4.5: Your Wi-Fi Router

Your Wi-Fi Router

Your router is the one computer in your house that runs around the clock, sits between every device you own and the internet, and has quite possibly never been looked at since the day it arrived. Five settings on it matter. Everything else on its admin pages you can ignore.

Getting in: the admin page lives at an address printed on the sticker on the bottom of the box (often 192.168.1.1 or 192.168.0.1, or a setup app named after your provider). You’ll also need the admin password, which is on the same sticker unless someone changed it. Remember that detail — it’s about to matter.

Setting 1: The Wi-Fi security mode

In wireless settings you’ll find the encryption mode. This is what scrambles traffic between your devices and the router so someone parked outside can’t read it:

• WPA3 — the current standard. If it’s offered, pick it (or the WPA2/WPA3 transition mode, so older devices can still connect).
• WPA2-AES (sometimes “WPA2-PSK (AES)” or “WPA2-CCMP”) — the previous standard, still solid. Most homes are here, and that’s fine.
• WEP, WPA, or WPA2-TKIP — broken. Crackable in minutes with free tools, and your signal reaches the street. If these are the best your router offers, the router itself is the problem; see Setting 5.

Setting 2: The admin password, which matters more than the Wi-Fi password

Two different passwords live on that box, and people mix them up constantly. The Wi-Fi password decides who can join the network. The admin password decides who can reconfigure the router: change its DNS so your traffic detours through an attacker’s server, open your network to the internet, or quietly add themselves to everything. The Wi-Fi password guards the doors; the admin password guards the locksmith.

Routers ship with admin passwords that are printed on labels, shared across whole product lines, and compiled into public lists. admin/admin is a cliché because it keeps working. Change it: one generated password from your manager (Module 2), stored in the vault under “router.” Ninety seconds, and it’s the most-skipped setting on this page.

Setting 3: Firmware updates

The router is a computer, so Lesson 4.1’s logic applies unchanged: patches fix published holes, and unpatched routers get scanned for in bulk. A compromised home router is valuable real estate, sitting in front of everything you do. In the admin pages, find the firmware section. Newer routers can update automatically — turn that on. Older ones have a “check for update” button; press it now, and put a repeat on the quarterly checklist.

Setting 4: The guest network, your gadget quarantine

Most routers can run a second, separate network. It’s designed for houseguests, but its best use is quarantine. Smart plugs, the TV, the doorbell, the aquarium thermometer: these are historically the worst-patched, shortest-supported computers in any home, and on your main network a compromised one sits right next to your laptop. Put the gadgets on the guest network instead. They still reach the internet, but not your real devices. One checkbox, its own generated password, and the cheapest gadget in your house can no longer reach your filing cabinet.

Setting 5: The end-of-life rule

Routers don’t announce their retirement. The updates just stop, and every flaw found afterward stays open forever. So here’s the rule, and it applies to every networked device you own: a device that no longer receives security updates is an appliance, not a computer. It can keep doing its dumb job, but it can’t be trusted with a job that matters. A router from 2015, stuck on WPA2-TKIP with firmware from 2018, isn’t vintage. It’s an unlocked side door to everything this module secured. Search your model number plus “end of life,” and if support ended years ago, replacement is the security setting.

The pass

Sticker, admin page, new admin password, security mode confirmed WPA2-AES or better, firmware current, gadgets onto the guest network. Fifteen minutes, once. The next page checks whether you could do it blind — the module quiz, played on a mock router admin screen.