Corporate Responsibility

How to make your router safe

  • Share
    Two clicks for more data privacy: click here to activate the button and send your recommendation. Data will be transfered as soon as the activation occurs.
  • Print
  • Read out

Routers are just computers without a keyboard or screen. But it is easy to forget that they need to be protected against cyberattacks. If you are short of time, watch the video for a quick introduction to our essential tips. But if you would like more detail, then read our six top tips below on how to protect your Wi-Fi router.

You will need access to your Speedport’s configuration settings for many of the following tips. Enter http://speedport.ip or http://192.168.2.1 in your Internet browser's address bar. Close any other web pages open on your computer. Then enter your router password. You will find it on the back or bottom of your router. That brings us to our first tip.

1. Change the router password

Many vendors ship preconfigured factory passwords for administration and for the Wi-Fi with their routers. That way users can set up their router quickly and easily. Deutsche Telekom’s Speedport routers also come with secure device-specific passwords for the Wi-Fi and the website where you update the router settings. Nonetheless, you should change these passwords the first time you use the router. You should also occasionally change the password afterwards. Issuing a new Wi-Fi password can prove time-consuming since the password is stored in laptops, smartphones and in many other devices. If, however, only you use the Wi-Fi password and you chose a very long, secure password the first time you set up your router, you do not need to change the password regularly. A good password should include a combination of upper and lower case, numbers and special characters.

2. Update software

Always enable automatic software updates on your devices where possible. Known as EasySupport on the Telekom Speedport routers, this function is enabled by default on all Speedports. Your router will receive updates regularly from Deutsche Telekom. The updates not only fix bugs in the router software. They also plug security gaps.

Enter fritz.box (without www) into your browser’s address bar and then type in your router password (not the Wi-Fi password), provided you already set one up.

System > Update > Search for new Fritz!OS > Start update now

Video instructions

3. Set up encryption

Encryption is an essential function for protecting your Wi-Fi. Most Wi-Fi systems use WPA2-PSK, today’s most secure encryption method.  Sounds complicated, but provides protection and we will show you how to set it up.

Instructions for Speedport routers

Log in (see above) > Home network > Wi-Fi basic settings > Name and encryption > Encryption type > Select WPA2

Verschlüsselung einrichten

Set up encryption

Instructions for Fritz!Box routers

The factory settings for your Fritz!Box Wi-Fi network already protect against unauthorized access by using secure WPA/WPA2 encryption and an individual Wi-Fi network key. To set up a Wi-Fi connection to the Fritz!Box, you will need to enter this network key manually on the Wi-Fi device (e.g. computer, smartphone, games console).

Enter fritz.box (without www) in your browser's address bar > Wi-Fi > Security > WPA encryption > WPA mode > WPA2 (CCMP) > Enter any password with between 8 and 63 characters in the input field “Wi-Fi network key” > Apply

4. Specify which devices can access your Wi-Fi

To optimally protect your home network, you can set up an access restriction in addition to WPA2 encryption. That way you can specify which devices can access your Wi-Fi network. This function also lets you see which devices already have access to your Wi-Fi so you can block certain devices where necessary.

Instructions for Speedport routers

Log in > Home network > Manage Wi-Fi access > Access restriction > Only allow certain computers in the Wi-Fi > Select known and trusted Wi-Fi devices > Save

Instructions for Fritz!Box routers

Log in > Wi-Fi > Security > Encryption > Restrict Wi-Fi access > Add Wi-Fi device

5. Set up guest access

Keep an eye on who can access your home network. Anyone using your home network, such as friends visiting you, surfs the net with your identity and can use the services your network provider configured for your Internet connection. The same people can also access all local resources in your home network, such as your photos stored on an open network drive. You should therefore only allow people or devices you trust to use your home network. Many newer routers, like Deutsche Telekom’s Speedport Smart, also support “guest access” to your private Wi-Fi. Guest access is separated from your home network so you can, for example, let your guests at a party use it. Guest access requires a separate password and can also be switched off or used for a time-limited period independently of your private Wi-Fi. That way you do not need to share your private Wi-Fi password.

Instructions for the Speedport Smart

Log in (see above) > Home network > Wi-Fi basic settings > Wi-Fi guest access > Use Wi-Fi guest access > Set Wi-Fi name (SSID) and Wi-Fi key for guests

Video instructions

Instructions for Fritz!Box routers

Log in > Wi-Fi > Guest access > Enable guest access > Set guest access name > Select WPA2 as encryption > Enter Wi-Fi network key > Apply

6. Regularly change the IP address

Changing your IP address regularly makes it more difficult for website operators to track what you do on the Internet. This function is available on most Speedport routers in two protection levels. If possible, select protection level 2 for optimum protection. That way, your Deutsche Telekom IP addresses are reissued every 96 hours between 2 a.m. and 5 a.m.

Instructions for Speedport routers

Log in (see above) > Internet > Telekom data protection > Select level 2 > Save

Changing the IP address

Changing the IP address

Instructions for Fritz!Box routers or older Speedport routers

Disconnect the router for at least 10 seconds from the mains power.

Or

Log in > Internet > Online monitor > Reconnect

Change the IP address

Changing the IP address. AVM devices, which were acquired in Germany, do not offer the possibility to change the menu language.

DT series on data privacy.

Data privacy made easy

Deutsche Telekom series on data privacy shows how easy it is to keep our smartphone use secure.

FAQ