Wifi router setup: Change the password. Turn off WAN Administration (so bad guys can't log into your router). Turn off UPnP (an Xbox technology that is less useful on most routers). Turn On WPA2 encryption (or WPA3 if present) for a password requirement. Turn on automatic firmware updates, or check up monthly for the latest firmware. A security flaw in your router would be a big problem!
Carl bought a new Asus Mesh Router and he's worried about privacy since they also use Trend Micro drivers. Should he be concerned? Leo says there's always a risk, but Asus is a reputable company and if they made a deal with Trend Micro, they would mention it in their privacy statement. But he doubts that there's much if anything to worry about. There's too great a risk to lie about such things.
Bruce wants to know how he can secure his WiFi router. Leo says to first enter the router address (198.x.x.x) and then change the default password. Then, turn off Administer via WLan. This will prevent someone from the outside controlling your router. Step 3, turn off UPNP (aka universal plug-in play). This prevents a device inside of your network, like an Xbox, opening up your router to the internet when you don't want it to. Lastly, turn on WPA2 security encryption.
Mike is worried that his WiFi network is compromised since his encryption was bypassed. Leo said that WEP was hacked, and routers went to WPA. And then WPA2. But the latest news is that "Krack attacks" have gotten into WPA2. Leo says it's largely sensationalized headlines and that it's very hard to do and requires a lot of time being on the network itself. Also, by now, most routers have been patched against Krack. So it's not really anything to fret over. And WPA3 is on the horizon, with new routers turning it on with a software upgrade.
Here are some things you can do:
Mark wants to use his Android phone as a hotspot. Leo says that it's under the Internet settings under "Hotspot and Tethering." And his phone carrier must support it, usually for an extra charge. But he's having issues using any security with a password. Leo says that's not good. It shouldn't be disabled. Leo wonders if that phone doesn't support WPA2. None is not a good choice. If there's WEP, that wouldn't be great, but it's better than nothing. He'll ideally want WPA2 with PSK (pre shared key).
When you get a new router, there are a few things you can do to make sure it's set up securely.
The first thing you'll do is connect it to your computer and check the manual to find out how to configure it.
Once it's connected to your computer, you'll use the browser to navigate to a special address as instructed in the manual. It should be something like 192.168.1.1. This will take you to the login screen for the router.
Tom wants to make sure his wireless router is secure. Leo says the only thing Tom really needs to do is turn on WPA2 encryption. It's in the router setup, which can usually be accessed at 192.168.1.1. He should turn on WPA2 and give it a password that isn't obvious. Once that's turned on, all the traffic is encrypted.
Steve has his own Wi-Fi router but his cable company just gave him a new router with Wi-Fi built in. Is it more secure? Leo says they're about the same security wise. He'll want to be sure to turn on WPA2 password protection. And often routers have security flaws and rarely get updated. So Steve should make sure he has his router firmware updated.
Brandon is trying to connect an older laptop to Wi-Fi, but it isn't working. Leo says that if other devices can connect, then chances are that the laptop may not support WPA2, which the network runs on. He could try WEP, but it's been cracked, so it's not really all that secure if there's someone with maligned intent. But if it's all he can get, it's better than nothing.
Naomi wants to change her router name, and is wondering what else she can do to secure it. Leo says to avoid personal details, and avoid using the name of the router. Leo uses the names of rock stars. She can really name it anything, even "FBI Surveillance Van." If she configures it properly, it's as secure as wired, just not as fast. For pure performance online, she should use a wired connection through Ethernet. If she doesn't need the wireless, then just disable it in the settings.
Leo's list of what to do to lock down your Wi-Fi router: