The problem: the most important device in your house is the one you ignore
Every phone, laptop, television, and smart gadget in your home reaches the internet through a single box: your router. It runs around the clock, it is the front door to everything on your network, and most families set it up once and never touch it again. That is exactly what attackers count on, and reason enough for a home router security checkup. The warnings this year have been plain: an April 2026 public service announcement from the FBI and the NSA told home and small-office router owners that a foreign intelligence service was quietly taking over neglected ones, and the major makers have shipped security fixes month after month. What the agencies asked for adds up to the checkup below.
Why the usual advice falls short
Most home-security advice stops at the devices you look at every day. The router asks for no attention, shows no symptom, and keeps running for years after its last fix, and after it has been taken over. In March 2026 an FBI alert on the AVrecon router malware described some 369,000 devices, most of them home and small-office routers, turned into relays rented out to strangers, the same trade this site described in smart TVs. Still working is not the same as still safe. The good news: tending it is a short, occasional chore, not a technical project.
Two terms this site uses. The FIRM System (Family Information Resource Management) is the organizational system for a family’s information, built so the right person can reach the right thing at the right time. The SAFE Framework divides that information into four Areas of Focus: System, At-Home, Financial, and Estate. Your home network sits in Area of Focus 1: System, in the Network Module, and it deserves fifteen minutes.
The guidance: a fifteen-minute checkup
Five moves.
1. Update the firmware, and switch on automatic updates
Open the router’s app or settings page and install any waiting update. Updates fix things a password change cannot: this year one maker patched several models after researchers found login material baked into the firmware itself. Switch on automatic updates if your router offers them. If it does not, that is your cue for a calendar reminder: quarterly if you have to do it by hand, twice a year to confirm the automatic ones are landing. If the maker’s name is on the box, its support site will tell you whether your model still gets fixes and whether one is waiting.
2. Change the admin password
The password that guards the router’s own settings is not your Wi-Fi password. Many routers ship with a factory default that anyone can look up. Set a long, unique admin password and store it in the Vault, the FIRM System’s home for secrets, where the next person who needs it can find it.
3. Switch off remote management
Find the setting that lets the router be managed from outside the house (makers call it remote management, remote access, or cloud access) and switch it off unless you know you use it. The switch takes the router’s settings off the public internet, which is what the FBI asked owners to do, and everything inside the house works as before.
4. Retire a router that no longer gets fixes
Hardware has an end date. When a maker marks a model end of life or end of support, the fixes stop for good. NETGEAR’s October 2026 security advisory listed seven models it has stopped supporting, two of them with a flaw it says it will not fix. The only remedy for a router like that is a new router. When you shop for the replacement, choose a maker that publishes security advisories and support dates: Security Now (Steve Gibson and Leo Laporte) discussed in its September 1, 2026 episode a bargain white-label brand, sold under several names, whose routers shipped with a built-in back door and no fix on the way.
5. While you are in there
Give the Wi-Fi itself a long, unique password, stored in the Vault, and put your smart-home gadgets and visitors on a separate guest network, apart from the computers and phones that hold your family’s real information. Then write it down: make and model in the Secure Guide (how things work); in the Family Guide (what exists and who to call), who looks after the network and that its admin password lives in the Vault.
Quick reference
- Update the firmware, and switch on automatic updates if your router offers them.
- Change the admin password (not the Wi-Fi password): long, unique, stored in the Vault.
- Switch off remote management unless you know you use it.
- Replace any router marked end of life or end of support; no fixes are coming.
- Use a long, unique Wi-Fi password, and a guest network for gadgets and visitors.
- Record it: make and model in the Secure Guide; in the Family Guide, who looks after the network and that its admin password lives in the Vault; the password itself in the Vault.
- Calendar the next home router security checkup: quarterly by hand, twice a year to confirm automatic updates are landing.
The takeaway
The router is the front door to your family’s digital life, and the one door most households never check. The whole chore: update it, give it a real password, close the outside door, and replace it when it can no longer be updated — a quarter of an hour that buys a locked front door. Put the next check on the calendar, and the device you never think about can go back to being exactly that, this time on purpose.
Not sure where your family stands? The free Recoverability Self-Assessment takes about ten minutes and tells you which Area to start with.