A router out of the box runs old firmware, a default password and services nobody asked for. Six changes cut off the easy ways in.
Change the **admin password**, update the **firmware**, disable **WPS and remote management**, and turn off **UPnP** if no device needs it. Every change here is reversible in the same web interface.
The gateway from ipconfig is the router, but the admin page is not always on the default port. The label on the device and the manual name the exact URL; guessing costs more time than reading.
ipconfig | findstr /i "Gateway"Default credentials are published for every model. Set a long password inside the router and store it in your password manager so a factory reset does not lock you out of your own network.
Vendor firmware pages list the vulnerabilities each release closes. Flash over a cable and do not power off during the write; the router reboots on its own and takes several minutes.
Administration > Firmware UpdateWPS with a PIN can be brute forced, remote management puts the login on the internet, and UPnP lets any device open ports by itself. Disable all three unless something in the house genuinely depends on them.
Wireless > WPS > Disable
Administration > Remote Management > OffWPA3 is the better choice where every device supports it. With older hardware, mixed WPA2 and WPA3 keeps those devices working without dropping to TKIP, which is the part worth avoiding.
Wireless Security: WPA2-AES / WPA3A photo of the settings pages or a short note saves an hour after a factory reset. Include where the admin password lives, the network names and any port forward you decided to keep.
Wrong subnet, or a VPN routes that address somewhere else. Connect directly to the router and try again.
WPA3 on hardware that only speaks WPA2. Switch to mixed mode and reconnect that device.
UPnP is off. Add a manual port forward for that console instead of turning UPnP back on for every device.
A failed flash. Restore the previous firmware image from the vendor page and repeat the update over a cable.
No. It breaks roaming between access points and hides nothing from anyone who is scanning.
Yes. Smart plugs and visitors belong there; from that network they cannot reach your PC.
Every change lives on the router's own pages: restore the previous security mode or re-enable UPnP and WPS there. A full reset to factory settings undoes everything at once, including the new admin password.
Free · no account needed · tracks your progress