Home Wi‑Fi Defensive Playbook

1. Router & Firmware Hardening

• Update firmware regularly — check manufacturer site or app and apply updates.
• Disable remote administration unless you specifically need it.
• Change default admin credentials to a strong unique password.
• Disable UPnP and WPS — convenient but often exploitable.

2. Wi‑Fi Network Security

• Use WPA3 (or WPA2 if needed). Never use WEP.
• Rename your SSID — avoid default names that reveal model/brand.
• Strong Wi‑Fi password — 16+ characters with mixed character types.
• Enable a guest network for visitors and IoT devices—keep it isolated from your main network.

3. Device Layer Protection

• Keep all devices updated — OS and apps.
• Install reputable antivirus/EDR on computers and phones.
• Remove unknown/unused devices — review the router's device list regularly.

4. Network Monitoring & Logging

• Check connected devices weekly via admin page/app.
• Enable logging on router and review for suspicious activity.
• Set up alerts (new device connected notifications) if supported.

5. Advanced Defenses

• Enable router firewall or use a dedicated firewall (pfSense, OPNsense).
• Use a VPN on the router or devices for extra privacy.
• Use secure DNS (Cloudflare/1.1.1.1, Quad9) with malware filtering.

6. Physical Security & Redundancy

• Place router in a secure location to prevent tampering.
• Power cycle occasionally to clear temporary exploits.
• Backup configuration after hardening so you can restore safely.

7. Emergency Response Plan

1. Disconnect the router from the internet.
2. Factory reset the router and reapply secure settings.
3. Change all Wi‑Fi and router admin passwords.
4. Scan connected devices for malware and isolate infected machines.
5. Review logs for unusual connections or data exfiltration.