Skip to content

Home Network Security Checklist

Intro

How you can more securely connect your home network devices to the internet, including configuring your router and setting up a VPN.

Checklist

Essential Activities

  • Change Default Router Passwords
    Priority: Essential
    Change the factory-set passwords for your router and all smart devices (TVs, cameras, speakers) immediately. Default router passwords are publicly available, meaning anyone within proximity could potentially connect. Improve Your Router Security -Consumer Reports

  • Use Strong WiFi Encryption
    Priority: Essential
    Use WPA3 if supported by your device; otherwise, use WPA2-AES. If your router cannot use WPA2-AES, it should be replaced.; Avoid WEP or WPA (TKIP) as they are easily cracked. If your router no longer gets updates, it’s too risky to keep using.

  • Keep Router Firmware Up-to-date
    Priority: Essential
    Regularly check for and install router firmware updates to patch security vulnerabilities and maintain standards compliance.

  • Use a VPN
    Priority: Recommended
    Use a reputable, paid-for VPN. This can help protect sites you visit from logging your real IP, reduce the amount of data your ISP can collect, and increase protection on public WiFi.

  • Implement a Network-Wide VPN
    Priority: Recommended
    If you configure your VPN on your router, firewall, or home server, then traffic from all devices will be encrypted and routed through it, without needing individual VPN apps.

  • Whitelist MAC Addresses
    Priority: Recommended
    You can whitelist MAC addresses in your router settings, disallowing any unknown devices to immediately connect to your network, even if they know your credentials.

  • Change Wi-Fi Network Name (SSID)
    Priority: Recommended
    Change the name of your Wi-Fi network (SSID) so that it doesn't include any personal or location identifying information. Don't include your name, address, apartment number, or router brand/model.

Advanced Activities

  • Use a Guest Network for Guests and IoT Devices
    Priority: Advanced
    Do not grant access to your primary WiFi network to visitors or IoT devices (like light switches, door-bells, internet security cameras, etc.), as it enables them to interact with other devices on the network.

  • Don't Have Open Ports
    Priority: Advanced
    Close any open ports on your router that are not needed. Open ports provide an easy entrance for hackers.

  • Disable Cloud-Based Management
    Priority: Advanced
    Treat your router's admin panel with the utmost care, as considerable damage can be caused if an attacker is able to gain access.