Routers are just computers without a keyboard or screen. But it is easy to forget that they need to be protected against cyberattacks. If you are short of time, watch the video for a quick introduction to our essential tips. But if you would like more detail, then read our six top tips below on how to protect your Wi-Fi router.
You will need access to your Speedport’s configuration settings for many of the following tips. Enter http://speedport.ip or http://192.168.2.1 in your Internet browser's address bar. Close any other web pages open on your computer. Then enter your router password. You will find it on the back or bottom of your router. That brings us to our first tip.
1. Change the router password
Many vendors ship preconfigured factory passwords for administration and for the Wi-Fi with their routers. That way users can set up their router quickly and easily. Deutsche Telekom’s Speedport routers also come with secure device-specific passwords for the Wi-Fi and the website where you update the router settings. Nonetheless, you should change these passwords the first time you use the router. You should also occasionally change the password afterwards. Issuing a new Wi-Fi password can prove time-consuming since the password is stored in laptops, smartphones and in many other devices. If, however, only you use the Wi-Fi password and you chose a very long, secure password the first time you set up your router, you do not need to change the password regularly. A good password should include a combination of upper and lower case, numbers and special characters.
2. Update software
Always enable automatic software updates on your devices where possible. Known as EasySupport on the Telekom Speedport routers, this function is enabled by default on all Speedports. Your router will receive updates regularly from Deutsche Telekom. The updates not only fix bugs in the router software. They also plug security gaps.
3. Set up encryption
Encryption is an essential function for protecting your Wi-Fi. Most Wi-Fi systems use WPA2-PSK, today’s most secure encryption method. Sounds complicated, but provides protection and we will show you how to set it up.
Instructions for Speedport routers
Log in (see above) > Home network > Wi-Fi basic settings > Name and encryption > Encryption type > Select WPA2
Instructions for Fritz!Box routers
The factory settings for your Fritz!Box Wi-Fi network already protect against unauthorized access by using secure WPA/WPA2 encryption and an individual Wi-Fi network key. To set up a Wi-Fi connection to the Fritz!Box, you will need to enter this network key manually on the Wi-Fi device (e.g. computer, smartphone, games console).
Enter fritz.box (without www) in your browser's address bar > Wi-Fi > Security > WPA encryption > WPA mode > WPA2 (CCMP) > Enter any password with between 8 and 63 characters in the input field “Wi-Fi network key” > Apply
4. Specify which devices can access your Wi-Fi
To optimally protect your home network, you can set up an access restriction in addition to WPA2 encryption. That way you can specify which devices can access your Wi-Fi network. This function also lets you see which devices already have access to your Wi-Fi so you can block certain devices where necessary.
Instructions for Speedport routers
Log in > Home network > Manage Wi-Fi access > Access restriction > Only allow certain computers in the Wi-Fi > Select known and trusted Wi-Fi devices > Save
Instructions for Fritz!Box routers
Log in > Wi-Fi > Security > Encryption > Restrict Wi-Fi access > Add Wi-Fi device
5. Set up guest access
Keep an eye on who can access your home network. Anyone using your home network, such as friends visiting you, surfs the net with your identity and can use the services your network provider configured for your Internet connection. The same people can also access all local resources in your home network, such as your photos stored on an open network drive. You should therefore only allow people or devices you trust to use your home network. Many newer routers, like Deutsche Telekom’s Speedport Smart, also support “guest access” to your private Wi-Fi. Guest access is separated from your home network so you can, for example, let your guests at a party use it. Guest access requires a separate password and can also be switched off or used for a time-limited period independently of your private Wi-Fi. That way you do not need to share your private Wi-Fi password.
Instructions for the Speedport Smart
Log in (see above) > Home network > Wi-Fi basic settings > Wi-Fi guest access > Use Wi-Fi guest access > Set Wi-Fi name (SSID) and Wi-Fi key for guests
Instructions for Fritz!Box routers
Log in > Wi-Fi > Guest access > Enable guest access > Set guest access name > Select WPA2 as encryption > Enter Wi-Fi network key > Apply
6. Regularly change the IP address
Changing your IP address regularly makes it more difficult for website operators to track what you do on the Internet. This function is available on most Speedport routers in two protection levels. If possible, select protection level 2 for optimum protection. That way, your Deutsche Telekom IP addresses are reissued every 96 hours between 2 a.m. and 5 a.m.
Instructions for Speedport routers
Log in (see above) > Internet > Telekom data protection > Select level 2 > Save
Instructions for Fritz!Box routers or older Speedport routers
Disconnect the router for at least 10 seconds from the mains power.
Or
Log in > Internet > Online monitor > Reconnect
