1. Is your WiFi using WPA2 or WPA3 (not WEP or open)?

Yes No / Not sure

WEP is broken; open WiFi is exposed. Switch to WPA2 at minimum, WPA3 if your router supports it.

2. Did you change the router's default admin password?

Yes No / Not sure

Default passwords are indexed in public databases. Change it today.

3. Is the router's firmware up to date?

Yes No / Not sure

Log into the admin page, look for "firmware" or "update." Many consumer routers haven't been updated in years.

4. Is WPS (WiFi Protected Setup) disabled?

Yes No / Not sure

WPS has known attacks. Disable it if your devices don't require it.

5. Is the WiFi password at least 14 characters?

Yes No / Not sure

Short WPA2 passwords can be cracked offline in days. 14+ mixed characters pushes that to decades.

6. Is a separate guest network enabled for visitors / IoT?

Yes No / Not sure

Isolate smart TVs, doorbells, and visitor devices from your laptops on a guest VLAN.

7. Is remote management / admin-from-WAN disabled?

Yes No / Not sure

Attackers scan the internet for exposed router admin pages. Turn it off unless you need it.

8. Is the router less than 5 years old?

Yes No / Not sure

Most consumer routers stop receiving security updates around year 5. If you're past that, replace it.

9. Have you reviewed connected devices recently?

Yes No / Not sure

Most router admin pages show every device — check for unfamiliar ones.

10. Is DNS set to a secure resolver (1.1.1.1, NextDNS, Quad9)?

Yes No / Not sure

Stops connections to known-malicious domains at the DNS layer.

Home WiFi Security Checker