Your Wi-Fi connects every computer, phone, printer and payment terminal in your business. If it’s left on default settings, it’s an easy way in for attackers, or for a neighbor who uses your internet. These 10 steps take under an hour and make a big difference.
Before you start
You’ll need to log in to your router’s admin page. The address and default login are usually printed on a sticker on the router (often something like 192.168.1.1), or in your internet provider’s app. If your provider manages the router, ask them to make these changes for you.
The 10-step checklist
1. Change the router’s admin password
This is the password for the router’s settings, not the Wi-Fi password. Default admin passwords are easy to find online. Set a long, unique one and save it in a password manager.
2. Use WPA3 (or WPA2) encryption
In the wireless settings, choose WPA3, or WPA2/WPA3 mixed mode if some older devices can’t connect. Never use WEP or an open network.
3. Set a strong Wi-Fi password
Use at least 12–16 characters. A short phrase of random words works well, for example Blue-Lantern-Coffee-42. Don’t use your business name or phone number.
4. Create a separate guest network
Customers and visitors should use a guest Wi-Fi that can’t see your business computers, printers or cameras. Most routers have a “Guest network” option. Turn on “client isolation” if available.
Share the guest password with a Wi-Fi QR code so you don’t need to say it out loud.
5. Rename the network (SSID)
Change the default name (like “TP-Link_1234”) to something neutral. Avoid names that reveal the router brand or say “Office-Main-Server.”
6. Update the router’s firmware
Check for updates in the admin page and turn on automatic updates if available. If your router no longer gets updates (often after 5+ years), it’s time to replace it.
7. Turn off WPS and remote management
- WPS (the push-button or PIN connection) has known weaknesses, so switch it off.
- Remote management lets the router be managed from the internet. Turn it off unless your IT provider needs it.
8. Separate payment and business devices
Keep card terminals, POS systems and office computers on the main (staff) network, never on guest Wi-Fi. Security cameras and smart devices can go on their own network if your router supports it.
9. Change the Wi-Fi password when staff leave
Anyone who knew the staff Wi-Fi password still knows it after they leave. Change it when someone departs, and at least once or twice a year.
10. Place the router safely
Keep the router in a locked or staff-only area, so nobody can press the reset button or plug in a cable.
Extra protection
- Turn on two-step verification for email and cloud accounts. Wi-Fi security is only one layer.
- Keep computers updated and use antivirus.
- Don’t do banking or admin work on public Wi-Fi without a trusted VPN.
Go through the full cybersecurity checklist next.
Quick checklist
- ☐ New router admin password
- ☐ WPA3 or WPA2 encryption
- ☐ Strong Wi-Fi password (12+ characters)
- ☐ Separate guest network
- ☐ Neutral network name
- ☐ Firmware up to date
- ☐ WPS and remote management off
- ☐ Payment devices on the staff network
- ☐ Password changed when staff leave
- ☐ Router in a secure place