HOW TO Lock down your network

1 LOCK DOWN ROUTER Open your browser and log into your router’s configuration utility via its IP address. If you’ve not yet done so, look for an administration section where you can change the password (choose a strong one using your password manager) and disable remote administration.

2 FORCE SECURE ACCESS If the option exists, tick the box to access your router over a secure (HTTPS) connection. If you run into problems – our TP-Link doesn’t support the newer TLS connections required in Firefox, for example – then at least change the port for non-secure remote management from the default (80).

3 DISABLE UNSAFE SERVICES You’ll need to hunt around for these specific options but disable UPnP (use manual port-forwarding instead), followed by the following services if you can locate them: Ping, Telnet, SSH, and HNAP – all allow remote access. Consult your router manual for guidance if necessary.

4 LOCK DOWN WI-FI Change your Wi-Fi network names if they currently list the router manufacturer or model. Make sure they’re protected by strong WPA2 encryption and a suitably lengthy password. Set a wireless schedule so the network is switched off and unavailable while you sleep or are away from home.

5 MORE LOCK-DOWN TIPS Consider repositioning your router in the centre of your house or reducing the transmit power to prevent your Wi-Fi signal spilling out into neighbouring areas. Also locate the WPS section and make sure devices can’t connect to your router using a PIN. Consider disabling WPS when not needed.

6 SET UP ISOLATED GUEST NETWORK Switch on the guest network, which you use to give other people and untrusted devices like IoT gadgets access to the internet. Make sure guests can’t see or access your local network to ensure any compromised devices can’t be used to gain access to it.