(This article was originally published on December 6, 2018 and has been updated.)

Your router simplifies network management, but its convenience often compromises security. Recent vulnerabilities in Universal Plug and Play (UPnP), a protocol enabling inter-device communication, have been exploited to compromise countless routers. Your router may be susceptible to similar threats.

Older models are particularly vulnerable due to a lack of security patches. Routers from the early 2000s should be replaced. However, these steps will enhance your home network's security in the interim.

Prioritize Firmware Updates and Factory Resets

Unlike self-updating computers, routers require manual firmware updates. This is crucial for security. Begin by resetting your router to factory settings (to mitigate potential compromises) and installing the latest firmware.

The process varies by router. Access your router's web interface by entering its IP address (e.g., 192.168.0.1, 192.168.1.1, or 10.0.0.1) in your browser's address bar. Consult your router's manual or resources like TechSpot's IP address list if needed. Use your login credentials (found on the router or in its manual; RouterPasswords.com may also help).

Within the administrative settings:

• Update Firmware: This might involve a single button click or manual upload of the latest firmware from your router's support page. Note the firmware's release date; outdated firmware (several years old) indicates a lack of manufacturer support, suggesting an upgrade is necessary.
• Factory Reset: Back up your settings (if available) before restoring factory defaults. This removes all settings, eliminating any existing compromises. Your backup can assist in restoring forgotten settings.
• Change Password: The factory reset reverts to the default password, which is easily accessible online. Change the router's login password (distinct from the Wi-Fi password) within the administrative settings. Create a strong, memorable password and store it securely (e.g., using a password manager).

Enable automatic updates if available.

Implement Robust Password Protection

After updating the firmware, secure your Wi-Fi network.

In the router's Wireless settings, assign a unique network name (SSID) and set the password type to WPA2 or WPA3 (avoid insecure WEP). Use a strong password.

Do not hide your network's SSID. This is ineffective and can even reduce security.

Disable WPS, UPnP, and Remote Administration

Disable these features for enhanced security:

• Wi-Fi Protected Setup (WPS): This button-based connection method is insecure and should be disabled.
• Universal Plug and Play (UPnP): While useful, UPnP has significant security vulnerabilities. Disable it unless absolutely necessary and you're certain your router receives regular updates. Manually forward ports for applications that malfunction after disabling UPnP.
• Remote Administration: Disabling remote access to your router's settings enhances security.

While these steps significantly improve security, a modern router with up-to-date firmware is paramount. Consider upgrading if your router is several years old. Mesh Wi-Fi systems like Eero or Google Wifi offer automatic updates, improved range, and convenient mobile management.

The above is the detailed content of 6 router settings you should change right now. For more information, please follow other related articles on the PHP Chinese website!