article

an article in the Kaspersky Lab blog.
VPN Kaspersky Secure Connection
Microsoft support site.

(System Tools → Password).
article.
Click on Save (Save).

Router interfaces differ depending on the manufacturer, specific model and firmware versions. To navigate the settings of the router, use the user manual for your model. As a rule, it comes with the router, or you can download it from the device manufacturer's website.

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. If you have not changed them, they are indicated on the back of the router.
On the router settings page, go to the section ( Wireless → Basic Settings).
In field Wireless network name (Wireless Network Name
Click on Save (Save).

Router interfaces differ depending on the manufacturer, specific model and firmware version. To navigate the settings of the router, use the user manual for your model. As a rule, it comes with the router, or you can download it from the device manufacturer's website.

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. If you have not changed them, they are indicated on the back of the router.
On the router settings page, go to the section Wireless → Basic Settings (Wireless → Basic Settings).
Uncheck the box Enable SSID Broadcast (Enable SSID Broadcast).
Click on Save (Save).

Disable WPS

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.
On the router settings page, go to the section Wireless → WPS (Wireless → WPS).
Click on Disable (Disable).

Turn on encryption

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. If you have not changed them, they are indicated on the back of the router.
On the router settings page, go to the section ( Wireless → Wireless Security).
Please select WPA / WPA2 - Personal.
In field Version (Authentication Type) select WPA2-PSK.
In field Encryption (Encryption) select AES.
Click on Save (Save).

article.

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. If you have not changed them, they are indicated on the back of the router.
On the router settings page, go to the section Wireless → Wireless Security (Wireless → Wireless Security).
Please select WPA / WPA2 - Personal.
In field Wireless password (Wireless password
Click on Save (Save).

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. If you have not changed them, they are indicated on the back of the router.
On the router settings page, go to the () section.
Click on Add to (Add New).

Included (Enabled).
Click on Save (Save).

Click on Enable (Enable).
Select ().

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.

In the window Network connections double tap.
In the window condition click Wireless network properties.
In the window Wireless network properties go to tab Safety.
Select security type WPA2-Personal article.
Click on OK.
Close the window condition.

Windows 10, Windows 7, 8, 8.1, 10.

For all products: Software compatibility

For all products: Purchase and license

For all products: Before installation

For all products: Getting started

For all products: Program settings

For all products: Remove programs

For all products: Errors

For all products: Safe Money

For all products: Diagnostics and reports

For all products: Articles on My Kaspersky

For all products: Windows Articles

When you connect to a public Wi-Fi network, such as a cafe, the data is transmitted unencrypted. This means that your passwords, logins, correspondence and other confidential information become available to intruders. Email addresses can be used to send spam, and the data on your page social network can be changed.

Home Wi-Fi networks are also at risk. Even the most high level Wireless Security: WPA2 Encryption - Can be hacked with Key Reinstallation Attack (KRACK). For more details, see the article in the Kaspersky Lab blog.

Always follow these guidelines when connecting to any Wi-Fi network:

Make sure you have Firewall installed and enabled. This protection component scans network traffic and protects your computer from network attacks.
Firewall is included in the Kaspersky Lab applications: Kaspersky Internet Security, Kaspersky Anti-Virus, Kaspersky Total Security, Kaspersky Security Cloud and Kaspersky Small Office Security.
Use a secure HTTPS connection. Make sure there is a green or gray lock icon in your browser's address bar. For more details, see the article in the Kaspersky Lab blog.
Secure your connection with a VPN by adding another layer of encryption. To do this, install Kaspersky Secure Connection on your device and enable secure connection every time you connect to the internet.
If you are using an operating room windows system, turn off the service general access to files and printers for everyone public networksthat you are connecting to. Instructions on the Microsoft support site.
Use whenever possible mobile Internet instead of public Wi-Fi networks.

Come up with a strong password to access your router

As a rule, to access the router settings, use standard login and password. An attacker can find out the login and password from your router by downloading the user manual for the device from the manufacturer's website. To prevent this from happening, change the password for the router.

For example, we show the setting tP-Link router TL-WR841N. To change the password for accessing the router:

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. If you have not changed them, they are indicated on the back of the router.
On the router settings page, go to the section System Tools -\u003e Password (System Tools → Password).
Enter your username, old and new Password to access the router. Recommendations for creating a strong password in the article.
Click on Save (Save).

The password for accessing the router will be changed.

Create a unique name (SSID) for your Wi-Fi network

Often, rainbow tables are used to crack passwords. Pre-built rainbow tables for popular SSIDs store millions of possible passwords... If your SSID and password are in such a table, an attacker can instantly recover the network password using special programs.

To improve the security of your home wireless network, create an uncommon SSID.

For example, we show the configuration of the TP-Link TL-WR841N router. To change the name of the Wi-Fi network:

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. If you have not changed them, they are indicated on the back of the router.
On the router settings page, go to the section Wireless → Basic Settings (Wireless → Basic Settings).
In field Wireless network name (Wireless Network Name) come up with and enter a name for the Wi-Fi network.
Click on Save (Save).

The name for the Wi-Fi network will be changed.

Make your Wi-Fi network invisible

Hide the network name in the router settings. Your Wi-Fi network will not appear in the list of available wireless networks. Discover her without special software will be impossible.

For example, we show the configuration of the TP-Link TL-WR841N router. To make your Wi-Fi network invisible to other devices:

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. If you have not changed them, they are indicated on the back of the router.
On the router settings page, go to the section Wireless → Basic Settings (Wireless → Basic Settings).
Uncheck the box Enable SSID Broadcast (Enable SSID Broadcast).
Click on Save (Save).

Your Wi-Fi network will be invisible to other devices.

Disable WPS

WPS is designed to make it easy for devices to connect to Wi-Fi networks. Using WPS, you can connect to the router without a password. We recommend disabling WPS in your router settings.

For example, we show the configuration of the TP-Link TL-WR841N router. To disable WPS:

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. If you have not changed them, they are indicated on the back of the router.
On the router settings page, go to the section Wireless → WPS (Wireless → WPS).
Click on Disable (Disable).

WPS technology will be disabled.

Turn on encryption

When you work on a network with weak encryption, your data can be intercepted by attackers. If you connect to home network and you get a message about weak encryption, change the encryption type to a more secure one. Common types of wireless encryption: WEP, TKIP, WPA, WPA2 (AES / CCMP).

The main difference between them is the level of protection. We recommend WPA2 as it is the most reliable one offered.

For example, we show the configuration of the TP-Link TL-WR841N router. To change the encryption type of a wireless network:

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. If you have not changed them, they are indicated on the back of the router.
On the router settings page, go to the section Wireless → Wireless Security (Wireless → Wireless Security).
Please select WPA / WPA2 - Personal.
In field Version (Authentication Type) select WPA2-PSK.
In field Encryption (Encryption) select AES.
Click on Save (Save).

Wi-Fi network encryption will be enabled.

Create a strong Wi-Fi password

Without a password, your Wi-Fi network will be available to everyone. A strong password will prevent unauthorized people from connecting to it. Recommendations for creating a strong password in the article.

For example, we show the configuration of the TP-Link TL-WR841N router. To create a password:

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. If you have not changed them, they are indicated on the back of the router.
On the router settings page, go to the section Wireless → Wireless Security (Wireless → Wireless Security).
Please select WPA / WPA2 - Personal.
In field Wireless password (Wireless password) create and enter a password for the Wi-Fi network.
Click on Save (Save).

A password for the Wi-Fi network will be generated.

Turn on MAC address filtering

Each device that has network card or network interface, has its own MAC address. Create a list of MAC addresses for trusted devices or deny connections to devices with specific MAC addresses.

For example, we show the configuration of the TP-Link TL-WR841N router. To configure MAC filtering for trusted devices:

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. If you have not changed them, they are indicated on the back of the router.
On the router settings page, go to the section Wireless → MAC Filtering (Wireless → Wireless MAC Filtering).
Click on Add to (Add New).

Enter MAC address, device description and select status Included (Enabled).
Click on Save (Save).

Click on Enable (Enable).
Please select Allow access to stations specified in the included rules from the list (Allow the stations specified by any enabled entries in the list to access).

Only those devices whose MAC addresses you added to the list will have access to the router.

Reduce the range of your Wi-Fi signal

In the settings of the router, reduce the transmission power to the value when the network signal will be received only within your premises. Reduced radius wi-Fi signal will not allow strangers to connect to it.

For example, we show the configuration of the TP-Link TL-WR841N router. To reduce the range of your Wi-Fi signal:

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.

In the window Network connections double click Wireless network connection.
In the window condition click Wireless network properties.
In the window Wireless network properties go to tab Safety.
Select security type WPA2-Personal and change the network security key. Recommendations for creating a strong password in the article.
Click on OK.
Close the window condition.

The key and security type of the Wi-Fi network will be changed.

After changing the home Wi-Fi network settings, the devices will not be able to automatically connect to this network, so you need to reconnect to the wireless network. See detailed instructions on the site microsoft support for Windows 10, Windows 7, 8, 8.1, 10.

Asking how to secure a WiFi network. In this article, we will look at several techniques that will significantly complicate access to your network by unwanted users.

But when you create a Wi-Fi network, there is a threat to the security of your data. Everything that is transmitted over the wireless network is broadcast over a fairly tangible distance and attackers can gain access to this data. In order to protect a WiFi network from such an attack, you need to take a few simple steps.

Use a strong password to access your router settings

When setting up, be sure to change standard password... It does not follow the password path to access the router with a password (key) to connect to the network.

Use strong security mode.

Wireless -\u003e Wireless Security (Wireless -\u003e Wireless Security).
In field Version (Version) select WPA2-PSK.
In field Encryption (Encryption) select AES.
Click on Save (Save).

Disable WPS

Was the information helpful?

General Articles: General Articles

When you connect to public Wi-Fi, for example, in a cafe, the data is transmitted unencrypted. This means that your passwords, logins, correspondence and other confidential information become available to attackers. Email addresses can be used to send spam, and the data on your social network page can be changed.

A home Wi-Fi network can also be at risk if:

The network is protected by an easy password.
The network has a common name.
Disabled encryption.

Open your router settings

Enter the IP address of the router in the address bar of the browser, you will be taken to the authorization page for the router settings. The router's IP address is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. They are indicated on the back of the router.

Come up with a strong password to access your router

As a rule, a standard username and password are used to access the router settings. An attacker can find out the login and password from your router by downloading the user manual for the device from the manufacturer's website.

To prevent this from happening, change the password for the router. Use guidelines for creating strong passwords.

Come up with a unique name (SSID) for your Wi-Fi network

Often, rainbow tables are used to crack passwords. Predefined rainbow tables for popular SSIDs store millions of possible passwords. If your SSID and password are in such a table, then the attacker can instantly recover the password to the network using special programs.

To improve the security of your home wireless network, create an uncommon SSID.

Enter the IP address of the router in the address bar of the browser, you will be taken to the authorization page for the router settings. The router's IP address is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. If you have not changed them, they are indicated on the back of the router.
On the router settings page, select Wireless -\u003e Wireless Settings (Wireless -\u003e Wireless Settings).
In field Network name (Wireless Network Name) come up with and enter a name for the Wi-Fi network.
Click on Save (Save).

Come up with a strong Wi-Fi password

Without a password, your Wi-Fi network will be available to everyone. A strong password will prevent unauthorized people from connecting to it. Use guidelines for strong passwords.

For example, we show the configuration of the TP-Link TL-WR841N router. To change your password:

Enter the IP address of the router in the address bar of the browser, you will be taken to the authorization page for the router settings. The router's IP address is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. If you have not changed them, they are indicated on the back of the router.
On the router settings page, select Wireless -\u003e Wireless Security (Wireless -\u003e Wireless Security).
In field PSK password (PSK Password) create and enter a password for the Wi-Fi network.
Click on Save (Save).

Make your Wi-Fi network invisible

Hide the network name in the router settings. As a result, your Wi-Fi network will not appear in the list of available wireless networks. It will be impossible to detect it without special software.

Turn on encryption

When you work on a network with weak encryption, your data can be intercepted by attackers. If you are connecting to your home network and you receive a message about weak encryption, change the encryption type to a stronger one. Common types of wireless encryption:

The main difference between them is the level of protection. WEP is not as reliable as others, but it is supported by older hardware. WPA2 is the most secure.

For example, we show the configuration of the TP-Link TL-WR841N router.

To change the encryption type of a wireless network:

Enter the IP address of the router in the address bar of the browser, you will be taken to the authorization page for the router settings. The router's IP address is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. If you have not changed them, they are indicated on the back of the router.
On the router settings page, select Wireless -\u003e Wireless Security (Wireless -\u003e Wireless Security).
In field Version (Version) select WPA2-PSK.
In field Encryption (Encryption) select AES.
Click on Save (Save).

As practice shows, most users forget or neglect to protect their home network immediately after setting a password on Wi-Fi.

Securing your wireless network is not an easy task, but it is very important.

Having gained access to your network, an attacker can post illegal content with impunity or occupy your channel and significantly reduce the connection speed for which you, by the way, pay... It can also access not only your computer, but all devices on your network.

Instead of tempting fate - let's go through simple and obvious activities that users often neglect.

Hide SSID

The name of the network or SSID (Service Set Identifier), which we see when scanning the area around, looking for Wi-Fi. Knowing this network name, you can connect to one or another Wi-Fi network. By default, routers and access points show the SSID of your network to everyone. However, it can be disabled in the section of your router or access point. This section has an option Enable SSID or "Disable SSID" (Disable SSID)... We set or uncheck the box, depending on the option name in the corresponding router setting.

Turn on encryption

The next point is channel encryption. This option is also located in the section "Wireless Settings" and called "Encryption type" (Encryption settings)... We open the drop-down list and see pieces of 5 options to choose from ( depending on the router model). How do some types of encryption differ from others?

WEP (WIRED EQUIVALENT PRIVACY).
It was released back in the late 90s and is one of the weakest types of encryption. In many modern routers, this type of encryption is completely excluded from the list of possible encryption options. The main problem with WEP is a design error. WEP actually transmits several bytes of the encryption key (password) along with each data packet. Thus, regardless of the complexity of the password, you can crack any access point encrypted with WEP, intercepting a sufficient number of packets to crack the password.

WPS / QSS
WPS, aka QSS - allows you to forget about the password and connect to the network by simply pressing a button on the router. WPS allows a client to connect to an access point using an 8-character code consisting of numbers. But not everything is so rosy. By using only numbers, cryptographic strength of WPS is much lower than that of WEP and getting access to your network is easy.

WPA and WPA2 (WI-FI PROTECTED ACCESS)
Some of the most modern types of encryption at the moment and new ones have not yet been invented. WPA / WPA2 support two different initial authentication modes (password checking for client access to the network) - PSKand Enterprise.

WPA PSKor WPA Personal - This is the most common encryption option for home Wi-Fi networks. Connection to the network is carried out using a single password, which is entered on the device upon connection.

WPA Enterprise differs from WPA Personal in that its use requires a separate server - RADIUS (Remote Authentication Dial In User Service). Basically, a RADIUS server is a remote user authentication service that validates user credentials for authentication.

Setting up a MAC address filter

The most radical way to keep your home wifi network is to configure filtering devices by MAC address. A MAC address is a unique identifier for your device on the network. By it, you can filter devices that are allowed access to your network, or vice versa.

We go to the router settings section, which is called “MAC Filtering”... In it we add MAC addresses that can be authorized in your network. The MAC address of your device can be viewed either in the properties wireless connection, In chapter "additionally", if it is a computer, or in the settings of a smartphone or tablet, in the section "About device"... The MAC address consists of 6 blocks of 2 digits each hexadecimal system numbers separated by hyphens. For example: A0-23-1D-14-8C-C9.

Turning on guest access

By limiting access to the network by MAC address, you can significantly increase the level of security for your network. But what about friends and acquaintances who want to access the Internet through your connection, from their smartphones or tablets? Adding the MAC address of each device obviously takes longer than just giving the Wi-Fi password. For such a case, most modern routers provide guest access. Guest access implies that the router creates a separate network with its own passwordthat has nothing to do with your home. You can enable guest access (if any) in the section "Home network settings" or in “Wireless network settings”.

article

an article in the Kaspersky Lab blog.
VPN Kaspersky Secure Connection
Microsoft support site.

(System Tools → Password).
article.
Click on Save (Save).

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. If you have not changed them, they are indicated on the back of the router.
On the router settings page, go to the section ( Wireless → Basic Settings).
In field Wireless network name (Wireless Network Name
Click on Save (Save).

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. If you have not changed them, they are indicated on the back of the router.
On the router settings page, go to the section Wireless → Basic Settings (Wireless → Basic Settings).
Uncheck the box Enable SSID Broadcast (Enable SSID Broadcast).
Click on Save (Save).

Disable WPS

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.
On the router settings page, go to the section Wireless → WPS (Wireless → WPS).
Click on Disable (Disable).

Turn on encryption

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. If you have not changed them, they are indicated on the back of the router.
On the router settings page, go to the section ( Wireless → Wireless Security).
Please select WPA / WPA2 - Personal.
In field Version (Authentication Type) select WPA2-PSK.
In field Encryption (Encryption) select AES.
Click on Save (Save).

article.

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. If you have not changed them, they are indicated on the back of the router.
On the router settings page, go to the section Wireless → Wireless Security (Wireless → Wireless Security).
Please select WPA / WPA2 - Personal.
In field Wireless password (Wireless password
Click on Save (Save).

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. If you have not changed them, they are indicated on the back of the router.
On the router settings page, go to the () section.
Click on Add to (Add New).

Included (Enabled).
Click on Save (Save).

Click on Enable (Enable).
Select ().

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.

In the window Network connections double tap.
In the window condition click Wireless network properties.
In the window Wireless network properties go to tab Safety.
Select security type WPA2-Personal article.
Click on OK.
Close the window condition.

Windows 10, Windows 7, 8, 8.1, 10.

For all products: Software compatibility

For all products: Purchase and license

For all products: Before installation

For all products: Getting started

For all products: Program settings

For all products: Remove programs

For all products: Errors

For all products: Safe Money

For all products: Diagnostics and reports

For all products: Articles on My Kaspersky

For all products: Windows Articles

Home Wi-Fi networks are also at risk. Even the highest level of security for wireless networks: WPA2 encryption - can be “hacked” with a Key Reinstallation Attack (KRACK). For more details, see the article in the Kaspersky Lab blog.

Always follow these guidelines when connecting to any Wi-Fi network:

Make sure you have Firewall installed and enabled. This protection component scans network traffic and protects your computer from network attacks.
The Firewall is part of the Kaspersky Lab applications: Kaspersky Internet Security, Kaspersky Anti-Virus, Kaspersky Total Security, Kaspersky Security Cloud and Kaspersky Small Office Security.
Use a secure HTTPS connection. Make sure there is a green or gray lock icon in your browser's address bar. For more details, see the article in the Kaspersky Lab blog.
Secure your connection with a VPN by adding another layer of encryption. To do this, install Kaspersky Secure Connection on your device and enable secure connection every time you connect to the Internet.
If you are using operating system Windows, turn off the file and printer sharing service for all public networks you connect to. Instructions on the Microsoft support site.
Use mobile internet instead of public Wi-Fi whenever possible.

Come up with a strong password to access your router

For example, we show the configuration of the TP-Link TL-WR841N router. To change the password for accessing the router:

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. If you have not changed them, they are indicated on the back of the router.
On the router settings page, go to the section System Tools -\u003e Password (System Tools → Password).
Enter the username, old and new password to access the router. Recommendations for creating a strong password in the article.
Click on Save (Save).

The password for accessing the router will be changed.

Create a unique name (SSID) for your Wi-Fi network

Often, rainbow tables are used to crack passwords. Predefined rainbow tables for popular SSIDs store millions of possible passwords. If your SSID and password are in such a table, an attacker can instantly recover the network password using special programs.

To improve the security of your home wireless network, create an uncommon SSID.

For example, we show the configuration of the TP-Link TL-WR841N router. To change the name of the Wi-Fi network:

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. If you have not changed them, they are indicated on the back of the router.
On the router settings page, go to the section Wireless → Basic Settings (Wireless → Basic Settings).
In field Wireless network name (Wireless Network Name) come up with and enter a name for the Wi-Fi network.
Click on Save (Save).

The name for the Wi-Fi network will be changed.

Make your Wi-Fi network invisible

Hide the network name in the router settings. Your Wi-Fi network will not appear in the list of available wireless networks. It will be impossible to detect it without special software.

For example, we show the configuration of the TP-Link TL-WR841N router. To make your Wi-Fi network invisible to other devices:

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. If you have not changed them, they are indicated on the back of the router.
On the router settings page, go to the section Wireless → Basic Settings (Wireless → Basic Settings).
Uncheck the box Enable SSID Broadcast (Enable SSID Broadcast).
Click on Save (Save).

Your Wi-Fi network will be invisible to other devices.

Disable WPS

WPS is designed to make it easy for devices to connect to Wi-Fi networks. Using WPS, you can connect to the router without a password. We recommend disabling WPS in your router settings.

For example, we show the configuration of the TP-Link TL-WR841N router. To disable WPS:

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. If you have not changed them, they are indicated on the back of the router.
On the router settings page, go to the section Wireless → WPS (Wireless → WPS).
Click on Disable (Disable).

WPS technology will be disabled.

Turn on encryption

The main difference between them is the level of protection. We recommend WPA2 as it is the most reliable one offered.

For example, we show the configuration of the TP-Link TL-WR841N router. To change the encryption type of a wireless network:

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. If you have not changed them, they are indicated on the back of the router.
On the router settings page, go to the section Wireless → Wireless Security (Wireless → Wireless Security).
Please select WPA / WPA2 - Personal.
In field Version (Authentication Type) select WPA2-PSK.
In field Encryption (Encryption) select AES.
Click on Save (Save).

Wi-Fi network encryption will be enabled.

Create a strong Wi-Fi password

For example, we show the configuration of the TP-Link TL-WR841N router. To create a password:

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. If you have not changed them, they are indicated on the back of the router.
On the router settings page, go to the section Wireless → Wireless Security (Wireless → Wireless Security).
Please select WPA / WPA2 - Personal.
In field Wireless password (Wireless password) create and enter a password for the Wi-Fi network.
Click on Save (Save).

A password for the Wi-Fi network will be generated.

Turn on MAC address filtering

Each device with a network card or network interface has its own MAC address. Create a list of MAC addresses for trusted devices or deny connections to devices with specific MAC addresses.

For example, we show the configuration of the TP-Link TL-WR841N router. To configure MAC filtering for trusted devices:

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.
On the authorization page, enter your username and password. If you have not changed them, they are indicated on the back of the router.
On the router settings page, go to the section Wireless → MAC Filtering (Wireless → Wireless MAC Filtering).
Click on Add to (Add New).

Enter MAC address, device description and select status Included (Enabled).
Click on Save (Save).

Click on Enable (Enable).
Please select Allow access to stations specified in the included rules from the list (Allow the stations specified by any enabled entries in the list to access).

Only those devices whose MAC addresses you added to the list will have access to the router.

Reduce the range of your Wi-Fi signal

In the settings of the router, reduce the transmission power to the value when the network signal will be received only within your premises. Reduced Wi-Fi signal range will prevent unauthorized people from connecting to it.

For example, we show the configuration of the TP-Link TL-WR841N router. To reduce the range of your Wi-Fi signal:

Enter the IP address of the router in the address bar of your browser. You will be taken to the authorization page for the router settings. The IP address of the router is located on the back of the device and in the user manual.

In the window Network connections double click Wireless network connection.
In the window condition click Wireless network properties.
In the window Wireless network properties go to tab Safety.
Select security type WPA2-Personal and change the network security key. Recommendations for creating a strong password in the article.
Click on OK.
Close the window condition.

The key and security type of the Wi-Fi network will be changed.

After changing the home Wi-Fi network settings, the devices will not be able to automatically connect to this network, so you need to reconnect to the wireless network. See the detailed instructions on the Microsoft support site for Windows 10, Windows 7, 8, 8.1, 10.

I'll tell you a story that is still going on with one internet provider in my city. Once, visiting a friend, I asked him for Wi-Fi access. The network is preserved in the smartphone. While in another area of \u200b\u200bthe city, I suddenly found myself connected to Friend's wifi... How is this possible? It turns out that the Internet provider set the same network name and password for all routers that were issued to subscribers upon connection. More than one year has passed, and I still have free Wi-Fi in almost every yard. The login and password for accessing the routers, by the way, are also the same. :)

Naturally, I informed my friend about the funny discovery and reconfigured his router. Are you sure you are not in a similar situation?

Why unauthorized access to your Wi-Fi and router is dangerous

Imagine that an attacker connects to your Wi-Fi, downloaded several gigabytes of child pornography, and posted a couple of hundred extremist and other "incitement" messages. The contract for the provision of Internet services is drawn up for you, and, accordingly, they will also be asked for violation of the law.

Even if the connected person does not commit illegal actions, he can download and distribute for days large files (including illegal content from torrent trackers), which will affect the speed and stability of your Internet connection. The network is full of stories with free neighborhood Wi-Fi. Perhaps you are that kind neighbor too?

The situation when an outsider knows the login and password to the router itself includes all the above risks, and also adds several new ones.

For example, a joker simply changes the password to Wi-Fi and you lose access to the Internet. He can change the password for the router, and you will have to reset to factory settings and re-configure everything (or call a specialist if you do not have the appropriate skills) to regain control over your equipment. Also, the joker himself can reset the settings.

There is no absolute protection, but you don't need it.

There are many ways to hack networks. The likelihood of hacking is directly proportional to the motivation and professionalism of the hacker. If you have not made enemies for yourself and do not have any super valuable information, then you are unlikely to be purposefully and diligently hacked.

In order not to provoke random passers-by and neighbors eager for freebies, it is enough to close basic security holes. Having met the slightest resistance on the way to your router or Wi-Fi, such a person will abandon his plan or choose a less protected victim.

We bring to your attention the minimum sufficient set of actions with a Wi-Fi router, which will allow you not to become the object of cruel jokes or someone's free access point.

1. Access your Wi-Fi router

The first step is to take control of your own router. You must know:

Router IP address,
username and password to access the router settings.

To find the IP address of your router, turn the device over and look at the sticker below. There, among other information, the IP will be indicated. Usually this is either 192.168.1.1 or 192.168.0.1.

Also, the address of the router is indicated in the user manual. If the box with the instructions from the router has not been preserved, then find the user manual in in electronic format help google.

You can find out the address of the router yourself from your computer.

On Windows, press the combination windows keys + R.
In the window that appears, type cmd and press Enter.
In the window that appears, enter ipconfig and press Enter.
Find the line "Default gateway". This is the address of your router.

Enter the received IP address of the router in the browser. You will see a page for entering the router settings.

Here you need to enter a username and password, which you should know. In most cases, the default login is the word admin, and the password is either an empty field or also admin (the default login and password are also indicated at the bottom of the router). If the router came from an Internet provider, then call him and find out.

Without the ability to change settings, you effectively lose control of your own hardware. Even if you have to reset your router and re-configure everything, it's worth it. To avoid problems with accessing the router in the future, write down your username and password and keep them in a safe place without access for strangers.

2. Come up with a strong password to access the router

After gaining access to the router, the first step is to change the password. Router interfaces differ depending on the manufacturer, specific model and firmware version. In this matter, as well as in the subsequent steps to improve protection, you will be helped by the user manual for your router.

3. Come up with a unique name (SSID) for the Wi-Fi network

If your neighbors don't understand technology at all, then a network name like fsbwifi or virus.exe may scare them away. In fact, a unique name will help you better navigate among other access points and uniquely identify your network.

4. Create a strong Wi-Fi password

By creating a hotspot without a password, you effectively make it public. Strong password will prevent unauthorized people from connecting to your wireless network.

5. Make your Wi-Fi network invisible

You will reduce the likelihood of an attack on your network if it cannot be detected without special software. Hiding the access point name increases security.

6. Turn on encryption

Modern routers support different methods encryption of data transmitted over a wireless network, including WEP, WPA and WPA2. WEP is inferior to others in terms of reliability, but it is supported by old equipment. WPA2 is optimal in terms of reliability.

7. Disable WPS

WPS was created as a simplified way to create wireless networks, but in fact, it turned out to be extremely unbreakable. Disable WPS in the router settings.

8. Turn on filtering by MAC addresses

Router settings allow you to filter network access by unique identifiers called MAC addresses. Each device with a network card or network interface has its own MAC address.

You can create a list of MAC addresses of trusted devices, or deny connections to devices with specific MAC addresses.

If desired, an attacker can spoof the MAC address of the device from which he is trying to connect to your network, but for an ordinary household wireless access point, such a scenario is extremely unlikely.

9. Reduce the range of the Wi-Fi signal

Routers allow you to change the signal strength, thus increasing and decreasing the range of the wireless network. Obviously, you only use Wi-Fi inside your apartment or office. By lowering the transmission power to a value where the network signal is confidently received only within the premises, you, on the one hand, will make your network less visible to others, and on the other hand, you will reduce the amount of interference for neighboring Wi-Fi.

10. Update the router's firmware

There are no perfect technologies. Craftsmen find new vulnerabilities, manufacturers fix them and release patches for existing devices... By periodically updating your router's firmware, you reduce the likelihood that an attacker will take advantage of the flaws in older software versions to bypass security and access your router and network.

11. Block remote access to the router

Even if you protect your wireless network and logging in with passwords, attackers will still be able to access the router via the Internet. To protect the device from such outside interference, find the function in the settings remote access and disable it.

12. Firewall

Some routers have a built-in firewall - a means of protecting against various network attacks. Look in the security settings of your router for a function with a name like Firewall, "Firewall" or "Firewall" and enable it if present. If you see extra options firewall, read in official instructionshow to set them up.

13. VPN

Create a kind of encrypted tunnel for secure data transfer between the device and the server. This technology reduces the likelihood of identity theft and makes it difficult to find the user's location.

To use a VPN, you need to install a special client program on the gadget. Such software exists for mobile devices and computers. But some routers can connect to VPN services too. This function allows you to immediately protect all gadgets on the local Wi-Fi network, even if they do not have special programs.

You can find out if your router supports VPN in the instructions or on the manufacturer's website. The same goes for the required settings.