For better security of the Wifi network, let’s see what router settings can be configured
Having an open wireless network can be a security risk as it allows anyone nearby (for example, a neighbor) to access the network and potentially even spy on our connection.For this reason we must always check if the modem or router in use is really secure, in order to avoid that someone can connect to our devicesscrounge up the internet connection and also control what we do on the internet.
Below we will show you how to check if the Wi-Fi network you use at home is really secure and configured properly, checking the important settings for better Wi-Fi security, activating the recommended items or modifying the poorly configured ones.
READ ALSO: Main options on the Wifi Router: access and configuration via web
First of all, each router model has its own set of options and a configuration panel which may be different depending on the brand of manufacturer or supplier.
In some cases, when the router is supplied by the internet provider (for example by Vodafone) it may also be that the settings are not accessible. When possible, therefore the router settings to improve wifi network securityto have even stronger network protection.
If we have never done it before, I refer you to another article to find the instructions that lead us there enter the router settings.
1) Check your Wi-Fi password
Checking the password used for the network is very important, in addition to checking whether this password is configured with a secure protocol.
Currently the most secure Wi-Fi protocols are WPA3 and WPA2-AES. We have already explained in detail what this means secure your home Wifi connection and protect yourself from network intrusionspossibly avoiding both WPA and the old WEP.
Then look for the option for change your Wi-Fi password in your home network or WLAN settings and set it with numbers and letters to make it difficult to find (do not use first and last names or dates of birth).
For further information we can read the differences between WPA, WPA2 and WPA3 in Wi-Fi security.
2) Check the modem/router access password
By entering the configuration panel of the operator’s modem and personal router we will certainly have performed the login with standard username and password.
If these access parameters have never been changed and have remained the default ones from the manufacturer (often with username Admin o Administrator), it is better to change them personally to prevent anyone from messing with them.
3) Check anonymous network name
Hide your Wi-Fi network by disabling the SSID it is a trick that allows you to make the wifi network disappear from the list of those available on a PC or smartphone and make sure that no one can detect it.
This setting is certainly very securebut also inconvenient to use if you use many networked mobile devices such as cell phones, TVs or Smart Plugs.
4) Check firmware updates
Router firmware is something that many forget to take care of. Most people don’t check for firmware updates or only do so on first startup.
Most manufacturers release firmware upgrades fixing bugs and, above all, covering security vulnerabilities that have come to light over time. Checking for updates should be done every month, by visiting the manufacturer’s website (Linksys, Asus, Belkin, Netgear, TP-Link, D-Link or others) and downloading the file which must then be loaded from the configuration panel, under the heading “Firmware Update“.
5) Check open doors and incoming traffic
Il port forwarding allows you to use some computer applications remotely and authorize P2P traffic. If used, it is best to use a non-standard port for the service you are configuring and filter internet traffic preventing anonymous connections (if possible). Furthermore, it would be better not to use features such as UPNP and DMZ, which are often victims of targeted cyber attacks.
6) Check that WPS is deactivated
Wi-Fi Protected Setup can be convenient for those who want it quickly connect a new device but which represents the main vulnerability of any router or modern modem, given that facilitated access also makes it easy to capture the password and recover it with advanced hacker tools, especially on modems or routers that are not updated on the firmware side.
In another article we saw how use the WPS button of Wifi devices safely.
7) Check the event log or log
Have the log active e Then log all router or modem activity It can be useful for analyzing any connection problems or suspicious activity.
Also ensure that the clock and time zone are set correctly to have an event log updated to today’s date and time, using the Online time synchronization.
8) Check Guest Network
If your modem or router provides it, you can activate one guest network to whom connect friends who come to visit us and need to navigate.
This network must always be protected with a secure Wi-Fi key (WPA3 or WPA2-AES) but by choosing a totally different password than the main network password. The guest network offers various additional security functions: it can be limited in traffic, dedicated to allowing those who come to visit us at home to access the internet and, optionally, it can also be excluded from the LAN network (therefore it does not see the computers connected to the main network) .
9) Check DNS used
Always from the modem or router settings we use i server DNS di Googlethis is because the network provider’s DNS servers may not only be slower but also more vulnerable to external attacks.
In another article we saw what we can do for change DNS in router.
If we want to further increase security, many modems and routers also support i DNS sicuri (also called DNS-Over-TLS).
10) Check the IP address range
Since every router or modem uses, by default, a range of IP addresses such as 192.168.1.x or 192.168.0.x, to avoid automatic attacks from the outside you can use a different range such as, for example: 10.x.x.x , 192.168.x.xyes 172.16.x.x a 172.31.x.x.
However, this modification is very advanced and should only be made if we really know what we are doing; in case we can read the guide above how to assign IP manually and disable DHCP.
11) Check the Mac filter
A Mac address filter can be inconvenient, but allows you to tell the router that only specific computers or devices can connectwhile the others will have to be authorized and added from the administration panel.
The Mac Address filter therefore allows you to allow access to the network only to identified computers or smartphones, preventing it for all others.
For further information we can read the guide above what is MAC Address and how it is used in a network.
Conclusions
We remind you that each modem or router model has its own set of options and a different configuration panel it changes profoundly depending on the brand of the manufacturer or supplier. In some cases, when the router is supplied by the internet provider (for example by Vodafone) it may also be that the settings are not accessible.
Whenever possible we always change the Improve Wi-Fi network securityto have even stronger network protection.
To learn more we can read the guide on how Check if someone is stealing your wifi internet connection and how to protect your wireless network and how Protect your wireless network from intrusions, eavesdropping and espionage.