A Home Network Security Checklist (for People Who Don’t Want to Think About It)

A modern house has a lot on its network: phones and laptops, the TV, a doorbell, cameras, a smart lock, the thermostat, a kid’s game console, maybe solar or a pool controller. Each one is a small computer, and most of them were set up once and never looked at again.

You don’t need to become a security expert. Most of the protection comes from a handful of settings you change once. Here’s the list I go through in homes around Nocatee, Ponte Vedra and St. Johns County, in the order I’d do it.

1. Lock down the router itself

The router is the front door of your network, so start there.

• Change the router’s admin password. This is the password for the router’s settings page or app, not the Wi-Fi password. If it’s still the one printed on the sticker, change it.
• Turn on automatic updates if the router offers them, or check for firmware updates every few months. Updates close security holes.
• Replace a router that no longer gets updates. If the manufacturer has stopped releasing firmware for your model, it won’t get fixes for new problems. That’s a good reason to upgrade even if it still “works”.
• Turn off remote management unless you actually use it. You don’t want the settings page reachable from the internet.

2. Use modern Wi-Fi security and a real password

• Choose WPA3, or “WPA2/WPA3” mixed mode if some older devices can’t connect. Avoid WEP and plain WPA, which are long broken.
• Use a long Wi-Fi password. A short sentence that’s easy to say out loud is both strong and practical, and much better than a short jumble you have to spell out to every guest.
• Turn off WPS (the “push button” connection feature) if you don’t use it.

One tip you’ll see in older checklists: hiding your network name. It doesn’t add real protection, because the name is still easy to find with free tools, and it makes your own devices less reliable at connecting. Leave the name visible, and pick one that doesn’t include your family name or address.

3. Give guests and gadgets their own network

Most routers can run a guest network: a separate Wi-Fi name that reaches the internet but not your computers, phones and printers. Use it for visitors, contractors and short-term renters.

Better still, put your smart home gadgets (cameras, plugs, the TV, the vacuum, the pool controller) on their own network too. If one of those devices has a security flaw, it can’t reach the laptop with your tax returns. On some routers this is just a second guest network; on better systems it’s a separate network (a VLAN) with rules about what can talk to what. Either is a big improvement over everything sharing one network.

4. Change default passwords on every device

Cameras, doorbells, network video recorders and printers sometimes ship with a default username and password, or let you skip setting one. Go through each device’s app and make sure:

• every device has its own password, not the default and not the same one everywhere;
• firmware updates are on (most camera and doorbell apps have a setting for this);
• remote viewing goes through the manufacturer’s app, not through a port opened on your router.

If you’re not sure whether something on your router is “port forwarded”, that’s worth checking. Open ports are a common way into home networks, and most homes don’t need any.