Secure a Router
If you choose to set up a router or wireless access point, you are responsible for all the incoming and outgoing traffic that passes through it. Because of this, ResTek strongly recommends you take steps to secure your wireless router and allow only those people you know and trust to make use of the wireless connection.
User’s manual
Every router has different instructions for securing the router. For specific instructions for your router, see the user’s manual or help guide. Many user guides are available online:
Linksys: Select your router, then click “User Guide”
D-Link: Select your router, then click on “Product Manual”
Belkin: Select your router, click “Download”, then download your “User’s Manual”
Netgear: Enter your router model into the search bar, select your router, and click on the documentation tab.
Recommended security measures
Change the default administrator password
Most routers come from the factory with the same default settings, making the passwords easy to guess. To prevent others from easily changing your device’s settings, change the default administrator password.
WiFi Protected Access (WPA/WPA2)
The best method to secure your wireless network is to use a strong security method such as WPA. This will require a pre-shared key, sometimes referred to as a passphrase, to connect to your wireless network. In addition to preventing others from using your connection, WPA also provides encryption to secure your personal information as it travels between your router and computer.
WPA is supported by most modern wireless devices. We recommend you use WPA2 (the latest standard) if possible. WEP, an older method for securing wireless networks, has well-known weaknesses and should not be used.
Other measures
Network name (SSID) broadcast
You have the option to disable “SSID broadcast.” If you disable this option, a computer must know the specific name of your wireless network in order to connect to it. In other words, they won’t automatically see it in the list of available networks. People who know (or discover) the SSID can still connect unless other measures are in place.
MAC filtering
Each networking device (e.g., Ethernet card, wireless card) has a unique address known as a “MAC address” built into it. It is made up of a series of 10 letters and numbers (0-9, A-F). you can configure your router to only allow devices with specific MAC addresses to connect. This can be a hassle when you want to allow a friend to connect, and it’s not a good security measure. People can easily change their MAC address to one that is allowed, thereby circumventing this security measure.