How to reset smart devices and secure the Wi-Fi
To secure home Wi-Fi, factory-reset every smart device the seller left, then set each one up under your own account. On the router, change the admin password and network name, use WPA3 or WPA2 Personal, update the firmware, and turn off remote management, WPS and UPnP. Put smart devices on the guest network.
What you need to secure home Wi-Fi
You don't need to buy anything to start. Gather these first:
- The router's admin address and login. Look on its label or in its user guide. Default logins can be publicly listed, which is why you're changing them.
- A password manager or a notebook kept somewhere safe.
- A list of every connected thing in the house: doorbell, cameras, thermostat, locks, garage hub, speakers, sprinkler controller.
- The maker's reset steps for each device, usually on its support site.
You may need a new router if WPA2 or WPA3 isn't offered. The FTC's order is to update the router's software first, then consider replacing it if only WEP or WPA appears. CISA treats open networks, WEP, WPA and WPA2 with TKIP as not secure. If your internet provider supplied the router, ask them for an upgrade and whether it updates itself.
For passwords, CISA suggests a passphrase of 5 to 7 unrelated words, at least 16 characters long, used nowhere else.
Guest network for smart devices and where to put the router
Think of your network as two rooms. Your laptops and phones go on the main network. Smart devices that only need the internet go on the guest network, along with visitors and contractors. CISA says this keeps those devices from discovering your other gear or reaching your router settings. A guest's infected phone stays off your main network as well.
Put the router where people can't casually reach it. Anyone with hands on it can press reset and use the default details printed on the label, so a shelf in a shared entry or a garage is a poor spot.
Any camera that came with the house deserves extra care until you've reset it, because you can't tell who still has access. Unplug it or take it down if you can't reset it. The FTC also suggests checking camera access logs for unknown IP addresses or odd times.
How to factory reset smart devices and lock down the router
- Ask the seller to let go
Before closing if you can, ask them to remove each device from their apps and share any hub logins.
- Reset every inherited device
Follow the maker's factory-reset steps, then set the device up under your own account with a new password. Turn on two-factor login if it's offered.
- Lock down the router
Replace the admin username and password, then give the network a new name that doesn't reveal your name, address or router brand.
- Set encryption and the Wi-Fi password
Choose WPA3 Personal, or WPA2 Personal if that's all you have. Make the password long and unique.
- Update, then switch features off
Install any firmware updates. Turn off remote management, WPS and UPnP, and confirm the router's firewall is on.
- Build the guest network
Give it its own name and long password, then move smart devices and visitors onto it.
- Review who's connected
Open the list of connected devices, wireless clients or DHCP clients in the router's admin page. Investigate anything you can't name, then log out.
What it costs to secure smart home devices
| Item | What it costs | When you need it |
|---|---|---|
| Router and device settings | Free | Every home |
| Replacing a router | Varies; ask your provider first | If it can't do WPA2 or WPA3, or no longer gets updates |
| Replacing an orphaned device | Varies by device | If you can't reset it or get it off the seller's account |
Mistakes to avoid when you secure home Wi-Fi
- Assuming a seller's device is clean because it still works. Working doesn't tell you whose account controls it.
- Changing the Wi-Fi password but not the admin password. They're separate, and CISA says not to reuse one for the other.
- Skipping firmware. Updates fix known holes. Turn on automatic updates if your router has them.
- Leaving WPS and UPnP on for convenience. The FTC and CISA both say to turn them off, though you may need UPnP briefly while adding a device.
- Keeping devices you no longer use on the network. Older gear can weaken everything around it.
- Staying signed in to the router's admin page. Log out when you finish.
What homeowners say about how to secure your Wi-Fi network
Owners who inherit a previous owner's smart home describe it as untangling someone else's code: mystery hubs, dead apps and devices tied to old accounts. Many factory-reset or remove anything they can't fully take over. (Hacker News)
Where owners disagree: Owners repeatedly say to hold off on home automation: products are fussy, privacy is poor, and the next owner often rips it out. Owners who otherwise distrust smart gear still recommend water-leak sensors. (Hacker News)
Questions about smart home devices and your router
Do I need a new router when I move into a house?
Not usually. You need one if yours can't use WPA2 or WPA3 even after a software update. Ask your provider first if they supplied it.
Can the previous owner still see my cameras or doorbell?
They might, if the device is still tied to their account. Factory-reset it and set it up under your own account. If you can't do that, disconnect it.
Should smart home devices go on a guest network?
CISA recommends it for devices that only need internet access. It keeps them away from your computers and your router settings. Some devices need the same network as their hub, so check the setup guide.
General guidance for U.S. homes, not professional advice. For gas, electrical and structural work, call a licensed pro.