Having no password on your home Wi-Fi network isn't just a way for your neighbors to use your internet for free. It's a direct threat to the security of your personal data stored on connected devices. An attacker who gains access to an open access point can intercept traffic, steal email passwords, and even use your IP address for illegal online activity. This is why setting a password on a Wi-Fi access point is a top priority for every router owner.
The process of installing protection may seem complicated only at first glance. In fact, the interface of modern routers TP-Link, ASUS, Keenetic or MikroTik Designed to allow users to quickly configure basic security settings, you don't need to be a network engineer to complete this procedure. All you need is a device with a browser and the control panel login address.
In this article, we'll walk you through a step-by-step process that will allow you to prevent unauthorized access to your network. We'll cover not only the password change process itself, but also choosing a secure encryption algorithm. Securing your network It all starts with this simple but critical step.
Preparing to set up router security
Before making any changes to the hardware configuration, you need to ensure a stable connection. It's best to configure the settings by connecting your computer to the router via Ethernet cableThis will eliminate the risk of losing connection when changing wireless network settings, which is especially important if you change the password or network name (SSID).
If a cable connection is not possible, make sure your mobile device or laptop is connected to the router's current Wi-Fi network. You will also need the login details for the device's web interface. These are usually found on a sticker on the bottom of the router. The default address is usually: 192.168.0.1 or 192.168.1.1, and the default login and password are combinations admin/admin or admin/1234.
Open any browser (Chrome, Firefox, Safari) and enter the router's IP address in the address bar. After entering your credentials, you'll be taken to the control panel. Interfaces may vary visually from manufacturer to manufacturer, but the operating logic remains the same. Find the section responsible for your wireless network. It may be called Wireless, Wi-Fi, Wireless mode or WLAN.
☑️ Check before setup
Make sure you're logged in as an administrator, not a guest. Guest privileges often limit your ability to change system security settings. If you've forgotten your router's control panel password, you may need to perform a factory reset by holding down the reset button. Reset on the device body for 10-15 seconds.
Selecting an encryption algorithm and security standard
The most important step in the security process is choosing the right security type. In your wireless settings, you'll encounter several encryption options. This choice determines how easy it is for a hacker to break into your network. Modern standards offer several layers of protection, and their hierarchy cannot be ignored.
The most outdated and insecure protocol is WEPIt was hacked many years ago, and modern tools make it possible to bypass its protection in minutes. Protocol WPA (Wi-Fi Protected Access) is also considered vulnerable, especially when combined with encryption. TKIPUsing these standards today is unacceptable if you value your data.
⚠️ Warning: Using WEP or WPA (TKIP) encryption makes your network vulnerable to automated attacks. Even a strong password won't save you if you choose a weak encryption algorithm.
The optimal choice at the moment is WPA2-PSK with encryption algorithm AESThis is the gold standard that supports most devices and provides a high level of protection. If your router and client devices (smartphones, laptops) are fairly new, released after 2018-2019, it's worth considering this option. WPA3This standard eliminates many of the vulnerabilities of its predecessor and even protects against brute-force password guessing.
The table below compares the main types of security so you can make an informed choice:
| Security type | Encryption algorithm | Level of protection | Recommendation |
|---|---|---|---|
| WEP | RC4 | Critically low | Do not use |
| WPA (TKIP) | TKIP | Short | Do not use |
| WPA2-PSK | AES | High | Recommended |
| WPA3-Personal | GCMP-256 | Maximum | The best choice |
Why is WPA3 better?
The WPA3 protocol uses Secure Association Establishment (SAE), which replaces the four-way key exchange (4-way handshake) used in WPA2. This makes it impossible to intercept the handshake for subsequent offline password cracking. Even if an attacker intercepts the data, they won't be able to use it for an offline brute-force attack.
Generating a strong password for a Wi-Fi network
After selecting the encryption type, you need to create a password (Pre-Shared Key). Many users make the mistake of using simple combinations like 12345678, password or your phone number. These passwords can be guessed in seconds using specialized programs. The strength of your security directly depends on the complexity of this combination of characters.
The password must be long enough—at least 12 characters, but preferably 16 or more. Use a combination of uppercase and lowercase letters, numbers, and special characters (e.g., ! @ # $ %). Avoid using dictionary words, pet names, or birth dates, as these are the first words checked during a social engineering attack.
Write down the password you created in a safe place. Since it will contain complex characters, it will be difficult to remember, and re-entering it each time new guests join is inconvenient. You can save it in a password manager on your phone or write it down in a notepad at home.
Some routers allow you to create a guest network with a separate password. This is a great practice. You can give guests internet access, but isolate them from your main local network, where printers, NAS storage, and computers with important data are located. The guest network also you need to set a password, even if it is simpler than the main one.
Step-by-step instructions for popular router models
Router interfaces from different manufacturers have their own unique features. Let's look at where to find wireless network settings on the most common devices. Navigation may vary slightly depending on the firmware version, but the main sections remain the same.
For devices TP-Link (green interface): go to the menu Wireless -> Wireless Security. Select mode WPA/WPA2 - Personal (Recommended)In the field Wireless Password Enter your new password. Don't forget to click the button Save at the bottom of the page. In the new blue interfaces (Tether), the path may look like this Basic -> Wireless.
On routers ASUS: in the side menu, select Additional settings -> Wireless network. Make sure you are on the tab GeneralIn paragraph Authentication method select WPA2-Personal or WPA3-PersonalIn the field WPA Pre-Shared Key Enter your password. Click Apply.
Devices Keenetic (formerly Zyxel): From the bottom menu, select the icon Wi-Fi network (or go to My Networks and Wi-Fi). In the block Home network find the field Network protection and select WPA2-PSKIn the field Password Enter the combination. Press the button. Apply.
After saving the settings on any router, the wireless connection will be disconnected. This is normal. You'll need to find your network in the list of available Wi-Fi networks on your phone or laptop and enter the new password to reconnect.
Setting up a hidden network and filtering by MAC addresses
For those seeking maximum privacy, there's the option to hide the network name (SSID). This prevents the router from broadcasting the name of your access point. To connect, the user will need to manually enter the network name and password in the device's Wi-Fi settings.
Another level of protection is MAC address filtering. Each network device has a unique physical address. In the router settings (section Wireless MAC Filtering or Client filtering) You can create a whitelist. It includes the MAC addresses of only those devices that are allowed to connect. All other devices, even with the password, will be unable to access the network.
⚠️ Warning: MAC address filtering is not a secure encryption method. The address can be spoofed (cloned) if an attacker knows which device is already connected. Use this method as a supplemental measure, not as your primary defense.
Hiding the SSID can be inconvenient for guests, as you'll have to explain to them how to manually enter the network name each time. Furthermore, some smart devices (such as light bulbs and power outlets) may not work well with hidden networks. Consider the pros and cons before enabling this feature.
Manufacturers may change menu locations or item names. If you can't find the settings described above, please refer to the official documentation for your specific router model on the manufacturer's website.
What to do if you forgot your Wi-Fi or admin password
It's common to forget your Wi-Fi password but need to connect. If you have a computer that's already connected to the network (or was previously connected and has saved the settings), you can find the password through the operating system. In Windows, this is done via Control Panel -> Network and Sharing Center -> Wireless network properties -> tab Security -> check mark Show entered characters.
If you can't access the configured devices, the only option is to reset the router. There's a small hole on the device's body with the inscription Reset or RestorePress it with a paperclip for 10-15 seconds until the indicators blink simultaneously. The router will reset to factory settings.
After the reset, the device will operate with the settings indicated on the sticker underneath. You can connect using the default password (if set by the manufacturer) or without a password, log in to the web interface, and reconfigure the network using new, secure credentials.
Frequently Asked Questions (FAQ)
Is it possible to hack a WPA2 password?
Theoretically yes, but this requires a tremendous amount of computing power and time if the password is complex (longer than 12 characters, contains different types of characters). Simple passwords are quickly cracked. WPA3 is even more secure.
Does setting a password affect internet speed?
No, having a password doesn't affect speed. However, using an outdated encryption method (such as WEP or WPA-TKIP) may limit the maximum connection speed, as the router will enter compatibility mode.
Should I change my password regularly?
For a home network, this isn't absolutely necessary if you're confident the password hasn't been compromised. For office networks or locations with a large number of guests, changing the password periodically is recommended.
Why doesn't my router accept my new password?
Check your keyboard layout and letter case. Make sure you're not using restricted characters (although modern routers accept almost any ASCII characters). Also, make sure CapsLock isn't enabled.