CyberThreats.au

Independent cybersecurity education

SearchScammed or hacked?Get help

For you

ScamsIs this a scam?

Types of scams

All scam guides

Practise

Protect yourselfMake my security checklist

Your devices

Everyday situations

Accounts and passwords

Privacy

All protect yourself guides
Cyber threats

Common threats

Newer and specialised threats

All cyber threat guides
Security products

Devices

Accounts and identity

Network and privacy

Backup

All product guides
Free checklists

For you

For work

All free checklists

For work

Small businessSmall business security checklist

Foundations

Payments, suppliers and incidents

All business guides

AI and cloud

All AI and cloud guides
Microsoft 365Microsoft 365 readiness checklist

Identity and access

Email

Teams, SharePoint and OneDrive

Data, devices and admin

All Microsoft 365 guides

Home Wi-Fi Security Checklist

Check your router and Wi-Fi settings step by step, with how-to instructions for each item and a downloadable PDF.

Last reviewed 21 October 2026

12 questions. Answer as many as you like; your checklist updates as you go.

Router sign-in

Has the router's default admin username and password been changed?

Why it matters: Anyone who can sign in to the router's settings can change everything about the network. The ACSC notes that default router logins may be published online for anyone to see.

How to do it
  1. Connect to the router by Wi-Fi or cable and open its settings page or app (the router's label or manual shows how).
  2. Sign in with the current admin username and password.
  3. Find the admin, account or management password setting.
  4. Replace the default with a strong password or passphrase. The ACSC points to its password manager and passphrase guidance for this.
  5. Sign out, then sign back in with the new details to check they work.

Based on the ACSC's Wi-Fi and router guidance, checked October 2026. Menus vary by router maker; the router's manual or the maker's website has the exact steps.

Read our guide: Home Wi-Fi and router security explainedOfficial reference: ACSC: Secure your Wi-Fi and router

Wi-Fi network

Has the default Wi-Fi password been replaced with a long, unique one, and the network renamed?

Why it matters: The Wi-Fi password decides who can join the network. The ACSC also notes that a default network name can reveal the router's make and model, which helps someone look up its weaknesses.

How to do it
  1. Sign in to the router's settings and open the Wi-Fi or wireless page.
  2. Replace the default Wi-Fi password with a long, unique password.
  3. Change the network name from the default, leaving out personal information such as a surname or address.
  4. Repeat for each Wi-Fi band in use (for example 2.4 GHz and 5 GHz). The ACSC describes turning off any band that isn't used.
  5. Save, then reconnect each device using the new password.

Based on the ACSC's Wi-Fi and router guidance, checked October 2026. Menus vary by router maker; the router's manual or the maker's website has the exact steps.

Read our guide: Home Wi-Fi and router security explainedOfficial reference: ACSC: Secure your Wi-Fi and router

Is the Wi-Fi encryption set to WPA3, or WPA2 if WPA3 isn't available?

Why it matters: Encryption scrambles the traffic on the network so people nearby can't read it. The ACSC lists WPA3 first, with WPA3 transition mode or WPA2 as fall-backs for older devices.

How to do it
  1. Sign in to the router's settings and open the wireless security page.
  2. Choose WPA3.
  3. If some devices can't connect, choose WPA3 transition mode.
  4. If neither WPA3 option is offered, choose WPA2 (also shown as WPA2-Personal or WPA2-PSK).
  5. If the router doesn't offer at least WPA2, the ACSC describes considering a replacement.

Based on the ACSC's Wi-Fi and router guidance, checked October 2026. Menus vary by router maker; the router's manual or the maker's website has the exact steps.

Read our guide: Home Wi-Fi and router security explainedOfficial reference: ACSC: Secure your Wi-Fi and router

Is a guest Wi-Fi network used for visitors and devices you don't fully trust?

Why it matters: A guest network gives visitors internet access with some separation from the main network and the devices on it. The ACSC describes using it for visitors and untrusted devices.

How to do it
  1. Sign in to the router's settings and find the guest network or guest Wi-Fi option.
  2. Turn it on and give it its own name and password.
  3. Share the guest details with visitors instead of the main Wi-Fi password.
  4. The ACSC notes that guests who need to use a device such as a smart TV have to be on the same network as that device.

Based on the ACSC's Wi-Fi and router guidance, checked October 2026. Menus vary by router maker; the router's manual or the maker's website has the exact steps.

Read our guide: Home Wi-Fi and router security explainedOfficial reference: ACSC: Secure your Wi-Fi and router

Updates and support

Does the router install firmware updates, either automatically or when checked?

Why it matters: Firmware updates fix security weaknesses in the router, in the same way phone and computer updates do. The ACSC describes turning on automatic updates where the router supports them.

How to do it
  1. Check the router's manual or the maker's website to see whether it can update automatically, and turn that on if it can.
  2. If it can't, sign in to the router's settings and look for a firmware or update page.
  3. Install updates only through the router's settings or the maker's official website.
  4. Don't power off, unplug or reset the router while an update is installing.
  5. If the maker offers update alerts, the ACSC describes subscribing to them.

Based on the ACSC's Wi-Fi and router guidance, checked October 2026. Menus vary by router maker; the router's manual or the maker's website has the exact steps.

Read our guide: Home Wi-Fi and router security explainedOfficial reference: ACSC: Secure your Wi-Fi and router

Is the router still supported with security updates by its maker?

Why it matters: Once a router reaches end of life, new weaknesses are no longer fixed. The ACSC says makers usually support routers for about 3 to 5 years, depending on brand and model, and describes replacing an end-of-life router as a priority.

How to do it
  1. Find the model number on the router or in its manual.
  2. Look up that model's end-of-life date on the maker's website.
  3. If no firmware or security update has come out for more than 12 months, the ACSC says the router is likely end of life.
  4. The ACSC describes choosing a replacement that supports automatic updates, and notes the internet provider can advise on compatible models.

Based on the ACSC's Wi-Fi and router guidance, checked October 2026. The router maker's website has model-specific support dates.

Read our guide: Home routers and mesh Wi-Fi: security features to compareOfficial reference: ACSC: Secure your Wi-Fi and router

Router features

Is WPS (Wi-Fi Protected Setup) turned off, unless it's actually used?

Why it matters: WPS is a shortcut for connecting devices. The ACSC says its PIN is susceptible to brute-force attacks, where every possible PIN is tried until one works, and describes disabling WPS if it isn't needed.

How to do it
  1. Sign in to the router's settings.
  2. Look for WPS, often on the wireless or advanced page.
  3. Turn WPS off if no device relies on it.
  4. Save the settings.

Based on the ACSC's Wi-Fi and router guidance, checked October 2026. Menus vary by router maker; the router's manual or the maker's website has the exact steps.

Read our guide: Home Wi-Fi and router security explainedOfficial reference: ACSC: Secure your Wi-Fi and router

Is UPnP (Universal Plug and Play) turned off, unless something on the network needs it?

Why it matters: UPnP lets devices on the network open connections through the router by themselves. The ACSC flags it as a risk because malware has used it to compromise routers.

How to do it
  1. Sign in to the router's settings and look for UPnP, often on an advanced or network page.
  2. Turn UPnP off if it isn't used.
  3. The ACSC notes some smart devices and games may then need manual configuration; the device maker's help pages explain how.
  4. The ACSC also describes turning off port forwarding and FTP unless they're needed.

Based on the ACSC's Wi-Fi and router guidance, checked October 2026. Menus vary by router maker; the router's manual or the maker's website has the exact steps.

Read our guide: Home Wi-Fi and router security explainedOfficial reference: ACSC: Secure your Wi-Fi and router

Is remote management of the router turned off, where possible?

Why it matters: Remote management lets the router's settings be reached from the internet. The ACSC describes it as a common route for compromise and lists turning it off where possible.

How to do it
  1. Sign in to the router's settings and find remote management, remote administration or WAN access.
  2. Turn it off, if possible.
  3. The ACSC also lists turning off Telnet, SSH and SNMP if present, along with any management page reachable from the internet.
  4. Save the settings.

Based on the ACSC's Wi-Fi and router guidance, checked October 2026. Menus vary by router maker; the router's manual or the maker's website has the exact steps.

Read our guide: Home Wi-Fi and router security explainedOfficial reference: ACSC: Secure your Wi-Fi and router

Connected devices

Have you looked at the list of devices connected to the router and checked you recognise them all?

Why it matters: An unfamiliar device on the list may be someone else using the network. The ACSC describes reviewing connected devices and removing any that aren't recognised.

How to do it
  1. Sign in to the router's settings or app and open the connected devices or clients list.
  2. Remove any device you don't recognise.
  3. Rename devices with unclear names, such as smart speakers, so they're easier to identify next time.
  4. The ACSC notes that changing the Wi-Fi password disconnects unauthorised devices; authorised ones can rejoin with the new password.

Based on the ACSC's Wi-Fi and router guidance, checked October 2026. Menus vary by router maker; the router's manual or the maker's website has the exact steps.

Read our guide: Home Wi-Fi and router security explainedOfficial reference: ACSC: Secure your Wi-Fi and router

Are smart home devices (cameras, speakers, doorbells and similar) on their own or guest network?

Why it matters: If a smart device is compromised, keeping it on a separate network makes it harder to reach phones, computers and their data. The ACSC describes putting these devices on their own network, often the guest network.

How to do it
  1. Turn on the router's guest network (or a separate network for smart devices, if offered).
  2. Connect the smart devices to that network instead of the main one.
  3. If the devices don't need to talk to each other, the ACSC describes turning on client isolation for that network.
  4. Check each device still works as expected from its app.

Based on the ACSC's smart device guidance, checked October 2026. Menus vary by maker; the router's and device's manuals have the exact steps.

Read our guide: Smart speakers, home cameras and video doorbells: security basicsOfficial reference: ACSC: Internet of Things devices

Router health check

Is the router in a secure spot, and do you do a router health check every six months or so?

Why it matters: The ACSC asks whether the router is somewhere secure, who can get to it, and whether everything plugged into it belongs to you. It describes a recurring six-monthly reminder to check the router's support status, firmware and connected devices, and to restart it.

How to do it
  1. Check who can physically reach the router and whether everything plugged into it is yours and needed.
  2. Set a reminder for every six months.
  3. At each check, confirm the router is still supported, install any firmware update, and review connected devices.
  4. Restart the router: turn it off at the power point, wait a few seconds, then turn it back on.
  5. For a router supplied by an internet provider, the ACSC notes the provider can advise on compatible replacements.

Based on the ACSC's Wi-Fi and router guidance, checked October 2026. Menus vary by router maker; the router's manual or the maker's website has the exact steps.

Read our guide: Home routers and mesh Wi-Fi: security features to compareOfficial reference: ACSC: Secure your Wi-Fi and router

Your checklist

Answer the questions above. Your checklist updates as you go.

General information based on official guidance and makers’ instructions, not advice about your situation.

Sources