Key Takeaways
- Your router's admin password and Wi-Fi password are two separate credentials — both need to be strong and unique.
- Firmware updates patch known security vulnerabilities; an unpatched router is an open invitation.
- Every device on your network is a potential entry point — reviewing what's connected matters.
- A guest network isolates untrusted devices from your primary network and the data on it.
- Network security is not a one-time task — schedule a repeat audit every three to six months.
Summary
22 items · 30–60 minutes
Why Auditing Your Home Network Matters
Most households treat their home network as a utility — plug it in, connect devices, and forget it exists. That habit leaves a predictable gap that attackers can exploit. Routers running outdated firmware, default passwords that were never changed, and a dozen forgotten smart home gadgets all represent real exposure on a network that likely carries banking sessions, health data, and work files.
This checklist is designed to help you find those gaps methodically. You do not need deep technical knowledge to work through it — just access to your router's admin interface and about an hour. For a deeper grounding in the principles behind each step, see our complete home network security guide.
Once you've finished here, consider pairing this audit with an account security audit to make sure weak passwords aren't undermining the network protections you put in place.
Router Admin Interface
Access your router's settings to review passwords, firmware, connected devices, and security features.
Password Manager
Generate and securely store strong, unique credentials for your router admin account and Wi-Fi network.
Network Scanner App
Scan your local network to identify all connected devices and flag anything unfamiliar.
Manufacturer's Support Page
Find firmware update downloads and security advisories specific to your router model.
How to Use This Checklist
Work through the groups in order — router admin credentials first, then Wi-Fi configuration, firmware, connected devices, and additional protections. The final group covers habits to keep your network secure between audits.
Each item is marked with a priority level:
- Must — non-negotiable; skip these only if you have a specific, documented reason.
- Should — strongly recommended for most households.
- Nice to have — optional enhancements worth considering if you want a more hardened setup.
You'll need to log in to your router's admin interface. Typically, you do this by entering your router's local IP address (commonly 192.168.1.1 or 192.168.0.1) into a browser on a device connected to your network. Check the label on your router or your ISP's documentation if neither address works.
WPA2 Is the Minimum — WPA3 Is Preferred
Older encryption standards such as WEP and WPA (original) have well-documented vulnerabilities and should not be used. WPA2 remains acceptable if your hardware does not support WPA3, but WPA3 offers meaningfully stronger protections and resistance to certain offline password attacks. Check your router settings and upgrade if the option is available.
Router Access & Admin Credentials
Wi-Fi Network Configuration
Firmware & Software Updates
Connected Devices Review
DNS & Additional Protections
Ongoing Habits
After the Audit: Keeping Your Network Secure
Completing this checklist once is a solid start, but network security is not a static condition. New firmware vulnerabilities are discovered regularly, new devices get added to households, and credentials that seemed strong a year ago may have been exposed in a data breach since then.
Default Credentials Are Publicly Known
Router manufacturers ship devices with identical default usernames and passwords — and those defaults are published in public databases. If you have not changed yours, anyone who can reach your admin interface can log in. Make this the very first item you complete.
Unrecognised Devices Warrant Immediate Action
An unknown device on your network could indicate an unauthorized user or a compromised gadget. Disconnect the device from the router admin console, change your Wi-Fi password immediately, and then investigate further. Do not leave it connected while you decide what to do.
Schedule your next audit on your calendar before you close this page. Three to six months is a reasonable interval for most households; if your home has a large number of connected devices or you work with sensitive data, consider quarterly reviews.
If you share your network with others, a quick conversation about not connecting unknown devices — and why it matters — goes a long way. Strong physical controls (like keeping your router in a location visitors can't easily access) complement the software-side steps above.
For households concerned about clicking dangerous links across their devices, a link safety checklist and our guidance on scams and phishing are natural next steps. You may also find value in a quick device security audit to make sure the phones and computers on your network are as well-protected as the network itself.