Change the default router admin username and password
Use a strong, unique WiFi password
Enable WPA3 if available
Use WPA2-AES if WPA3 is not available
Disable WPS
Change the default WiFi network name
Update router firmware regularly
Keep the router admin interface password separate from the WiFi password
Use a guest network for visitors
Turn off remote administration unless needed
Disable UPnP if not required
Review and remove unknown connected devices
Place the router in a secure location
Use a strong router admin password
Enable firewall features on the router
Set up separate networks for smart home devices if possible
Limit device access with MAC filtering if needed
Reboot and check router settings after updates
Use encrypted DNS if supported
Replace outdated routers that no longer receive updates