Good Wi-Fi security is mostly boring settings done once, then reviewed when someone moves out or a device is lost.
Security checklist
- Set a strong Wi-Fi password: change Wi-Fi password.
- Use WPA2-Personal or WPA3-Personal.
- Change the default admin password (different from Wi-Fi): default passwords explained.
- Disable WPS: disable WPS.
- Turn on a guest network for visitors: guest Wi-Fi.
- Update firmware: firmware guide.
- Review connected devices monthly: see and block devices.
Optional hardening
- Disable remote administration from the WAN
- Hide SSID only if you accept the tradeoffs: hide SSID
- Schedule Wi-Fi or use parental controls for kids’ devices
Related: troubleshooting, glossary.