Securing Your Wi-Fi Network Guide: Plain-English Steps to Stay Safe

Most home Wi-Fi networks are set up once and then forgotten, so nobody notices when the password has been shared with half the street or an old gadget has stopped getting fixes. Your Wi-Fi network is more than the router: it is the password, everyone you have given it to, the extenders around the house, and every phone, laptop, speaker and doorbell that joins it. This guide covers that wider picture, in plain English: checking your security in a few minutes, seeing who is connected, sharing access safely, and keeping your own devices safe on the network. It is for households, families, older people and very small businesses without an IT person. If you have not yet changed your router's passwords and settings, start with the Securing Your Home Router Guide, then come back here.

Key takeaways

• Check the security type, not just the password. Your network should use WPA3 Personal, or the mixed "WPA2/WPA3" setting if you have older devices. Anything older, or "Open", needs fixing.
• Know who is connected. Look at the list of connected devices in your router's app or settings page every few months, and find out what anything unfamiliar is.
• Share access the safe way. Give visitors the guest network, ideally with a QR code, rather than your main password, and change the main password when someone who knew it moves out or leaves your business.
• Extenders and mesh points count too. Each one is a small computer that needs the same security setting and its own updates.
• A safe network does not make a safe device. Keep phones and laptops updated, turn on 2-step verification for your accounts, and let your devices use their privacy features.

What "securing your Wi-Fi" really means

Wi-Fi is the radio signal that lets your devices connect to the internet without cables. Securing it means three things working together.

• Locking the network: using modern encryption, which scrambles the signal so that only devices with the password can join and nobody nearby can read what you send.
• Controlling who has the key: knowing who has your Wi-Fi password, and having a simple way to take it back.
• Keeping the things on it healthy: making sure the devices that join, from your laptop to the smart plug in the kitchen, are updated and not quietly misbehaving.

The router guide covers the first steps on the box itself: changing the factory passwords, switching off remote management, WPS and UPnP, and turning on automatic updates. This guide assumes those are done and looks at everything around the box.

For organisations, see the Wi-Fi Security Guide.

Check your Wi-Fi in 10 minutes

You need your router's app (many internet providers have one) or its settings page, which you reach by typing an address printed on the router, such as 192.168.1.1, into a web browser. Menus differ and change over time, so look for these words. The table follows Apple's recommended router settings.

A quick check without logging in: on an iPhone or Android phone, open the Wi-Fi settings. A padlock or lock icon next to your network means a password is needed. An iPhone may show a privacy or security warning under the network name if the router uses weak settings. If you see one for your own network, the security setting needs attention.

If your router does not offer WPA2 or WPA3 at all, it is too old to be safe and should be replaced. The Wi-Fi Alliance, the industry body that certifies Wi-Fi products, now requires WPA3 support on all newly certified devices, so any recent replacement will have it.

Find out who is on your Wi-Fi

Your router keeps a list of everything connected. It is often called "Connected devices", "Attached devices", "Device list" or "My devices".

1. Open the list in your provider's app or on the router settings page.
2. Match each entry to something you own. Many show a name, such as "Kitchen speaker" or "Sams-iPhone". Others only show a string of letters and numbers, called a MAC address.
3. Expect some confusion. Modern iPhones, iPads and Android phones use a "private" Wi-Fi address that differs from network to network, so the same phone may appear under an unfamiliar code, or twice. Switch devices off one at a time to see which entry disappears.
4. Rename what you recognise if the app allows it, so next time the check takes a minute.
5. If something is still unknown, do not panic. Change the Wi-Fi password (see below) and reconnect your own devices. Anything that does not come back was not yours, or was something you no longer use.

Share your Wi-Fi without giving away the keys

Your Wi-Fi password is like a house key. Every copy you hand out is one you cannot easily get back.

• Use the guest network for visitors: guests get internet access but cannot see your computers, printers or shared files. Give it a different password from your main network.
• Share by QR code: Android phones can show a QR code for a saved network (tap the network, then Share), and recent iPhones can offer to share your password with a nearby contact.
• Do not post it: a password written on a chalkboard in a shop, or in a holiday let's welcome book, is effectively public. Use a guest network and change its password regularly.
• Change the main password when circumstances change: a lodger moves out, a relationship ends, a member of staff leaves, or you suspect a neighbour has it. Use a long password, for example three random words with a number, and save it in a password manager. See the Password Managers Explained for Everyone Guide.
• Plan the reconnect: changing the password disconnects everything. Do it when you have half an hour to reconnect the TV, speakers and doorbell, and keep the new password to hand.

Very small businesses should treat the guest network as the only network customers ever see. Card machines, tills and the office laptop belong on the main network, never the one whose password is on the counter.

Extenders, mesh and powerline adapters

If your Wi-Fi does not reach every room you may have extra boxes: an extender (repeats the signal), a mesh system (several matching units that work as one network) or powerline adapters (send the connection through your electrical wiring). Each one is a small computer with its own settings.

• Same security everywhere: the extra units should use the same WPA3 or WPA2/WPA3 setting and the same network name as the main router. An old extender that only supports WPA or WEP lowers the security of the whole house.
• Change their admin passwords too: extenders often have their own settings page with a default password.
• Keep them updated: mesh systems usually update through their app, which is a good reason to choose one. Older plug-in extenders may never update. Check the maker's website, and replace any unit that is no longer supported.
• Remove what you no longer use: an extender left in a drawer still remembers your password. Reset it to factory settings before you give it away or recycle it.

Keep your devices safe on the network

A well-locked network still carries whatever your devices do. These settings protect the devices themselves.

• Updates on: turn on automatic updates for phones, tablets, laptops and apps. The NCSC lists prompt updates among its top tips for staying secure online.
• Private Wi-Fi address: on an iPhone, go to Settings, Wi-Fi, tap the info (i) button next to a network, then Private Wi-Fi Address. On recent versions you can pick Off, Fixed or Rotating. Apple uses Fixed by default on secured networks and Rotating, which changes every two weeks, on weak or open ones. Leave the default on unless your router's parental controls need a fixed address.
• Forget old networks: your phone automatically rejoins any network it has saved. On Android, go to Settings, Network & internet, Internet, then touch and hold a network and tap Forget. On an iPhone, tap the info button and choose Forget This Network. Remove hotel, café and old home networks you no longer use.
• Protect your accounts: turn on 2-step verification for email, banking and shopping, so a stolen password alone is not enough. See the Two-Factor Authentication for Everyone Guide.
• Smart gadgets on the guest network: cameras, plugs and TVs rarely need to see your laptop. If your router allows it, put them on the guest network. See the Securing Smart TVs and IoT at Home Guide.

Away from home, different rules apply. See the Public Wi-Fi Safety Guide.

Signs something is wrong

• Devices you cannot explain in the connected list, especially ones that reappear after you remove them.
• The internet slows down at times when nobody in the house is using it, or your monthly data use jumps.
• Your own devices cannot connect with the password that worked yesterday, or the network name has changed.
• Settings you did not change: security set back to Open or WPA, a new network name, or the guest network switched off.
• Your provider contacts you about unusual activity from your connection.

What to do if it happens

1. Change the Wi-Fi password and, if you can log in, the router's admin password too. Check the security setting is WPA3 or WPA2/WPA3.
2. If you cannot log in, or settings keep changing back, reset the router to factory settings (usually a small pinhole button; the manual says how long to hold it) and set it up again using the router guide. Your provider can talk you through this.
3. Reconnect only your own devices and check the connected list again.
4. Update everything: router, extenders, phones and laptops.
5. Change important passwords (email first) if you think someone could have seen your traffic or a device was infected, and check bank statements.
6. Report it if money was taken or you were threatened (see below).

Where to get help

• Your internet provider: the first call for router resets, replacement routers and unusual activity on your line.
• Report Fraud (England, Wales and Northern Ireland): the national service for reporting fraud and cyber crime, which the NCSC now points people to, at reportfraud.police.uk or 0300 123 2040. In Scotland, call Police Scotland on 101.
• NCSC: plain-English advice for individuals and families, including its top tips for staying secure online.
• United States: report cyber crime to the FBI's Internet Crime Complaint Center at ic3.gov. The FTC also takes fraud reports at ReportFraud.ftc.gov (the site was offline during the October 2026 government shutdown when we checked).

Common failure patterns

• Leaving the old security mode on: a router set years ago to WPA or "WPA/WPA2" mixed for one old device, long after that device was thrown away.
• Hiding the network name and stopping there: hidden networks feel safe but are not, and MAC filtering gives the same false comfort.
• A password that never changes: the same Wi-Fi password for ten years, known to every past lodger, cleaner, babysitter and employee.
• Everyone on the main network: guests, smart gadgets and the shop's card machine all sharing one network with the family laptop.
• Forgotten extenders: an old plug-in extender on WEP or with a default admin password, quietly weakening a well-set-up router.
• Thinking the network is the whole job: a perfectly secured Wi-Fi does not stop a phishing email or an out-of-date laptop.

Practitioner checklist

Work through this list once, then repeat the starred items every three to six months.

1. Finish the Securing Your Home Router Guide steps first.
2. Set security to WPA3 Personal, or WPA2/WPA3 if older devices need it.
3. Use one network name, not your name or address, and leave it visible.
4. Turn on the guest network and give visitors and smart gadgets that one.
5. Check the connected devices list and identify everything (starred).
6. Change the Wi-Fi password when someone who knew it leaves, and store it in a password manager (starred).
7. Check every extender or mesh unit uses the same security and is still getting updates (starred).
8. Turn on automatic updates on all phones, tablets and laptops.
9. Forget Wi-Fi networks on your phone that you no longer use (starred).
10. Save the Report Fraud number, 0300 123 2040, somewhere you can find it.

Standards and references

• Apple: Recommended settings for Wi-Fi routers and access points
• Wi-Fi Alliance: Wi-Fi security
• Apple: Use private Wi-Fi addresses on Apple devices
• Google: Connect to Wi-Fi networks on your Android device
• NCSC: Top tips for staying secure online
• Report Fraud: Report cyber crime and fraud
• FBI: Internet Crime Complaint Center (IC3)

Related NHI Mgmt Group resources: Securing Your Home Router Guide · Public Wi-Fi Safety Guide · Choosing a VPN Safely Guide · Securing Smart TVs and IoT at Home Guide · Wi-Fi Security Guide