Is my Wi-Fi secure?

Nine quick questions, based on CISA's home Wi-Fi basics. Answer what you know, and you'll get a short to-do list with links to the steps. This runs in your browser. It doesn't scan or touch your network.

Menu names vary by router brand, by mesh apps, and by whether your internet provider supplied the box. Look for the same idea.

0 of 9 answered

I've changed the router's admin password from the default.

This is the password that lets someone change the router, not the password people type to join Wi-Fi. Defaults are easy to look up.

How do I check?

If you still sign in to the router with the password on the sticker, it's the default. If your provider manages the box, use their app or ask them.

My Wi-Fi uses WPA3 Personal, or WPA2 AES if WPA3 isn't available.

CISA treats WPA3 Personal and WPA2 AES as the two options that are still acceptable for a home network.

How do I check?

In the wireless security settings, look at the security or encryption type. On Windows you can also see it in the Wi-Fi network's properties. If your provider manages the box, use their app or ask them.

My network is not using WEP, the original WPA, TKIP, or no password at all.

The guide says to avoid an open network, WEP, the original WPA, and TKIP-only.

How do I check?

Look at the same security type. If you see WEP, WPA, TKIP, or no password, this is a No.

I've changed the Wi-Fi name from the default, and it doesn't include my name or address.

A default name hints at the router model. Don't put your name, street, or apartment number in it.

How do I check?

If the name still looks like the manufacturer or the ISP, it's the default.

My Wi-Fi password is a long passphrase I don't use anywhere else.

CISA suggests a memorable passphrase of five to seven unrelated words, at least 16 characters, and not reused on other accounts.

How do I check?

This is a different password from the admin login.

Visitors and smart-home gadgets use a guest network.

CISA recommends putting visitors and internet-only smart home devices on the guest network so they don't sit next to your laptops and shared files.

How do I check?

Look for Guest, Guest network, or Guest Wi-Fi.

I've checked for router firmware updates recently, or auto-update is on.

Look for Firmware, Router update, System update, or Administration, and install an update if one is waiting.

How do I check?

If your provider manages the box, use their app or ask them.

Remote management (remote access from the internet) is off, unless I use it on purpose.

CISA recommends turning it off unless you have a specific reason to use it.

How do I check?

Look for Remote management, Remote access, or Remote administration.

WPS is turned off, if my router lets me.

CISA recommends disabling WPS. It's convenient and has a known weakness in the PIN method.

How do I check?

It may be labeled WPS or Wi-Fi Protected Setup. Skip it rather than guessing if you can't see a clear switch.

Also see Set up a guest network, Password strength check, and Should I restart the router?.

Would you rather walk through the router settings together? I can connect remotely. Support is after-hours, nationwide, with local help in the Dallas–Fort Worth area. Details are on the Work with me page.

Get new security checkups and fixes when I add them.

// need hands-on help? after-hours remote IT, nationwide + DFW

work with me →

Is my Wi-Fi secure?

Get the newsletter