Why a home Wi-Fi audit matters

Most people set up a home router once and never revisit its settings. That's understandable, but routers are full computers running software, and that software develops known weaknesses over time. A network with outdated firmware, a default admin password, and a handful of forgotten smart devices is a genuinely easier target than one that has been reviewed and tightened up.

This checklist walks through the settings that matter most, in plain language, so you do not need to be a network professional to follow it. If you want context on how home network risks compare to what you face outside the house, see our guide to public Wi-Fi risks for a grounded comparison.

Work through each group in order. Most steps take only a minute or two once you are inside your router's admin panel.

What you will need before you start

Before opening any settings, gather a few things. You need the local IP address for your router (check the label on the device itself, or look in your phone's Wi-Fi settings under 'gateway'), the current admin username and password (also on the router label if you have never changed them), and a secure place to save new credentials once you create them.

Required

Web browser

Access your router's admin panel by typing its local IP address into the address bar.

Required

Password manager

Generate and store strong, unique passwords for both the router admin account and your Wi-Fi network.

Required

Router manufacturer's support page

Look up the latest firmware version for your specific router model.

Optional

Network scanner app

Get a plain-language list of every device connected to your network, useful when the router's own interface is unclear.

If your router's admin interface feels confusing, the manufacturer's support page usually has a model-specific guide. Avoid using general how-to videos that may show settings from a different model or an outdated software version.

Working through the checklist

The checklist below groups tasks by area. Router admin access comes first because changing that password protects everything else you do. Firmware updates follow, since patching the software closes the gaps that malicious actors look for. Password and encryption settings then govern who can join your network at all.

Default credentials are widely known

Router manufacturers often ship every unit of a given model with the same default admin username and password. These combinations are publicly listed online. If you have never changed yours, anyone on your network can access your router settings. Change the admin password before doing anything else.

WEP and original WPA are insecure

WEP encryption can be cracked in minutes with freely available tools, and original WPA has similar weaknesses. If your router only supports these older standards, consider replacing the hardware. WPA2 with AES cipher is the minimum acceptable setting today.

The connected-devices section is worth taking seriously. A device you no longer use but left connected is still a potential entry point. Smart-home hardware (cameras, voice assistants, smart plugs) is particularly worth moving to a guest network, because these devices often receive software updates less frequently than phones or computers. Our guide for parents on protecting kids online covers additional router-level controls, such as content filtering, that complement the steps here.

Router admin access

Log in to your router's admin panel (typically via 192.168.1.1 or 192.168.0.1 in a browser) to confirm you can access settings. Must
Change the default admin username and password to something unique and not guessable; store it in a password manager. Must
Disable remote management if your router offers it, so the admin panel is only reachable from inside your home. Must
Set your session to log out automatically after a period of inactivity if that option is available. Should

Firmware and software

Check your router's current firmware version and compare it with the latest available on the manufacturer's support page. Must
Install any available firmware update, as manufacturers release these to patch known security vulnerabilities. Must
Enable automatic firmware updates if your router supports them, so future patches apply without manual effort. Should

Wi-Fi password and encryption

Verify your Wi-Fi network uses WPA3 or WPA2 encryption; switch away from WEP or plain WPA immediately if either is active. Must
Replace any Wi-Fi password shorter than 12 characters or made up of common words with a longer, random passphrase. Must
Rename your network (SSID) away from any default name that reveals the router brand or model. Should
Disable WPS (Wi-Fi Protected Setup) in your router settings, as this feature has documented security weaknesses. Must

Connected devices

Open the connected-devices list in your router's admin panel and write down every device shown. Must
Identify each device by its name or MAC address and remove or block anything you do not recognize. Must
Disconnect any devices that are no longer in use, such as old phones, tablets, or smart-home gadgets you have replaced. Should

Network segmentation

Enable your router's guest network feature and move smart-home devices (TVs, cameras, thermostats) onto it, separate from your computers and phones. Should
Set a strong, distinct password for the guest network rather than sharing your main network password with visitors. Should
Confirm guest network clients cannot see or communicate with devices on your main network (this setting is usually labeled 'client isolation'). Nice to have

Final checks

Write down or save all updated credentials securely so you are not locked out of your own router in the future. Must
Schedule a reminder to repeat this audit every six to twelve months, or after a new device joins the household. Nice to have

Factory reset wipes all custom settings

If you reset your router to factory defaults at any point during this audit, all custom settings, including your Wi-Fi name, passwords, and any port rules, will be erased. Write down your current settings before pressing the reset button. You will need to reconfigure everything from scratch afterward.

After the audit

Once you have worked through every item, your network is in a meaningfully stronger position than when you started. A few habits help maintain that over time. Update your router firmware whenever a new version appears. Review connected devices after any houseguest visits or when you add a new device to the home. Change your Wi-Fi password if you have shared it widely and are not sure who still has it saved.

If coverage gaps have sent you chasing a better router placement, the article on home Wi-Fi dead zones covers how placement and interference affect signal, which can inform decisions about where to position your router. And if you are preparing for travel, the device prep checklist before travel picks up where this one leaves off by covering what to configure on your devices before you leave home.