13 Tips for your Router

Update the Firmware 

You just unpacked your router and plugged it in, meaning it’s running the firmware flashed to the device during manufacturing. It’s likely not painfully out of date, but it’s a good idea to immediately update the firmware upon booting the router up for the first time and before messing around with any other settings. 

Not only does updating the firmware ensure any bug fixes and security patches are applied, but it also ensures your router’s interface is updated and matches the manufacturer’s help documents, should you need to reference them. 

Enable Automatic Updates 

Some people like to keep automatic updates turned off because they carefully manage their home network in a very hands-on fashion. If you’re the kind of person that pores over firmware release notes and frequents network forums to see what issues other hobby network system administrators have with various firmware updates, then this isn’t the tip for you. 

But most people fall into the exact opposite camp, which is the camp of never updating the firmware on their router and running it for years with outdated firmware and potential security vulnerabilities. 

Some newer routers, especially mesh systems like those from Eero and Nest, automatically update themselves (which is one of the reasons we recommend people give their parents and other relatives mesh Wi-Fi). But if yours doesn’t, be sure to turn it on so you don’t have to worry about checking for updates in the future. 

If your router doesn’t support automatic updates, it’s useful to put a reminder on your calendar to check for firmware updates every few months. 

Update the Administrator Password 

The administrator password is a frequently overlooked aspect of router security. Many models still have common default administrator login and password combinations you can easily guess or look up on the internet. Newer models might have pseudo-random passwords. In both cases, the password is almost always printed directly on the label attached to the router. 

As such, it’s best to change the default password to something new to ensure access to your router isn’t as simple as trying a common combination or just reading the login right off the router body. 

Enable the Best Wi-Fi Encryption 

Modern Wi-Fi devices are backward compatible with older Wi-Fi encryption standards, but that doesn’t mean you should keep using them just because you used them in the past. 

The best Wi-Fi encryption to use is WPA3, but if you have devices on your network that you can’t easily replace or switch to Ethernet, then we recommend you use WPA2 AES. Unlike earlier Wi-Fi encryption standards that are now deprecated, WPA2 AES is still considered secure. 

Change the Default Wi-Fi Password 

Most routers now come with a pseudo-random password set as the default. Like the admin login and password, that password is usually on a sticker attached to the router. 

While it’s better than the simplistic default administrator passwords all too many routers still use, your router’s preset Wi-Fi password is not as random or secure as you might think. 

Switching it out immediately with a better and longer Wi-Fi password distances you from the security problems inherent with pre-generated passwords and, more importantly, the password printed right there on the device it is meant to secure. 

Change the Default SSID 

While many Wi-Fi routers, primarily mesh routers, will prompt you to enter an SSID right from the start, plenty of routers on the market come with a default option. 

It’s not the end of the world to use the default SSID, but the default SSID almost always telegraphs information about your router. Changing your SSID won’t deter a competent and determined attacker from gleaning information about your hardware, but switching from a preset default to something else never hurts. As always, avoid any identifying information. Switching from a default SSID of “Netgear98” to “Apartment2A” is a security downgrade. 

Before diving into specific settings, it’s important to consider starting with a fresh network. It may be tempting to simply copy your old router’s settings, but it’s worth considering the benefits of starting from scratch. 

Reconnecting all your devices like Wi-Fi cameras and smart home equipment can be a hassle. And if you’re the go-to tech support person in your household, you may want to avoid the chaos of everyone asking why their devices aren’t working. 

If you don’t put your ISP-supplied router into bridge mode, it can lead to lag, connection instability, and other issues caused by double Network Address Translation (NAT). Some devices will warn you of a double NAT problem (e.g. Xbox will display “Double NAT Detected” in the network menu), but most won’t and you’ll be left wondering why some services aren’t working properly. 

Secondly, you need to turn off the Wi-Fi. From a security standpoint, starting with a completely fresh network is the best way to ensure that your Wi-Fi network is secure and only authorized users have access. It may be a hassle, but there are compelling reasons to start with a new Wi-Fi network name and password. 

Configure Your ISP’s Modem/Router Combo 

Most of the configuration will be done on your new Wi-Fi router, but you may also need to adjust settings on your ISP-supplied equipment. If you previously used your ISP’s modem/Wi-Fi router combo, you’ll need to make two changes for a smooth experience with your new router. First, put your ISP’s combo unit into bridge mode to stop it from functioning as a router and pass the internet connection to your new Wi-Fi router.