9 tips: How to secure your home WiFi network

#1. KNOW YOUR WIFI WPA LEVEL: The original WiFi Protected Access (WPA) standard was released nearly 20 years ago (2003), replacing the previous Wired Equivalent Privacy (WEP) security algorithm; which in turn was replaced by WPA2 in 2004. It took some time to update this, when the Wi-Fi Alliance adopted WPA3 in 2018. To check your WiFi access type on iOS: WiFi tab (upper right) > Open Network Preferences > Advanced > WiFi tab (will reveal WPA type of all WiFi routers you’ve connected to). On Windows: Click WiFi Connection icon in the taskbar> Properties> Scroll down>WiFi details under Properties>Security Type. This way, you will also know the WPA levels of different WiFi routers you've used.

#2. UPGRADE TO WPA3: Many WIFI routers are still set on WPS2. Do yourself a favour by switch to WPA3 Security Protocol on your Router: Click Advanced tab > Wireless section> “Wireless Settings”>Pick WPA3 Personal as your security>Select the WPA3-SAE option in the “Version” setting.

#3. CHANGE YOUR ROUTER'S DEFAULT LOGIN CREDENTIALS: Absolutely critical, this. If you haven’t do it yet, make sure you do it soonest. The default log-in credentials is usually “admin”, with password like “admin”. This is fraught with danger. Not doing so would allow anyone to directly access your router settings. So go ahead and change the admin name and password for your router: > Enter your router's IP address into your web browser>Log in (default username and password (both “admin”)>Settings> Select Change Router Password (or a similar option)>Enter new password> Save the new settings.

#4. CREATE HOME GUEST WIFI NETWORK: You’ve heard it often, or you must have asked for it many times: “Can I get the WIFI password?”. For your home network, why not create a separate guest network for visitors? Here’s a simple reason why: It’s just a basic safety protocol. Your guests’ devices or anything they download while connected to your network could be infected (malware or viruses) that target your network without them even knowing it.

#5. CREATE A STRONG WIFI PASSWORD: It goes without saying. OK, I'm not saying you do it NOW. But do find time to do it. Also, make it a practice to change it regularly — (3 to 6 months) as IT security pros recommend. An easy-to-remember WIFI password (hint: "123456789") makes it predictable and easy for others to figure it out. Most IT professionals recommend changing WIFI password periodically — or when you think your network security may have been compromised.

#6. TURN ON THE FIREWALL AND WIFI ENCRYPTION: Besides tweaking and updating the WPA2 setting to WPA3, make sure you turn the firewall on. Most routers come with a “firewall” to curb hacking from outside. Most also comeWIFI encryption (prevents eavesdroppers on the data that's sent back and forth between your router and connected devices). While they typically set on “active” by default, just cross-check to make sure they're on. If for some reason, they’re off, make sure you flip it to the “ON” tab. Your network security will thank you.

#7. KEEP YOUR ROUTER | DEVICES UP TO DATE: Whether you’re using Android or iOS, make sure you’re updated with the latest OS or app — they usually pop up when you get online. These pop-ups can seem annoying (which happens when companies are made aware of potential or exposed security vulnerabilities) but the updates serve a good purpose, i.e. minimise or eliminate the risk. For your router, set it to automatically update in the admin settings. Also, do periodic checks to make sure your router is up to date. Doing so helps you get the best protection against known malware and hacking attempts.

#8. DISABLE REMOTE ROUTER ACCESS: Anyone not directly connected to your WIFI network can access the router settings via remote router access. There’s no reason to enable remote router access, unless you have an absolute need to access your home router while away, or to check|change the settings of a child's connected device. Make sure you disable remote access under the router's admin settings, as a disabled remote router access may not be the default setting: Open router's web interface > Remote Access > Remote Administration|Remote Management > "Disable”. 

9. CHECK CONNECTED DEVICES: It's a good practice to check the devices hooked up to your network. It’s even better if you know what they are. Any device that looks suspicious should be kicked out (disconnected), then change your WIFI password (#3, #4 & #5). There’s an admin challenge here as after the password change, you must reconnect all your previously connected devices (perhaps including some iOT devices, like a robot vacuum cleaner). The upside: any unauthorised user|device on your network will be thrown out.