Your home network is the gateway to your data. Here’s how to secure it.
1. Router Firmware¶
- Update router firmware regularly
- Change default admin password
- Disable WPS
- Disable remote management
2. Wi-Fi¶
- WPA3 (or WPA2-AES)
- Strong password (20+ characters)
- Separate guest network
- Separate network for IoT devices
3. DNS¶
- Pi-hole for ad blocking
- DNS over HTTPS (DoH)
- Block known malware domains
4. Network Segmentation¶
VLANs to separate IoT, work, and personal devices.
5. VPN¶
WireGuard for remote access. Never expose services directly to internet.
6. Firewall¶
Block all incoming, allow only necessary traffic. Monitor unusual activity.
7. Updates¶
Automatic updates on all devices. Old, unsupported device = security risk.
Minimum Setup¶
Strong Wi-Fi password + current firmware + Pi-hole + VPN. Anyone can set this up in an afternoon.
networkingsecurityhome lab