Review and secure a home Wi-Fi network Guided Practice

Lab brief

Know the problem and the evidence you need

The situation

A home router is working, but its administrator access, encryption mode, password hygiene and guest-network separation have not been reviewed recently.

Your finished record

A prioritized home Wi-Fi security review

Create a privacy-safe security checklist and make at most one authorized, reversible improvement with verification.

Why this matters

Router security depends on a small set of verifiable controls—administration access, firmware, encryption, passphrases, guest access, and remote features—not vague “secure” labels.

Safety and setup

Prepare before changing anything

Have this ready

Obtain the network owner’s permission and confirm that you can reconnect essential devices.
Export a router configuration backup when supported, or record the original settings before any change.
Do not factory-reset, flash firmware, expose remote administration, open ports or disable the firewall in this lab.

Field checks

Run the lab

Complete one check at a time. Record the evidence before moving on.

0 of 5 checks complete

Check 1 of 5 Record the original security state Do thisRecord the router model family, current security mode, guest-network state and whether remote administration is enabled without recording passwords. Record thisA rollback-oriented checklist that excludes credentials and public addresses.
Check 2 of 5 Review administrator access Do thisConfirm the administrator password is unique, default credentials are not active and management is limited to trusted local access when possible. Record thisA pass/fail record for administrator account hygiene and management exposure.
Check 3 of 5 Review Wi-Fi security mode Do thisConfirm WPA2-AES or WPA3 is used where supported and obsolete WEP or WPA modes are not enabled. Record thisA documented current mode and compatibility constraint, if any.
Check 4 of 5 Review guest-network separation Do thisCheck whether visitors and less-trusted devices can use a guest network without reaching trusted local devices. Record thisA documented guest-network and local-access state.
Check 5 of 5 Verify one authorized change Do thisMake at most one approved reversible improvement, reconnect a test device and verify normal local and internet access. Record thisA successful verification or a rollback to the recorded original setting.

Interpret results

Match the evidence to the next action

If you seeNext action

Default administrator credentials or remote management are exposed

Prioritize administrator access control before performance tuning.

Only obsolete Wi-Fi security is available

Check vendor support and plan hardware replacement; do not weaken all clients to preserve one legacy device without review.

A change disconnects essential devices

Use the recorded rollback settings, restore service and plan compatibility work separately.

Decision point

Choose the next action

Keep only changes that preserve required access and improve the documented security state; escalate firmware, replacement and complex segmentation work.

Completion

Confirm the evidence you produced

Finished record: A prioritized home Wi-Fi security review

I recorded original settings or created a supported configuration backup.
I reviewed administrator access, Wi-Fi security and guest separation.
I verified one authorized change or restored the original configuration.

I recorded the evidence and selected a next action.