Securing Your Wireless Network

Most wireless routers, when using default settings, are designed to provide wireless access for anyone who requests it.   Have you secured your wireless network?   If not, you could have bigger problems than the occasional freeloader. Someone with ill intent could also obtain passwords, credit card numbers, your private photos, and other personal information if not properly secured. 

There are a variety of ways to boost wireless security.  The methods listed below are generally enough to prevent all but the most determined hacker from accessing your network.  Configuration options vary so refer to your router manufacturer’s documentation for more information.

Enable Encryption - Encryption scrambles messages sent over wireless networks so that they cannot be easily read if intercepted.   Several encryption methods exist, with WEP and WPA being the most common for home networks.   WEP is easy to crack using tools available on the Internet, so choose WPA unless you have older devices which do not support the newer method.

Change the Default SSID  - Wireless access points and routers broadcast an SSID to identify your network for those searching for a signal.   The default SSID is set by the manufacturer and should be  changed.   Hackers know that networks with default SSIDs are poorly configured and generally make easy targets.

Disable SSID Broadcast - By default, most wireless access points and routers broadcast the SSID at regular intervals.   Disabling this feature will make it more difficult to access your network. 

Change Default Router Administrator IDs and Passwords  -  The default login credentials provided by your router manufacturer are well known and in most cases even published on the router manufacturer’s website.  Change these immediately. 

Disable remote administration.  Many routers offer the ability to manage the router over the Internet.  I personally have never needed to reconfigure my router when away from home, and recommend not enabling this feature.

Disable wireless administration.  Disabling wireless administration will mean only those machines physically connected to the router can access the administration interface, thus boosting security. 

Turn Off the Network During Extended Periods of Non-Use - Shutting down your router will  prevent anyone from breaking in.   It’s not practical to do this daily, but you should be doing so during travel or extended periods offline.

Some people believe that simple MAC address filtering or disabling DHCP services can be used to secure a network.  Both of these methods make it more difficult for you to access your own network, but actually do little to defend against an intruder.

What do you think? Join the discussion...