Skip to main content

SecBytes 01: Basic WiFi Router Security Enforcement

Internet connectivity! It's becoming like a basic necessity these days. Outbreak of corona virus compelled us to sit at our home and lock ourselves. Could we do a day without internet? Yes, we could but not in a productive way. Statistics show that a large number of consumers are using WiFi routers to avail internet access from their devices.
Question arises, Is your connection safe? Is there any intruder in your wireless network? How would you know? How can you prevent? Read more below to impose a better yet easy to configure security in your WiFi router!

Type 192.168.0.1 or 192.168.1.1 into your browser and log into router admin panel. Default username and password is 'admin'. Please head over to user manual of your router to know the credentials if that doesn't work.

1. Change your password. Make sure it's not something which can be found in dictionary. You may try to mix special characters and uppercase-lowercase letters in your password which makes it quite difficult to crack or guess.

2. Change WPS pin and disable WPS. It's the most common way miscreants try to get into your network using the default WPS pin of your router which is often found on the box/ chasis of the router.
WPS settings on a TP-Link WiFi Router
3. Change your WiFi name. Sometimes different ISP follow a certain pattern in setting up WiFi routers. So by observing WiFi names, passwords can often be cracked in a jiffy. Try to use such names for WiFi, through which it will be difficult to identify you.

4. Change DNS Server. Often we don't care about the DNS server address. Misconfigured DNS servers can slow down your internet connection, also they can be used to steal your data and infiltrate your privacy online.
My recommendation- Open DNS (Primary DNS- 1.1.1.1; Secondary DNS- 1.0.0.1) & Google DNS (Primary DNS- 8.8.8.8; Secondary DNS- 8.8.4.4)
Learn more about DNS here.

5. Check your WiFi version and encryption. Recommendation- WPS2-PSK & AES respectively.
WiFi Security Settings
6. Check DHCP list for unwanted devices.
DHCP List
7. Disable all kind of port forwarding if you are not a pro at this.
8. Change default router admin panel IP address.
LAN IP Address
9. Change username and password of router admin panel.
Router Access Control

These are some of the basics actions you can take to secure your wireless network. Here I have used a TP-Link WR841N Router for demonstration purpose. Please tinker around your router to find these settings.
Some more measures can be taken like MAC Address Filtering, ARP Binding, Local access control of router admin panel etc. I have skipped those parts to keep this guide simple enough for everyone. Although I have plans to write another post for advanced users covering a wide range of topics to setup in consumer grade devices.

Comments

Popular posts from this blog

Vapoclean: A sensor guided hand-rub dispenser

Due to the outbreak of COVID-19, a huge amount of alcohol based disinfectants are being manufactured and supplied in many countries. But as the virus spreads through close contact, we wanted to bring down the number of times a person has to touch things. So, we made Vapoclean. Vapoclean is giving the following advantages to it's users: 1. Spraying ample amount of disinfectant as an equally distributed mist. Which ensures disinfection in the shortest time before the solution evaporates. 2. Decreases the amount of wastage. 3. Lessens down the hassle of refilling or replacing the container frequently. Project & Team Introduction Introduction User Manual Display View 01 Display View 02 Official Datasheet Copyright © 2020 Vapoclean by Shahrear Mahfuz, Md. Asifuzzaman, S M Kaiser Ahmed, Faizur Rahman. All Rights Reserved.

SkillBytes 03: The Ultimate LinkedIn Cheat Sheet

LinkedIn! An important platform for branding yourself. But do we know how to prepare a professional profile? Time to learn it today! Note: This post is contains content from  Leisurejobs . 1 - The perfect profile blue print There are more than 562 million professionals on LinkedIn. To stand out, you need to pay close attention to creating your profile. In this section, you'll learn how this is done. Name Include your first, last and middle name (if applicable). This is not the place for nicknames or humorous references to job titles such as "Sales Rockstar" or "Developer Ninja"! Profile photo First impressions matter during both business meetings and when people see your profile picture. Consider your industry in addition to potential consumers and peers to select an appropriate headshot. Banner photo You can also design a banner image that reflects you or your  website branding . Something that looks smart, looks on brand and captures attention. Profile photo r...

TechBytes 04: Hosting a simple HTTP File Server using HFS

Server! Sounds quite complicated and sophisticated, right? But do we know that any system that's capable of hosting some files could be called a file server? No? Let's see it ourselves today. We are going to create a file server through which files can be transferred across all the devices in a certain local area network. (If the appropriate ports are forwarded correctly, it can also work across wide area networks) This will definitely save us time and effort to transfer huge volume of data across systems without using long cables or pendrives every now and then. Let's download a small software named HFS from here  and open it. When opened for the first time, Windows firewall can ask for permission. Check all the boxes and click on Allow access. Now you'll see the interface of HFS like this. So as you can see, there's an address bar. It says 192.168.0.102:8080 Now if you try to put this address in any browser you'll see that your...