{"id":80179,"date":"2018-06-22T12:42:12","date_gmt":"2018-06-22T19:42:12","guid":{"rendered":"https:\/\/www.intego.com\/mac-security-blog\/?p=80179"},"modified":"2018-07-20T13:34:39","modified_gmt":"2018-07-20T20:34:39","slug":"how-to-secure-your-home-router","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/how-to-secure-your-home-router\/","title":{"rendered":"How to Secure Your Home Router"},"content":{"rendered":"

\"How<\/a><\/p>\n

A\u00a0home router is your gateway to the Internet. When configured correctly to be secure, your home router can act as a\u00a0first line of defense against network intruders. Configured incorrectly, however, and your\u00a0router\u00a0can be an open door allowing hackers and cyber-criminals to infiltrate your network and potentially access your computers and files.<\/p>\n

Configuring a home router isn’t complicated, but many people don’t make needed changes to the default settings when they set up the device\u2014and you might be one of them, but it’s okay,\u00a0we’re here to help! Have you changed the default settings in your home router? When was the last time you checked your router\u00a0settings to be sure it’s as secure as can be?\u00a0Follow along below, and we’ll show you the main settings you can change right now to ensure\u00a0your home router is secure\u00a0and\u00a0protects you from hackers.<\/p>\n

How to Access Router Settings<\/h3>\n

For most routers, you access settings by way of\u00a0a Web browser. One notable execution is Apple’s Wi-Fi devices\u2014configured using the AirPort Utility app\u2014but in most cases, the IP address for the router is 192.168.1.1. Type this IP address in your Web browser and it will load a configuration page.<\/p>\n

If this isn’t the right address, you can find the correct address on a Mac by holding down the Option key and clicking the Wi-Fi menu in your menu bar. You’ll see a lot of information, including your router’s IP address.<\/p>\n

\"\"<\/p>\n

Another way to find this is to open System Preferences<\/strong>\u00a0>\u00a0Network<\/strong>\u00a0>\u00a0Advanced<\/strong>. Click the TCP\/IP tab, and you’ll see your router’s IP address in the data presented.<\/p>\n

\"\"<\/p>\n

Change the Administrator’s Password<\/h3>\n

In order to be able to configure your new router, these devices are generally shipped with a default administrator’s password. Often the default username is admin<\/em>\u00a0and the default password is admin<\/em>. You’ll find your router’s default\u00a0username and password\u00a0in your router’s documentation, and\u00a0if you don’t change it, anyone who can access the router will be able to change its settings.<\/p>\n

Don’t think that hackers don’t know what these passwords are; there are plenty of websites (like this one<\/a>) that provide a database of default passwords. This is great if you have a new router and can’t find the password, but it’s also great for hackers if they want to hack\u00a0into your home router.<\/p>\n

The first thing you should do when setting up your home router is change the default password. Don’t think that simply creating a new user with a secure password is sufficient enough to secure your home router; instead, you must change the default administrator’s password, because that account will always be able to access the router. And, of course, make sure it’s a secure password! (RELATED: How to Create Secure Passwords.)<\/strong><\/a><\/p>\n

Change the Wi-Fi Password<\/h3>\n

There’s one password to access a\u00a0router’s settings, and there’s another password to access its Wi-Fi network. Some routers will have a simple default password\u2014similar to the administrator’s password mentioned\u00a0above\u2014and others may not set a password at all. As above, create a secure password, but one that is easy to remember; you may need to give it to friends, family, or other visitors, so they can share your network.<\/p>\n

If your router offers a guest network feature, turn that on, and set a password. When visitors want to use your Wi-Fi, have them use that network, rather than the one you use. It prevents them from accessing any of your devices that use the main network.<\/p>\n

Change the SSID<\/h3>\n

The SSID is the name of your router’s Wi-Fi network that is broadcast. You’ll see this when you go to connect to a new network, such as in the iPhone’s Wi-Fi settings.<\/p>\n

\"\"<\/p>\n

There are a number of reasons why it’s a good idea to change this, which\u00a0we discuss in great\u00a0detail on a recent episode of the Intego Mac Podcast<\/a>.<\/p>\n

Don’t choose a name that identifies you, and don’t include any personally identifiable information.\u00a0If you use such information and live in an apartment, for example, people will know whose network it is, and this may tempt them to\u00a0try and\u00a0access it.<\/p>\n

Update Firmware<\/h3>\n

Every computing device has firmware<\/em>, or software that is stored on a chip that is used to run the device. And given the security needs of a router, it’s likely that this is updated from time to time. Check your router’s settings and see if there are any firmware updates. If you’re not sure, check the manufacturer’s website. Some routers allow you to turn on automatic updates; if possible, do this, so you don’t have to worry about checking for new firmware. Unlike on a computer or mobile device, you won’t get any notifications that new firmware is available, unless you go to the router’s settings.<\/p>\n

Turn Off UPnP<\/h3>\n

UPnP, or universal plug and play, is a feature most routers have that allow apps or devices to send and receive traffic through routers. It may make it easier for you to use certain devices, such as video game consoles and media servers, which may\u00a0need to receive communications from outside your network, but this\u00a0can be a security risk. If you need this feature, you probably know why; if not, it’s a good idea to turn this off.<\/p>\n

Turn Off Wi-Fi if You’re Not Using It<\/h3>\n

Some people may use a router to connect to the Internet, but then use another device to provide Wi-Fi in their homes. In my case, for instance, because of the location of my router and the size of my home, the router’s Wi-Fi couldn’t reach far enough. So I bought a NetGear Orbi<\/a> mesh Wi-Fi system, which allows me to have coverage in every room of my house. Since I don’t need the Wi-Fi on my router, I’ve turned it off.\u00a0Leaving it on would mean that there is a potential for someone to discover my\u00a0network and access it. And turning it off reduces potential interference for the Orbi.<\/p>\n

Also, some routers provide two Wi-Fi networks: one using the older, slower 2.4 GHz spectrum, and another using 5 GHz. Depending on your devices, you may not need both of these turned on. Check to see whether you can turn off one of these networks; doing so is\u00a0more secure, and it could speed up your network throughput a bit.<\/p>\n

Going Further…<\/h3>\n

There are more settings on your router, such as MAC address whitelisting, which lets you tell your router to only allow certain devices to connect to it;\u00a0for instance, USB file sharing, which lets you connect a hard drive to the router, but which could allow hackers to access files, and more. Have a look through the settings, then check your manual, to find any features that are enabled that you don’t need to use, and turn them off.<\/p>\n

Further Reading:<\/strong><\/p>\n