Task 1: Change the default password for router configuration
Usually, both the fields are “admin” and thus, it is easy for anyone to get into your network.
- Go to the router configuration page by entering the following in address bar 192.168.43.1, this could be different for different routers but this is the most common one.
- Enter your credentials, now go to Management> Access Control > Password.
- Here you have to choose the username and then set up a new password.
Tips for new password: It should be a combination of letters, numbers and symbols. Common words or names should never be the password. Change it too often.
Task 2: Do not keep DHCP services enabled
Dynamic Host Configuration Protocol lets remote computers connected to the router to obtain an IP address and connect to the network without knowing IP and router address information.
- On the router configuration page go to Advanced Setup> LAN
- Over here there should be the option to enable to disable the DHCP.
Task 3: Default SSID should be changed
The SSID is your access point’s name and it too often is the model of the router or the name of office or residence. These kinds of names jeopardize your security. You should change it to something random. You can also hide your SSID which will hide your network from others. To change the SSID:
- Go to Wireless>Basic
- Over here, you can either choose to hide your Wi-Fi or change the SSID besides the SSID field.
Task 4: WPA2 or PSK security is the best for your router
WEP (Wireless Equivalent Privacy) keys can be cracked relatively easier than WPA (Wi-Fi Protected Access) which uses 64-bit or 128-bit encryption. PSKs are Pre-Shared Keys and are the strongest among all. To change it:
- Go to Wireless>Security> Change network authentication
- Over here, choose the encryption from drop-down menu.
Task 5: MAC Filter
You should enable the MAC filter (Media Access Control) to restrict or authenticate a specific computer logging in the network. MAC addresses are unique physical addresses assigned to every device capable of connecting to a network, it is used by the router to authorize or restrict the device.
- Go to Wireless> MAC Filter
- You should now click on the enabling it.
- After this, add the MAC addresses of all the devices you wish to authenticate.
Task 6: Turn off Remote Administration
This feature is used to access the network when you are travelling but it could be a loophole for hackers. Use it when you need it. To disable it
- Go to Management> Access Control> Services
- Here, you should be able to disable the Remote Administration.
Task 7: Enable the Router’s own firewall.
Routers generally use SPI (Stateful Packet Inspection) to review data entering the network.
Task 8: Turn off the power supply of router when sitting ideal.
Switch it off when you don’t need it. It also refreshes the session.
Task 9: Place the router carefully
Keep your router in the center of the house so that network does not broadcast itself to unnecessary distances.