LOCK DOWN YOUR NETWORK

1

LOCK DOWN ROUTER

Open your browser and log into your router’s configuration utility via its IP address. If you’ve not yet done so, look for an administration section where you can change the password (choose a strong one using password manager) and disable remote administration.

2

FORCE SECURE ACCESS

If the option exists, tick the box to access the router over a secure (HTTPS) connection. If you run into problems—our TP-Link doesn’t support the TLS connections required in Firefox, for example—change the port for non-secure remote management from the default (80).

3

DISABLE UNSAFE SERVICES You’ll need to hunt around for these options, but disable UPnP (use manual port-forwarding instead), followed by these services if you can locate them: Ping, Telnet, SSH, and HNAP—all allow remote access. Consult the router manual for guidance if needed.

4

LOCK DOWN WI-FI

Change your Wi-Fi network names if they list the router manufacturer or model. Make sure they’re protected by strong WPA2 encryption and a lengthy password. Set a wireless schedule so the network is switched off and unavailable while you sleep or are away from home.

5

MORE LOCK-DOWN TIPS Reposition your router to the center of your house or reduce the transmit power to prevent your Wi-Fi signal spilling out into neighboring areas. Locate the WPS section and make sure devices can’t connect to your router using a PIN. Try disabling WPS when not needed.

6

SET UP ISOLATED GUEST NETWORK Switch on the guest network, which you can use to give other people and untrusted devices like IoT gadgets access to the internet. Make sure guests can’t see or access your local network to ensure any compromised devices can’t be used to gain access to it.