By taking a few minutes to properly set up and harden your router, you can prevent unauthorized users from taking control of your router and accessing your entire personal collections of IoT devices and data. Securing your router consists of updating the firmware, changing the default admin username and password for your router, changing your WiFi network password once every few months (or more often if you share your WiFi with guests), utilizing a firewall, and following a few simple tasks for maintenance.
Simple tasks are often ignored.
Reset to Factory: The easiest thing to do in the event of a compromised router is to reset your router to its factory defaults. Doing so will erase all custom changes made to the router, but it will also erase all malware infecting the device.
New Passwords: Of course, change your router’s admin password. This is the password you use to access the router’s Settings screen, not the password for your WiFi network (but change that one as well).
Once logged into your router, scan the list of connected devices for any you do not recognize. Make it a habit to periodically check your router to see which devices are connected.
The Risks: An Insecure Router Can Allow Someone To…
Redirect you to a web page that phishes for your credentials or tricks you into installing a compromised version of the software
Conduct man-in-the-middle attacks (MitM) or send the user to “evil twin” websites masquerading as often-used webmail or online-banking portals.
Be infected with malware to collect your browsing history and all website login credentials
Use your router as part of DDoS attacks against websites or for other devious purposes
Spy on you via your connected Internet-of-Things (IoT) devices that have cameras microphones and other sensors
Mine for cryptocurrencies using your computer’s resources (cryptojacking)
