Home Router Security
Find out who else is on your home network.
What Is Home Router Security?
Every packet between your home devices and the internet passes through your router, and many routers still run the factory admin password. This exercise starts when your connection slows and you log in to look. There are devices on the network you do not recognize. You will turn on WPA2 encryption, replace a weak WiFi password with a generated one, change the default admin password and install a firmware update, then confirm only your own devices remain.
What You'll Learn in Home Router Security
- Access your home router's admin panel and change the default administrator password to a strong, unique credential
- Identify all devices connected to your home network and remove unauthorized or unknown connections
- Install a pending router firmware update to patch known vulnerabilities
- Turn on WPA2 encryption and replace a weak WiFi password with a strong, generated one
- Recognize an unexplained slowdown as a possible sign of unauthorized devices on your network
Home Router Security — Training Steps
-
Working From Home
Today started like any other day - a cup of coffee, a few emails to catch up on, and a client report to finalize. But something isn't right with your internet connection.
-
Something Feels Off
Pages are taking forever to load, emails are slow to send, and a video call with a colleague kept freezing and dropping. Alice opens an online speed test tool and runs a fresh measurement to see what is happening.
-
Connection Problems
The results are alarming. Alice's ping is 347ms - it should be under 30ms for a normal connection. Her download speed is just 2.1 Mbps, a fraction of the 100 Mbps she pays for. Something is seriously wrong with her network.
-
Quick Check
-
Inspecting the Router
Alice suspects her home router might be the issue. Before accessing the admin panel, she needs the login credentials. Most routers have a sticker on the device with the default username and password.
-
Accessing the Admin Panel
Alice found the default credentials: admin / admin. She opens her browser and navigates to 192.168.1.1 - the router's admin panel address.
-
Logging In
The router login page appears. Alice uses the default credentials she found on the router label: admin / admin. Using default credentials is a major security risk - anyone who knows them can access and reconfigure the router.
-
The Dashboard
Alice is in the router's admin panel. The dashboard immediately reveals several problems: 8 connected devices - Alice only has 3 personal devices Encryption: Disabled - the WiFi network is completely open Firmware v2.1.3 - possibly outdated Eight connected devices when she only owns three? That explains the slow internet.
-
Unknown Connections
The Connected Devices page confirms Alice's suspicion. She can only identify 3 devices as her own: Alice's Laptop (her work machine) Alice's iPhone (her phone) Living Room TV (her smart TV) The remaining 5 devices are completely unknown - names like 'android-7f2a', 'DESKTOP-X9K2M', and 'unknown' suggest strangers are connected to her network.
-
Quick Check
Security Framework Coverage
CWE
- CWE-1392 Use of Default Credentials
MITRE ATT&CK
- T1078.001 Valid Accounts: Default Accounts
CIS Controls
- CIS 12 Network Infrastructure Management
- CIS 14.8 Train Workforce on the Dangers of Connecting to and Transmitting Enterprise Data Over Insecure Networks
NIST CSF
- PR.AT-01 Personnel are provided with awareness and training so that they possess the knowledge and skills to perform general tasks with cybersecurity risks in mind
- PR.IR Technology Infrastructure Resilience