Home router setup and Wi-Fi security
Setting up a home router properly means logging into it once, changing the default credentials, updating the firmware, and choosing the strongest Wi-Fi security your devices support. This guide walks through that procedure in order, compares the WEP, WPA, WPA2 and WPA3 generations, and explains what a router and DNS actually do.
| Generation | Became available |
|---|---|
| WEP | Before 2003 |
| WPA | 2003 |
| WPA2 | 2004 |
| WPA3 | Announced January 2018 |
| Device support (2023) | — |
| Router role | — |
A router forwards data packets between computer networks by reading the network address in each packet header and consulting its routing table.
When a computer on your home network sends data to a website, the request leaves as IP packets. Each packet carries a network address in its header. The router reads that address, looks up where it should go in its routing table, and forwards the packet toward the Internet.
The same process runs in reverse. Packets arriving from the Internet are matched against the routing table and delivered to the correct device on the local network. Home and small office routers perform this forwarding between the home computers and the Internet.
Because the router sits at the boundary of your network, its configuration determines who can join the Wi-Fi, how traffic is secured, and how names are resolved into addresses.
Four dated milestones define which security modes a home network should use today.
Work through these steps in order; each one removes a specific failure mode before the next begins.
Start with a wired connection to the router so the setup is not interrupted by a Wi-Fi change. Log in to the router's administration interface using the address and credentials printed on the device, then immediately change the default administrator password.
Check for a firmware update before touching anything else. Router firmware is the software that runs the forwarding and security functions; an outdated version may carry known weaknesses.
Set the network name (SSID) to something recognizable but not personally identifying, and choose a strong passphrase. Enable the strongest Wi-Fi security mode your devices support — WPA3 where available, WPA2 as the fallback.
WEP, WPA, WPA2 and WPA3 are four generations of Wi-Fi security certification, and only the last two should be used today.
WEP, WPA, WPA2 and WPA3 are three security certification programs developed by the Wi-Fi Alliance after serious weaknesses were found in WEP. WEP itself predates the certification programs and is now considered broken.
WPA became available in 2003 as an intermediate measure. WPA2, based on IEEE 802.11i, became available in 2004 and became the practical baseline for home networks. The Wi-Fi Alliance announced WPA3 in January 2018 with several security improvements over WPA2.
As of 2023, most computers connecting to a wireless network support WPA, WPA2 and WPA3. That means the choice of security mode is usually limited by the oldest device you still use, not by the router itself.
| Generation | Became available | Based on | Current standing |
|---|---|---|---|
| WEP | Before 2003 | Original 802.11 encryption | Broken; do not enable |
| WPA | 2003 | Interim measure after WEP weaknesses | Not recommended |
| WPA2 | 2004 | IEEE 802.11i | Practical baseline for home networks |
| WPA3 | Announced January 2018 | Wi-Fi Alliance program | Preferred where supported |
| Device support (2023) | — | — | Most computers support WPA, WPA2 and WPA3 |
| Router role | — | — | Forwards packets between home computers and the Internet |
Facts are drawn from the stated roles of routers and from the dated history of the WEP, WPA, WPA2 and WPA3 certification programs.