Start with the router
Your router controls access to your home network. Its administration password is different from the Wi-Fi password used to join the network. Change default administration credentials, keep firmware supported and follow your provider's instructions for a managed router.
Review your home network settings
Use WPA3 encryption if supported, or WPA2-AES when WPA3 is unavailable. Replace equipment limited to obsolete WEP or WPA security.
Set a strong, unique Wi-Fi password. Avoid your name, phone number or house number.
Disable remote administration and WPS if you do not need them and the router allows it.
Use a guest network for visitors and smart devices when available, with isolation from your main devices.
Review connected devices and remove access for equipment you no longer use.
Keep cameras and smart devices updated and change their default passwords.
When using public Wi-Fi
Confirm the network name with the venue; a familiar-looking name can be copied. Disable automatic connection to open networks and file sharing. Keep the browser updated and never bypass certificate warnings. The padlock indicates an encrypted connection to a site, not that the site itself is honest.
For sensitive tasks, prefer your own mobile connection when practical. A reputable VPN can protect traffic between you and its service, but does not make fake websites safe or remove the need to trust the VPN operator. Avoid installing a VPN or certificate offered by an unexpected captive-portal pop-up.
If you suspect the router has been changed
Contact your internet provider or manufacturer using verified details. Review administration access and network settings. A reset may erase your connection configuration, so follow their recovery instructions. Update firmware and set new credentials after restoring a trusted configuration.
Useful references
Here to help
Something doesn’t look right?
Prepare an incident report with the details that matter.