The Basics Hub

Home Network Security - What Actually Matters

Network security is full of fear-mongering. Articles warn you about hackers in vans outside your house, state-sponsored attacks, and sophisticated criminals targeting your personal data. None of that applies to you.

Here’s what actually threatens a home network, and what to do about it.

The real threats

1. Automated bots scanning for default passwords. There are automated scripts that roam the internet looking for routers with factory-default admin passwords. They’re not targeting you personally - they’re scanning millions of addresses and grabbing the easy targets. If your router still uses “admin” and “password” to log in, you’re an easy target.

2. Unsecured smart devices. That $20 Wi-Fi camera you bought on Amazon ships with no security, runs outdated software, and will never receive an update. It’s not a camera - it’s a ticking security vulnerability. The best defence is to keep it off your main network.

3. Phishing. Someone tricks you into typing your Wi-Fi password into a fake login page. This is how most home networks actually get compromised - not through sophisticated hacking, but through simple social engineering.

The three passwords that matter

Your router admin password - the one you type to change settings. Make this unique. Do not use “admin” or “password” or anything you’ve used elsewhere. Write it on a sticker and put it on the bottom of the router if you need to - that’s more secure than a weak password you might forget.

Your Wi-Fi password - the one you type to connect devices. Use a passphrase that’s easy to say out loud but hard to guess (like “blue-elephant-jumps-high-42”). Change it once a year or when you move.

Your online accounts - use a password manager. This is not optional. You cannot remember unique, strong passwords for every service you use. Bitwarden is free, open-source, and works on every device. There is no excuse not to use one.

The guest network trick

Your router almost certainly has a guest network feature. Use it. Here’s the rule: if a device doesn’t need to talk to your other devices, it goes on the guest network.

This includes:

Only your main devices (phone, laptop, desktop, printer) stay on the main network.

Why this matters: if that cheap smart plug gets compromised, the attacker can see your smart bulb but NOT your laptop, your files, or your personal data. The guest network creates a fence between your trusted devices and everything else.

How to set it up: Log into your router settings. Look for “Guest Network” or “Guest Access.” Enable it. Give it a name (like “SmithHome-Guest”) and a separate password. Done.

Firmware updates - the forgotten essential

Router manufacturers release updates to fix security holes. Most routers can check for updates automatically. If you haven’t checked in the last year, do it now.

How to check: Log into your router. Look for “Firmware Update,” “Router Update,” or “System Update.” Click “check for updates.” If one is available, install it. The router will restart during the update - don’t interrupt it.

If your router hasn’t received an update in more than a year, consider replacing it. An unpatched router is a security risk.

What NOT to worry about

These are common suggestions that sound like good security but aren’t worth your time:

What to do now

  1. Set up a password manager (Bitwarden is free and takes 5 minutes)
  2. Change your router admin password to something unique
  3. Verify your Wi-Fi is using WPA2 or WPA3 encryption (check your router settings)
  4. Move all smart home devices to the guest network
  5. Check that automatic firmware updates are enabled on your router
  6. Change any default passwords on smart devices (cameras, doorbells)

That’s it. Six steps. Most of them take five minutes each. When you’ve done these, your network is more secure than 90% of home networks.

Tags: