Wireless Router Security

» Overview

Why Wireless Security?

» How To Secure Your Wireless Router

Identify your computer's gateway IP address
Login to your router
Change your Service Set Identifier (SSID)
Change your router's password
Enable a strong encryption scheme
Wireless MAC Filtering
Disable Remote Management of your router

» Helpful Links

Links to user manuals for popular wireless router brands
Third-party information on wireless networks

Overview

Why Wireless Security?

Today, when you purchase a new wireless router, it is usually ready to be used with the default configuration that it comes with. All the settings are set by the manufacturer to make it easier for you to setup. What you need to know is that hackers are very aware of these default settings. Included in this document are some steps you can take to better secure your wireless home network.

This page describes various techniques you can use to secure your wireless home network. Securing your wireless network is very important. Not doing so can allow a complete stranger to:

use your internet connection you are paying for, causing a perceived "slowness", or degradation of your internet service.
access your files and other personal information.
exploit your internet connection to upload illegal materials, which could lead to the FBI ringing your door bell!

How To Secure Your Wireless Router

Identify your computer's gateway IP address

In Windows:

For Windows XP users, click Start .
For Windows Vista/7 users, click Start .
Click All Programs.
Click Accessories.
Click Command Prompt.
In the black "MS-DOS" window, type ipconfig at the prompt ending in ">" and hit Enter (or Return).
If you are using a network cable to connect to your home network, find a line in the "MS-DOS" window that looks like Ethernet adapter Local Area Connection.
If you are using wireless to connect to your home network, find a line in the "MS-DOS" window that looks like Ethernet adapter Wireless Network Connection.
Locate the Default Gateway IP. In the example below, it is 192.168.1.1

C:\>ipconfig
Windows IP Configuration
Ethernet adapter Local Area Connection:

IP Address. . . . : 192.168.1.100
Subnet Mask . . . : 255.255.255.0
Default Gateway . . : 192.168.1.1

C:\>

In Mac OS X:

In the tray that sits along the bottom of your screen, find and click the Settings button .
In the Settings window, find and click the Network button .
You will see a window that looks something like this:

If you are using wireless only, you should see a green 'Connected' light by AirPort.
If you are using wired (network cable) only, you should see a green 'Connected' light by Ethernet.
If you have both wireless and wired connected, you should see green 'Connected' lights by both AirPort and Ethernet as in the graphic above.
Towards the middle of this window, locate the line that says Router:. Your gateway address will be listed here.

You will need to consult your wireless router's user manual for specific instruction on enabling/disabling the features below. If you have misplaced your user manual, you may reference the links at the end of this document for some of the more common router brands.

Login to your router

In an Internet browser, browse to your Gateway IP address.
Enter the username and password of your router. If you did not change the username and/or password out of the box, you can consult your user manual for the default username and password. Again, it is ALWAYS a good idea to change from the username and/or password to something other than the default values. We highly suggest using a strong password. You may test the strength of your password by going to http://www.passwordmeter.com.

Change your Service Set Identifier (SSID)

Straight out of the box, your router will have an SSID that will include the manufacturer name. For example, a brand new Netgear router will have an SSID of "NETGEAR"; Linksys will have "linksys", etc. It is suggested that you change the SSID to something you can easily identify. Hackers that come across your SSID having a default value may assume your network is not secure (running weak system default settings) and may begin to go to work on your network.

Change your router's password

Most routers are configured with the same simple username and password. These usernames and passwords are widely known, especially in the hacker community.

Enable a strong encryption scheme

Use WEP only if your computer cannot support the stronger encryption methods listed below.
WPA/WPA2 is stronger than WEP (WPA2 uses stronger encryption over WPA). Most computers manufactured in the last 6 to 9 years can support Wi-Fi Protected Access (WPA)
WPA-PSK/WPA2-PSK is the strongest encryption. It uses the same encryption standards as in WPA/WPA2 but also includes an additional Pre-Shared Key (PSK), or more commonly known as a "passphrase". We suggest using WPA-PSK/WPA2-PSK. Every wireless device in your network using this encryption method must use the passphrase in order to access the wireless network. You only need to enter this passphrase once on your device. Your device will remember it.

Wireless MAC Filtering

Every wireless device has a unique Media Access Control address (or MAC address). You can specify which MAC addresses can gain access to your wireless network as an additional layer of security. All other devices will be rejected when trying to connect. This feature is usually disabled on most wireless routers by default.

Disable Remote Management of your router

This feature is for anyone wanting to manage their wireless router from anywhere on the internet. We recommend that you disable this feature if you do not have a need to remotely change your home router settings from somewhere other than your home.

By using these techniques, you can be confident that you are the only one using your internet connection and that your files and personal information are much safer!

Helpful Links

Links to user manuals for common wireless router manufacturers:

Linksys - Linksys support
Netgear - Netgear support
D-LINK - D-LINK support
Belkin - Belkin support
Asus - Asus support
TP-LINK - TP-LINK support

Third party information on wireless networks can be found at:

About.com - Home Computer Networks 101
HowStuffWorks - How Wi-Fi Works
Google Search - Current Google search results

QUICK LINKS