Free tools Windows power users keep installed
One-click scans. No signup required.
Secure your smart home in this order: lock down the router, update its software, remove unnecessary remote features, separate guest and high-risk devices, then secure every camera, speaker, appliance and account connected to it. Use WPA3 Personal when the router supports it (WPA2 Personal is the acceptable alternative), create unique administrator and Wi‑Fi passwords, turn on two-factor authentication wherever offered, and keep firmware current. These steps reduce the ways an intruder can reach your home network, camera feeds, cloud accounts or devices.
The router deserves first attention because it is the gateway between the internet and everything inside your home. The Cybersecurity and Infrastructure Security Agency describes a home wireless router as “the primary entrance for cybercriminals to access all of your connected devices.” A secure router does not make an insecure camera or reused password safe, so continue through the device and account checks after completing the network setup.
As an Amazon Associate I earn from qualifying purchases.
1. Secure the router before touching individual devices
Every phone, television, camera, doorbell, thermostat and speaker that uses Wi‑Fi depends on the router’s settings. Menu names vary by manufacturer and internet provider, but the controls are usually in a browser dashboard or a mobile app. Use the router maker’s or ISP’s instructions for the exact address, app and firmware file for your model.
Understand the two passwords
Your router has two separate credentials:
- Wi‑Fi password: the key devices use to join the wireless network.
- Administrator password: the credential that opens router settings, changes network security and can expose every connected device.
Changing one does not change the other. Replace both if they are still the factory defaults. Use long, unique passphrases that are not used on any website or other device. Store them in a password manager or another secure record so you are not tempted to reuse a short password.
#1 Best Overall
- New-Gen WiFi Standard – WiFi 6(802.11ax) standard supporting MU-MIMO and OFDMA technology for better efficiency and throughput.Antenna : External antenna x 4. Processor : Dual-core (4 VPE). Power Supply : AC Input : 110V~240V(50~60Hz), DC Output : 12 V with max. 1.5A current.
- Ultra-fast WiFi Speed – RT-AX1800S supports 1024-QAM for dramatically faster wireless connections
- Increase Capacity and Efficiency – Supporting not only MU-MIMO but also OFDMA technique to efficiently allocate channels, communicate with multiple devices simultaneously
- 5 Gigabit ports – One Gigabit WAN port and four Gigabit LAN ports, 10X faster than 100–Base T Ethernet.
- Commercial-grade Security Anywhere – Protect your home network with AiProtection Classic, powered by Trend Micro. And when away from home, ASUS Instant Guard gives you a one-click secure VPN.
Change the network name and credentials
- Connect to your home network and open the router’s administration app or web interface.
- Find the wireless or Wi‑Fi settings and replace the default network name (SSID) with a unique name that does not reveal your address, apartment number, router model or family name.
- Set a new Wi‑Fi password. Avoid dictionary phrases, phone numbers and information visible from outside your home.
- Open the administrator, system or management-account settings and set a different password from the Wi‑Fi password.
- Save the changes, reconnect your devices with the new Wi‑Fi password, and sign out of the administrator interface.
A unique SSID is not a security control by itself; it simply prevents strangers from learning your router’s default identity and makes it easier to recognize your own network. The password and encryption setting do the actual access control.
Choose the strongest available encryption
In the wireless security menu, select WPA3 Personal when it is available. The Federal Trade Commission calls WPA3 the newer and best encryption option, while noting that WPA2 also scrambles your information and remains an approved choice for consumer networks. Select WPA2 Personal when WPA3 is not supported or when an older household device cannot connect to WPA3.
| Router option | What to do | Why |
|---|---|---|
| WPA3 Personal | Use it when the router and your devices support it. | It is the newer, preferred option identified by the FTC. |
| WPA2 Personal | Use it when WPA3 is unavailable or incompatible with an older device. | It is the other personal encryption option recommended in the FTC consumer guidance. |
| WPA, WEP or an open network | Check for a router software update. If WPA2 or WPA3 still cannot be enabled, plan to replace the router. | These older or absent protections do not meet the current recommendation. |
Do not confuse WPA3 or WPA2 with an encryption mode labeled “Enterprise,” which is designed for managed business authentication. For a typical home, choose the Personal variant. Encryption protects wireless traffic, but it does not replace unique device passwords, updates or account protection.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →2. Update the router and close unnecessary entry points
Router software, sometimes called firmware, fixes vulnerabilities and can add newer security options. Check the manufacturer or ISP support page and the router’s administration screen for the current update method. Some models install updates automatically; others require you to start an update or upload a file intended for that exact model and hardware revision.
Install firmware safely
- Record the router model and hardware revision shown on its label or in the administration interface.
- Back up the configuration if the router offers a backup option, especially if you have custom network names, reservations or parental controls.
- Use the manufacturer’s or ISP’s update check. Do not install firmware intended for a different model or download it from an unofficial mirror.
- Keep the router powered until the update finishes. A restart is normal; repeated resets or an incomplete status message are reasons to contact the ISP or manufacturer.
- Afterward, verify that WPA3 or WPA2 Personal, your passwords and the firewall are still enabled.
Disable remote management unless you truly need it
Remote management allows the router’s administrator page to be reached from outside your home. It can be useful for a managed support arrangement, but it also creates an internet-facing login. Turn it off in the administration, advanced or remote-access section when you do not have a specific need. If you keep it, use a unique administrator password, require encrypted access if the model offers that choice, and follow the ISP’s support instructions.
Turn off WPS when it is not needed
Wi‑Fi Protected Setup (WPS) is a convenience feature for joining devices with a button or short code. If your devices can join with the normal Wi‑Fi password, disable WPS in the wireless or advanced settings. A household that relies on WPS for a particular accessibility or legacy device can leave it on temporarily, then turn it off after that device is configured.
Review UPnP and port-forwarding rules
Universal Plug and Play (UPnP) lets devices request automatic network changes. It can simplify gaming, media streaming or remote access, but unnecessary automatic rules can expose services. Disable UPnP if no device needs it. Also inspect the port-forwarding or virtual-server list and remove rules you no longer recognize or use. Do not delete a rule blindly if it is required for a documented household service; identify the device and purpose first.
Enable the router firewall and sign out
Keep the router’s built-in firewall enabled unless the manufacturer or ISP gives a specific reason to change it. After every administrative session, save the settings and log out rather than leaving the dashboard open on a shared computer. Close the browser or app when finished, particularly if other people use that device.
3. Create separate networks for guests and higher-risk devices
A guest network gives visitors internet access without handing out the password for your primary network. It also limits the impact of a guest’s infected phone or laptop. Enable the guest network in the router’s Wi‑Fi settings, give it a separate name and password, and keep its option for access to your local network disabled if the router provides that control.
Rank #2
- DUAL-BAND WIFI 6 ROUTER: Wi-Fi 6(802.11ax) technology achieves faster speeds, greater capacity and reduced network congestion compared to the previous gen. All WiFi routers require a separate modem. Dual-Band WiFi routers do not support the 6 GHz band.
- AX1800: Enjoy smoother and more stable streaming, gaming, downloading with 1.8 Gbps total bandwidth (up to 1200 Mbps on 5 GHz and up to 574 Mbps on 2.4 GHz). Performance varies by conditions, distance to devices, and obstacles such as walls.
- CONNECT MORE DEVICES: Wi-Fi 6 technology communicates more data to more devices simultaneously using revolutionary OFDMA technology
- EXTENSIVE COVERAGE: Achieve the strong, reliable WiFi coverage with Archer AX1800 as it focuses signal strength to your devices far away using Beamforming technology, 4 high-gain antennas and an advanced front-end module (FEM) chipset
- OUR CYBERSECURITY COMMITMENT: TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement.
Use a guest network for people, not trusted infrastructure
Put visitors’ phones, tablets and temporary laptops on the guest network. Explain that printers, shared storage and local media controls may not be visible from it; that separation is intentional. Change the guest password when it has been widely shared or after a large gathering.
Consider a separate network for cameras
Internet-connected cameras can reveal private rooms, routines and conversations. If your router supports multiple networks, place cameras on a dedicated network or an internet-of-things segment separate from computers and printers. This can limit lateral access if a camera is compromised. Check whether the camera app still works when your phone is on the primary network; some systems require local discovery, while others use a cloud connection. Follow the camera maker’s instructions before changing isolation settings.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Network separation is a risk-reduction measure, not a substitute for a camera’s own password, updates and privacy controls. A camera on a separate network still needs a secure account and careful placement.
4. Inventory every device connected to the network
You cannot secure devices you have forgotten. In the router interface, look for a page labeled Connected devices, Wireless clients, DHCP clients, Network map or a similar term. Record the device name, manufacturer identifier, connection type and, when shown, its IP or MAC address.
Identify unfamiliar entries
- Turn off or disconnect one known device at a time and refresh the router’s client list. The entry that disappears helps you match labels to physical devices.
- Rename entries in the router app if it allows custom labels, using a room and device description such as “hall camera” or “kitchen speaker.”
- Check televisions, streaming boxes, printers, appliances, plugs, hubs, game consoles, watches and older phones that may connect only occasionally.
- For an entry you cannot identify, change the Wi‑Fi password, reconnect known devices, and watch whether the unknown entry returns. If it does, contact the ISP or router maker for help before assuming it is malicious.
Some routers show a generic hostname or a randomized device identifier, so an unfamiliar label is not proof of an intruder. The objective is an accurate inventory and a clear reason for every connection.
5. Secure each smart device and its account
Work through the inventory one device at a time. Use the device app, web account and physical settings together; a secure router cannot correct a default password or an unpatched camera.
Replace default logins
Change every factory username or password that can be changed, including credentials for hubs, cameras, printers, thermostats and network storage. Give each device or service a unique password. Do not reuse the router administrator password, Wi‑Fi password or an email password. If a device has no way to change its default login, check the support documentation before connecting it to the primary network; a separate network may reduce exposure, but replacement can be the safer decision for equipment that cannot be maintained.
Turn on two-factor authentication
Enable two-factor authentication (2FA) on the device’s cloud account, the manufacturer account and the email account used to recover it, whenever those services offer it. An authenticator app or security key is generally preferable to relying on a single password; use the options the service supports and store recovery codes securely. 2FA protects the account even if a password is exposed, but it does not fix an outdated device or an insecure local login.
Install device and app updates
Check for firmware updates in each device’s app or support page, and update the companion mobile app and the phone’s operating system. Turn on automatic updates where the manufacturer provides a trustworthy option. If a product has reached the end of its support period, review what that means: a device that no longer receives security fixes should not be treated as permanently safe simply because it still works.
Rank #3
- Tri-Band WiFi 6E Router - Up to 5400 Mbps WiFi for faster browsing, streaming, gaming and downloading, all at the same time(6 GHz: 2402 Mbps;5 GHz: 2402 Mbps;2.4 GHz: 574 Mbps)
- WiFi 6E Unleashed – The 6 GHz band brings more bandwidth, faster speeds, and near-zero latency; Enables more responsive gaming and video chatting
- Connect More Devices—True Tri-Band and OFDMA technology increase capacity by 4 times to enable simultaneous transmission to more devices
- Unique Design, More RAM, Better Processing - A unique housing design provides optimal heat dissipation, combined with a 1.0 GHz dual-core CPU and 512 MB High-Speed Memory, the AXE75 is designed for long-term reliability and performance.
- EasyMesh-compatible - Extend network range even more by adding EasyMesh-compatible routers, extenders, or wireless powerline adapters for a seamless, whole-home connection. Eliminate dead zones, drops, and lag as you move across your home.
Use built-in security controls
Enable screen locks, encrypted storage, automatic locking and account alerts on phones, tablets and computers that control the home. Review permissions in every companion app. Remove access to contacts, microphones, location or cameras when the feature does not require it. Delete old users, temporary installers and shared accounts, and revoke tokens for phones or tablets that have been lost or sold.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
6. Protect home security cameras and doorbells
Cameras deserve an additional privacy review because their compromise can expose live video, recordings, household schedules and the people in private spaces.
Choose placement before convenience
Do not point indoor cameras at bedrooms, bathrooms, changing areas or other places where people reasonably expect privacy. Aim outdoor cameras at the property you need to monitor and avoid capturing neighbors’ private areas when possible. Tell household members and visitors where cameras are located and when recording is active.
Review remote viewing and recording
Remote viewing is convenient, but enabling it increases the number of accounts and connections involved. Think carefully before enabling remote access for an indoor camera. If you do not need viewing while away, turn the feature off. Review cloud recording retention, shared viewers, download permissions and notification destinations. Remove former household members and installers from the sharing list.
Harden the camera account and device
- Use a unique camera password and 2FA on the associated cloud account.
- Install camera firmware and mobile-app updates promptly.
- Disable unused microphones, speakers, integrations and voice controls.
- Use a separate camera network when your router supports practical isolation.
- Check the camera’s privacy indicator, shutter or power control and use it when recording is not appropriate.
If a camera does not provide security updates, account controls or a way to remove old users, treat that limitation as a reason to replace it rather than relying only on router settings.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →7. Review cloud accounts, email and recovery paths
Smart-home security often fails at the account layer. A compromised email account can let someone reset the passwords for cameras, locks, alarms or hubs. Use a unique password and 2FA for the email account that receives security alerts and password-reset messages.
Open each manufacturer account and review sign-in history, active sessions, authorized apps and household members. Sign out devices you no longer own. Remove third-party integrations that are not in use, especially services that can unlock doors, disarm alarms, view cameras or change thermostats. Keep recovery phone numbers and email addresses current, and store one-time recovery codes somewhere an intruder cannot reach through the same account.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.8. Maintain the setup instead of treating it as a one-time fix
Security changes as devices, residents and software change. Add a recurring check to your household routine:
- After installing a device: change its default credentials, update firmware, enable 2FA and record its purpose and support status.
- When someone moves in or out: add or remove users, rotate shared Wi‑Fi and guest passwords when appropriate, and revoke old app sessions.
- After a router update or reset: confirm WPA3 or WPA2 Personal, the firewall, guest-network isolation and disabled remote features.
- Periodically: inspect the connected-device list, remove equipment you no longer own and review camera viewers and cloud integrations.
- When a product stops receiving updates: check the manufacturer’s support policy and plan a replacement or isolation strategy.
Keep a simple inventory with the device name, room, account owner, update status and date of the last password change. Avoid writing passwords in that inventory; store them in a password manager instead.
Rank #4
- Dual-band Wi-Fi with 5 GHz speeds up to 867 Mbps and 2.4 GHz speeds up to 300 Mbps, delivering 1200 Mbps of total bandwidth¹. Dual-band routers do not support 6 GHz. Performance varies by conditions, distance to devices, and obstacles such as walls.
- Covers up to 1,000 sq. ft. with four external antennas for stable wireless connections and optimal coverage.
- Supports IGMP Proxy/Snooping, Bridge and Tag VLAN to optimize IPTV streaming
- Access Point Mode - Supports AP Mode to transform your wired connection into wireless network, an ideal wireless router for home
- Advanced Security with WPA3 - The latest Wi-Fi security protocol, WPA3, brings new capabilities to improve cybersecurity in personal networks
9. Know when the router should be replaced
Do not replace a working router merely because a newer model exists. First check for a software update and confirm which security modes the current device supports. If it offers WPA3 Personal, use it. If it offers WPA2 Personal, that is the alternative identified by the FTC. If it offers only outdated WPA or WEP options, or no personal encryption option at all, update it and then consider replacement if WPA2 or WPA3 remains unavailable.
When you reach that threshold, look for a home Wi‑Fi router with WPA3 and verify the exact model’s support documentation before buying. Compare the factors that affect security rather than relying on coverage claims or a brand name:
| Criterion | What to verify |
|---|---|
| Encryption | WPA3 Personal support, with WPA2 Personal available for compatible older devices. |
| Update support | A documented method for firmware updates and a clear support period from the manufacturer or ISP. |
| Administrative controls | Ability to change the administrator password, disable remote management, turn off WPS and UPnP, and enable the firewall. |
| Network separation | Guest networking and, if needed, isolation suitable for cameras or other smart-home devices. |
| Recovery process | Clear instructions for backup, factory reset and restoring settings without leaving default credentials active. |
Before disposing of the old router, factory-reset it according to the manufacturer’s instructions and remove any saved account or ISP information. If it is leased, return it through the ISP’s process.
10. Troubleshoot common security changes
A device will not reconnect after changing the Wi‑Fi password
Forget the old network on the device, restart it and join the new SSID with the new password. Check whether the device supports WPA3; if not, use WPA2 Personal or the router’s documented mixed mode. Do not weaken the entire network permanently for one unsupported device without considering a separate network or replacement.
A camera works on Wi‑Fi but not from the app
Confirm that the camera has internet access, the phone is signed in to the correct account and the camera’s cloud service is operational. If the camera is on an isolated network, check whether local discovery is required and whether the router offers a controlled way to permit it. Avoid enabling broad UPnP or remote management just to solve an app connection problem.
The router’s client list shows an unknown device
Match the entry by disconnecting known devices, checking the manufacturer identifier and reviewing devices that connect intermittently. Change the Wi‑Fi password if you suspect unauthorized access, reconnect only equipment you recognize, and then contact the ISP or router maker if the entry returns without an explanation.
A firmware update fails
Verify the exact model and hardware revision, use the manufacturer’s approved update method, keep power connected and follow the recovery instructions. Do not repeatedly upload firmware from an unrelated model. If the router becomes unstable, contact the ISP or manufacturer before performing a factory reset, because a reset can erase the settings needed for your connection.
11. Secure devices when a home changes hands
If you are selling or giving away a device
Remove personal recordings, accounts, saved Wi‑Fi details and administrative users. Revoke cloud access and integrations, then perform the manufacturer’s factory reset. For a router, erase custom network names, passwords and ISP credentials before returning or transferring it. Provide the recipient with the model and support information, not your old passwords.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteIf you are buying a device with a previous owner
Do not rely on the seller’s claim that a reset was completed. Reset the device yourself, inspect privacy settings and permissions, install available firmware, create a new account and enable 2FA. Check the manufacturer’s support policy; a second-hand device that no longer receives security updates may be unsuitable for cameras, locks or other sensitive functions.
Quick Recap
12. A practical completion checklist
- The router administrator password and Wi‑Fi password are different, unique and no longer factory defaults.
- The network uses WPA3 Personal or WPA2 Personal.
- The router firmware is current according to the manufacturer or ISP.
- The firewall is enabled, and remote management, WPS and UPnP are off unless a documented need remains.
- A guest network is available for visitors, with local-network access blocked when supported.
- Cameras and other high-risk devices are separated from computers and printers when practical.
- Every connected device is identified, updated and protected by a unique login.
- Two-factor authentication is enabled for device, cloud and recovery accounts where offered.
- Camera placement, remote viewing, recordings and shared users have been reviewed for privacy.
- Old users, integrations, sessions and devices have been removed.
- You know the replacement threshold: update a router limited to outdated encryption, then replace it if WPA2 or WPA3 remains unavailable.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
