Secure the router itself

Change the router's administrator password from its factory default. Use a password that is different from your Wi-Fi password, and disable remote administration unless you have a clear need and a safe way to restrict it. Keep router firmware updated through the manufacturer's official process.

Check the manufacturer’s support status. A router that no longer receives security updates may need replacement, especially if it is the gateway for work devices or cameras. Save a copy of important network settings before making major changes.

Use current Wi-Fi protection

Choose WPA3-Personal when all important devices support it. Otherwise, WPA2 with AES is generally preferable to obsolete WEP or WPA modes. Avoid mixed legacy settings unless an older device requires them, and replace or isolate devices that cannot use modern protection.

Use a long, unique Wi-Fi passphrase. Disable Wi-Fi Protected Setup (WPS) if you do not need it, and change the default network name if it exposes the router model or owner identity.

Separate guests and connected devices

Use a guest network for visitors and smart devices when the router actually isolates that network from your computers and local devices. For cameras, an isolated VLAN or network with carefully limited access can provide better control. Confirm that the NVR can still reach cameras and that only the required management devices can administer them.

Keep work laptops, backups, and personal accounts on trusted devices. A smart-device or guest network is not a substitute for updating the devices or changing default credentials.

Review internet-facing features

Turn off UPnP, port forwarding, and exposed remote-management services unless you understand why they are needed. These features can make devices reachable from outside the home. Prefer a well-maintained VPN for remote access, or the vendor's documented secure service, and review its account protections and data practices.

Changing DNS providers can affect privacy or filtering, but DNS alone does not encrypt all internet traffic or make a compromised device safe. Keep security updates enabled on computers, phones, and browsers too.

Check the network after changes

Review connected-device lists and remove devices you no longer recognize after checking whether they are a printer, camera, or other household device. Test that guests cannot reach private devices if isolation is advertised. Recheck settings after router resets or firmware updates, because defaults may change.

If a setting is unclear, consult the router vendor's manual rather than enabling random options. A stable, documented configuration is easier to secure and troubleshoot.