage
    Published: February 16, 2015 -- 15:11 GMT (07:11 PST)

    Photo by: ZDNet/CBS Interactive

    Caption by: Zack Whittaker

11 of 11 NEXT PREV
Zack Whittaker

By Zack Whittaker | February 16, 2015 -- 15:11 GMT (07:11 PST) | Topic: Networking

  • Don't use the default login information
  • Set the wifi security to WPA2
  • Set a list of 'approved' devices
  • Keep your router's firmware up to date
  • Disable remote access, UPnP
  • Disable guest access
  • Turn your network broadcast (SSID) off
  • Enable router firewall
  • Disable Wi-Fi Protected Setup
  • Switch to shorter 5GHz band to prevent wide broadcast
  • Switch to OpenDNS for greater protection

Your home router is vulnerable to attacks as soon as you take it out of the box. Here are a number of ways you can secure your home wireless network.

Read More Read Less

Switch to OpenDNS for greater protection

OpenDNS offers malware and botnet protection, and Web filtering for home and family users. This helps to prevent hackers or malware getting access to your computers by tricking you into visiting sites that are insecure. You can sign up for OpenDNS on its website. Simply plug in the DNS addresses (there are often two -- one for primary and one for backup) on your router's setup page.

Read more:

  • 13 best privacy tools for staying secure
  • 11 ways Apple could spend its $178 billion in cash
  • CES 2015: Meet this year's best tech
  • CES 2015: Meet the worst tech of the show
  • How to reduce your mobile data usage
Published: February 16, 2015 -- 15:11 GMT (07:11 PST)

Caption by: Zack Whittaker

11 of 11 NEXT PREV

Related Topics:

Cloud Internet of Things Security Data Centers
Zack Whittaker

By Zack Whittaker | February 16, 2015 -- 15:11 GMT (07:11 PST) | Topic: Networking

Show Comments
LOG IN TO COMMENT
  • My Profile
  • Log Out
| Community Guidelines

Join Discussion

Add Your Comment
Add Your Comment

Related Galleries

  • 1 of 3
  • TRENDnet TUC-ET5G USB-C 3.1 to 5GBASE-T Ethernet adapter

    The TRENDnet TUC-ET5G USB-C 3.1 to 5GBASE-T Ethernet adapter is capable of some serious data throughput -- up to 5Gbps over existing Cat5e or better cabling. ...

  • Anker PowerExpand 8-in-1 USB-C hub

    If you need a portable USB-C hub with an Ethernet port, this is for you.

  • Netgear Orbi RBK752 tri-band Gigabit Wi-Fi 6 mesh

    Netgear expands its Gigabit Wi-Fi 6 offering with a new, lower-priced, Orbi RBK752 mesh system.

  • Plugable UD-CA1A USB-C dock

    Universal USB 3.1 Type-C docking station with Power Delivery. 4K-capable HDMI display (4K at 30Hz, 2560x1600 at 60Hz). Provides 60W of power to charge attached system ...

  • OWC Thunderbolt 3 10G Ethernet Adapter

    The OWC Thunderbolt 3 10G Ethernet Adapter capable of connecting to hyper-fast networks and offers amazing output speeds up to 10GBASE-T.

  • Plugable super-fast 2.5Gbps Ethernet adapter (in pictures)

    Need to connect your new laptop to a wired Ethernet network? Plugable has released a new 2.5Gbps Ethernet adapter, compatible with USB-C and USB 3.2 Gen 1. ...

  • Synology DS218j - Unboxing and fitting hard drives

    Adding many terabytes of storage to a network.

ZDNet
Connect with us

© 2021 ZDNET, A RED VENTURES COMPANY. ALL RIGHTS RESERVED. Privacy Policy | Cookie Settings | Advertise | Terms of Use

  • Topics
  • Galleries
  • Videos
  • Sponsored Narratives
  • Do Not Sell My Information
  • About ZDNet
  • Meet The Team
  • All Authors
  • RSS Feeds
  • Site Map
  • Reprint Policy
  • Manage | Log Out
  • Join | Log In
  • Membership
  • Newsletters
  • Site Assistance
  • ZDNet Academy
  • TechRepublic Forums