Your router is both the front door to the home network and a useful place to apply shared safeguards. Securing it does not require advanced networking knowledge, but it does require more than changing the Wi-Fi name.

Before you begin

Find the router model, the internet provider’s support details and the administrator login. If the router also handles fibre, telephone or television services, record the existing settings before changing anything. Avoid a factory reset unless you know how the connection will be restored.

The home-router security checklist

  1. Change the administrator password. This protects the settings panel. It should be unique and different from the Wi-Fi password.
  2. Use WPA3 or WPA2-AES. Prefer WPA3 when your important devices support it. A WPA2/WPA3 transitional mode may be needed for older equipment. Avoid WEP and obsolete WPA modes.
  3. Use a strong Wi-Fi passphrase. Length and uniqueness matter. Do not reuse an email, banking or work password.
  4. Install firmware updates. Enable automatic updates if the manufacturer supports them, or set a reminder to check. Replace a router that no longer receives security updates when practical.
  5. Disable remote administration unless needed. If the ISP uses remote management for support, ask what must remain enabled before changing it.
  6. Consider disabling WPS. Push-button setup can be convenient, but many homes can add devices with the Wi-Fi password instead.
  7. Review UPnP and port forwarding. Games and smart devices may request automatic inbound access. Do not disable a needed feature blindly, but remove rules you no longer recognise or use.
  8. Create a guest network. Use it for visitors and, where appropriate, less-trusted smart devices. Confirm that the router actually isolates guests from the main network.
  9. Review connected devices. Rename known devices and investigate unfamiliar entries. Private hardware addresses can make a familiar phone appear under a new identifier.

Add family filtering separately

Network security and content filtering are different jobs. A secure Wi-Fi password prevents casual access to the network; it does not decide which online categories family devices can reach.

A filtering DNS service configured on a compatible router can apply a domain-level policy to many devices on the protected home Wi-Fi. Fitra Guard’s global categories are Adult, Gambling, Malware and Phishing. Complete Family Protection adds profiles, service controls and routines for supported configurations.

Check that the router applies the intended resolver on both IPv4 and IPv6 if both are active. Some routers expose only limited DNS settings, and replacing an ISP router can affect telephone, television or support services. Ask before you swap hardware.

Know the limits

  • Router-level protection applies on that network; it does not automatically follow a phone onto mobile data.
  • DNS filtering works mainly at domain or service level, not by reading individual posts or messages.
  • A VPN or separately configured encrypted resolver may use another route.
  • A guest network may need its own DNS policy, depending on the router.
  • Platform safety settings are still needed for chat, purchases, contacts and user-created content.

Test without opening harmful content

Use your filtering provider’s diagnostic page or a harmless domain specifically supplied for testing. Confirm:

  • a device on the main Wi-Fi is protected;
  • the guest network behaves as intended;
  • the setup still works after enabling IPv6, if used;
  • the connected-status indicator is current; and
  • an authorised adult can recover access without exposing the password to children.

A short quarterly review

Every few months—and after a router, ISP or major firmware change—check updates, administrator access, active port forwards, guest isolation, connected devices and filtering status. Remove obsolete access and keep the router model and recovery details somewhere another trusted adult can find them.

The aim is not a mysterious “locked-down” network. It is a maintained, understandable setup in which security controls, family filtering and device settings each do the job they are suited to do.

Sources & further reading · 4 references

Last reviewed: 4 August 2026. Router menus and capabilities vary by manufacturer, ISP and firmware.