NTX Tech

  Computing help for the masses

Securing your Wireless Router

 

If your Internet connection is anything other than dial-up, I strongly recommend the use of a router in order to provide protection from the outside world. (Learn about routers and firewalls here)

A router is primarily used as the central point of a network, where multiple computers can access each other and share an Internet account. Even if you only have one computer, a router is the best way to protect yourself.

If however, you are using more than one computer in your home, or if someone may, for example, bring a laptop, you can allow all those computers to access the Internet using a wireless connection. The wireless connection comes from a router.

Problems can arise, however, when the router is left unsecured. What this means is that anyone within range of your unsecured wireless signal can access the Internet through your connection. It's very easy, though, to secure your connection so that you can control who has access to your network and connection.

Note that if you have a wireless router, and still only one computer, you still need to secure that wireless portion of the router.

The are minimum steps that should be taken when you connect a wireless router. These steps assume that the router is connected and providing access to the Internet with no problems. Consult the documentation that came with your router for specific instructions.There are many variables between manufacturers. The following instructions are very general and the pictures are from my router. Your router interface will look different, but the functions are the same.

1. Access your browser software by opening a browser (Firefox, Internet Explorer, etc). In the address bar, type either 192.168.0.1 or 192.168.1.1. (Different routers use different addresses). If one of these numbers is correct, you will get a login window asking for a username and a password.

 

If you have never logged in to your router before, it will have a default username and password. If you think about that, that's one of the security risks we're going to fix. Your router instructions will have the default username and password. If you don't have the documentation, you can access the support section of the manufacturer's web site to find out that information. The defaults for the major manufacturers may be as follows:

BELKIN: username: leave blank, PW: admin
D-LINK: username:admin, PW: leave blank
LINKSYS: username: admin, PW: admin
NETGEAR: username: admin, PW: password

Enter the username and password. If successful, you will be taken to the router interface.

The interface will likely have several buttons and tabs to aid in navigation through all the settings.

2. Browse through the menus until you find the option to change your login password and, if available, the username. This will be for the login that we just used to access the router.

In the image above, you'll note that the option is only available to change the password. Choose a strong password that you will remember. Type it in twice, then be sure to click APPLY. Write this information down and keep it in a safe place.

TIP: Network security purists may have a cow at this, but in the home, I think it's OK. I write the username and password with a Sharpie on the label on the bottom of the router.

3. Now look for an option for Wireless Security. Here's where the meat of our security changes will be.

4. Change the SSID (Service Set Identifier) to a name that you can identify as your own. This is the name that may show up on a list of available wireless networks if I were to bring my laptop to your house. You can (and some say you should) disable the broadcast of the SSID. Note the "Wireless Radio" option in the image above. I have left mine on.

5. Here's the most important step. Enable the Authentication (some routers call it Encryption) option. The best router encryption currently available in consumer routers is WPA-PSK (Wi-Fi Protected Access - Pre-Shared Key).

If you have an older router, your only option may be WEP (Wired Equivalent Privacy). If that's all you have, it's better than nothing, but WEP was cracked years ago, and if you are ever targeted, your security will be cracked in minutes.

Select the WPA option (preferably PSK). Once again, you will need a password that you can remember. Once you're set up, you won't need to enter this password again, unless you bring a new computer with wireless access into the network. For example, my sons each have a laptop, so they need my password to access the network for Internet access.

Enter your chosen password twice, then click APPLY.

These steps will help to secure your network if you are using a router. There are more advanced security issues and procedures, but they are beyond the purposes of this article. As I have already stated, consult the original documentation or the Support section of the manufacturer's web site for more complete and accurate information.