Having no password on your wireless network isn't just a way for your neighbors to use your internet for free. It's a direct security threat to all devices connected to the router. Attackers can intercept transmitted data, including passwords for banking apps and personal correspondence, if access point not protected.
Setting up protection takes only a few minutes, but it requires attention to detail. In this article, we'll discuss how to password-protect a Wi-Fi network on routers from various manufacturers, which encryption type to choose, and how to create a password that's impossible to brute-force. Without a password, your router becomes an open gateway for attacks on your home network.
Before you begin setting up your router, make sure you're connected to it via cable or Wi-Fi. If you're changing settings remotely, there's a risk of losing your connection while the new settings are being applied. Therefore, it's best to perform all steps while in close proximity to the equipment.
Preparing to set up security
The first step is to physically or wirelessly connect to the device. For maximum reliability and to avoid connection interruptions at a critical moment, it is best to use LAN cableIf this isn't possible, make sure your Wi-Fi signal is stable and your laptop or phone won't go into sleep mode while you're working.
You need to know the router's IP address to access the admin panel. These are typically standard addresses such as 192.168.0.1 or 192.168.1.1. The address may also be located on a sticker on the bottom of the device, along with the username and password for accessing the management system.
Open any browser and enter the IP address in the address bar. A login window will appear. If you've changed the details before and forgot them, you may need to perform a factory reset by holding down the button. Reset on the router body for 10-15 seconds.
- 🔌 Connect your computer to the router via Ethernet cable for stability.
- 🏷️ Find the sticker on the bottom of the device with the login address and factory data.
- 🌐 Open your browser and enter the IP address (e.g.
192.168.0.1). - 🔑 Enter your administrator login and password to access the interface.
Selecting the encryption type and security standard
When setting up your wireless network, you'll be asked to select a security method. This is a critical step, as older encryption standards are vulnerable and can be cracked in minutes, even by a novice hacker. Modern routers offer several options, and choosing the right one determines your security level.
The most current standard today is WPA3However, it's not supported by all devices, especially those released more than five years ago. If you have smart devices or older gadgets, they may simply not connect to a network with this type of security. In this case, WPA2-PSK (AES) is the optimal choice.
We strongly advise against using WEP or WPA (TKIP). These protocols are considered obsolete and provide no real data security. Using them is equivalent to having no password for a skilled attacker, who could decrypt your traffic in real time.
| Encryption type | Security level | Compatibility | Recommendation |
|---|---|---|---|
| WEP | Critically low | All devices | Do not use |
| WPA (TKIP) | Short | Old devices | Do not use |
| WPA2-PSK (AES) | High | Almost all devices | Recommended |
| WPA3-Personal | Maximum | New devices (2018+) | For new networks |
Creating a strong Wi-Fi password
After selecting the encryption type, the system will ask you to enter a security key. Many users make the mistake of using simple combinations like "12345678" or a phone number. Such passwords are automatically generated by special programs in seconds.
A strong password should contain at least 12 characters. The ideal formula includes uppercase and lowercase letters, numbers, and special characters (e.g., !, @, #, $). Avoid using obvious words, pet names, or birth dates that are easy to guess or find on social media.
You can use password managers or online generators to generate complex combinations. Write the generated key in a safe place, as it's difficult for anyone to remember a random set of characters. If a guest asks for the password, you can always dictate it or show a QR code (if your router supports this feature).
- 🔐 Use at least 12 characters for maximum hack resistance.
- 🔢 Combine numbers, uppercase and lowercase letters, and special characters.
- 🚫 Avoid dictionary words and keyboard sequences.
- 📝 Save your password in a password manager or write it down in a notepad.
⚠️ Note: Some older devices (such as last-generation game consoles or older printers) may not support special characters in the Wi-Fi password. If such a device fails to connect, try simplifying the password to only letters and numbers, but increasing its length.
Instructions: how to set a Wi-Fi password on a TP-Link router
The interface of TP-Link routers may differ depending on the firmware version (green or blue interface), but the logic of actions remains similar. After logging into the control panel (usually at 192.168.0.1) you need to go to the wireless mode section.
In the menu on the left or in the top panel, find the tab Wireless (Wireless mode) and then Wireless Security (Wireless Security). This is where the key settings are located. Make sure the option is selected. WPA/WPA2 - Personal (Recommended).
In the field Wireless Password or PSK Password Enter a complex password you've created. Don't forget to click the button Save (Save) at the bottom of the page. After this, the router may prompt you to reboot, which is necessary for the changes to take effect.
☑️ Checking TP-Link settings
If you have a dual-band router, the settings may be divided into two tabs: Wireless 2.4GHz And Wireless 5GHz. In this case, you'll need to set a password separately for each frequency, or, more conveniently, set the same names and passwords for both bands so that devices switch automatically.
Setting up security on Asus and Keenetic routers
Asus routers with AsusWRT firmware have an intuitive interface. After logging in, the main page often displays a network map. You need to find the block Wireless or go to the section Additional settings -> Wireless network.
Here you need to pay attention to the field Wi-Fi security method. Select WPA2-Personal or WPA3-PersonalIn the field WPA Pre-Shared Key Enter your new password. After making changes, be sure to click the button Apply at the bottom of the screen.
Keenetic (formerly ZyXEL) routers have an even more detailed interface. Go to the menu My Networks and Wi-FiIn the "Home Network" section, you'll see Wi-Fi settings. Check the "Network Security" box and select WPA2-PSK. The password is entered in the appropriate field below.
What should you do if you forgot your router admin password?
If you haven't changed your router's password, try the standard combinations: admin/admin, admin/1234, or admin/password. These are often listed on a sticker underneath the device. If the default combinations don't work and you don't remember them, a full reset using the button on the router will help. This will reset the router to factory settings, and you'll have to set up your internet connection again.
It's important to note that modern Keenetic models may have the "Guest Network" feature enabled by default. Be sure to password-protect it if you plan to use it to prevent guests from accessing your primary devices, such as NAS or printers.
Hiding the network name (SSID) as an additional measure
In addition to setting a password, you can hide the network itself from the list of available connections. This is called "hiding the SSID." This prevents the router from broadcasting packets with the network name, and it won't appear in the Wi-Fi list on phones and laptops.
To connect to a hidden network, the user will need to manually enter the network name (SSID) and password in the device settings. This creates the illusion of security, but experienced wireless network scanners can still detect activity and identify the hidden network name when an authorized client connects.
You can enable this feature in the same wireless settings where you set the password. Look for the option Enable SSID Broadcast (Enable SSID Broadcast) and uncheck it, or select Hidden (Hidden). After this, the network will disappear from the general list.
- 👻 Hides the network from regular users and nosy neighbors.
- 📱 Requires manual connection setup on each new device.
- 🔍 It does not provide full protection against hackers with special equipment.
- ⚡ May slightly increase the connection time of devices.
⚠️ Note: Hiding the SSID may cause connection issues with some smart home devices (light bulbs, plugs) that only search for visible networks. If your devices stop connecting, temporarily enable the SSID broadcast, configure them, and then hide the network again.
Frequently Asked Questions (FAQ)
Is it possible to hack a WPA2 password?
Theoretically, yes, but in practice, it's extremely difficult and time-consuming. Hacking is possible through brute-force attacks, through a WPS vulnerability, or if the user has set a password that's too simple. Using a complex combination of 15+ characters makes hacking mathematically impossible in a reasonable amount of time, even for powerful computers.
Should I change my Wi-Fi password regularly?
If you use a strong password (15+ characters, random) and have disabled WPS, changing your password regularly doesn't make much sense. However, if you've moved to a new neighbor, separated from someone who knew the password, or suspect a password leak, you should change it immediately.
What is WPS and should it be disabled?
WPS (Wi-Fi Protected Setup) is a simplified device connection technology, often implemented via a button on the device's body or a PIN code. The WPS protocol has a critical vulnerability that allows someone to easily brute-force the PIN code and discover the network password. It is recommended to disable WPS in the router settings for maximum security.
Will I password protect my network if I just change the name (SSID)?
No. Changing the network name (SSID) only changes its visibility in the list; it doesn't establish security. As long as the encryption type is set to "Open" or "None," anyone can connect to your network without a password, even if it's renamed. Be sure to select WPA2/WPA3 as the security type.
Where can I see who is connected to my Wi-Fi?
The router control panel usually has a "Client List" or "Status" section. All connected devices and their MAC addresses are displayed there. If you see an unfamiliar device, change your Wi-Fi password immediately, as the previous one may have been compromised.