A number of users are openly irresponsible about the security of their own wireless network and the protection of the equipment itself for distributing the Internet. It seems to them that no one needs their network, and there is no threat.
In fact, this is a big misconception. If you do not install reliable protection, you can face serious troubles.
Therefore, the most correct question is how exactly to create reliable protection and what methods can be used in this case.
Contents
What is the danger
To begin with, briefly about why an unsecured connection or an unprotected router can become a potentially serious problem and a big danger for the network owner.
But what exactly is the danger, many do not understand. There are the following possible scenarios and threats here:
- Posting provocative and illegal content by third parties. Using someone else’s network, all responsibility will fall on the person to whom the contract is drawn up. After all, it will not be difficult to find the offender. And then try to prove that it was not you who posted these videos, slogans and other content.
- The cost of traffic and the decrease in the speed of the Internet. The most harmless situation is when freeloaders use someone else’s network, surf the Internet, download some files. You pay for all this, plus you noticeably lose in speed.
- Factory reset. Some joker got access not only to Wi-Fi, but also to a router. And this is not so difficult to do. He ended up resetting the settings to the factory settings. Because of this, the owner of the equipment will have to reconfigure the connection.
This password is used to log into the control panel of many routers. And with such data it may be yours.
- Change of login and password. Or it may be that an attacker or just an ill-wisher neighbor will change the settings for accessing the router and it will no longer be possible to enter the menu.
It is unlikely that there is 100% protection against burglary. Especially if such attempts are made purposefully and by real experts in this field.
But if we talk about an ordinary user who naturally does not want to share the Internet with neighbors, then it is enough for him to patch several obvious holes in access protection, and this will be enough.
Basic methods of protection
Now directly to the question of what kind of Wi-Fi network protection you can choose for your Internet and equipment that provides wireless access.
There are a lot of options. But all existing protection measures can be conditionally divided into basic and additional ones. Although it is best to use them together, combine and match in the most user-friendly way.
The main task is to protect against possible unauthorized connection of neighbors and other freeloaders to the Wi-Fi network, as well as the safety of the equipment itself.
To exclude unauthorized access, and not make connecting to your Wi-Fi the simplest task, you can apply the following methods.
Router password
If you just purchased a router, it is unlikely that any changes have been made to its settings. And you need to do this in order to protect your Wi-Fi from impudent neighbors.
Before you can protect the Wi-Fi network itself, you need to secure the router. Usually, to access its settings, use a standard login and password written on the back cover or on the bottom of the equipment case. It will not be difficult to find out these passwords and logins, since they are even in the public domain. Having picked up several standard options for the manufacturer, an attacker can easily solve the riddle.
Therefore, you should definitely put good protection on a Wi-Fi router. And to do this, you need to enter the settings under a standard login and password, open the section with changing data and register your own invented login and the most complex, but easy to remember, password there.
After that, it will be even more difficult to restore access.
Strong SSID name
To protect your own Wi-Fi from unauthorized other users, it is also recommended to use a unique hardware name.
You can change it in the router settings by opening the “Basic settings” section. Although on some models the menu may differ slightly. The main thing is to find a section where you can set and change the name of your wireless network.
This is not to say that this will fully be able to protect your home WiFi network from any unauthorized access, if you do not apply additional methods, but with an integrated approach to building defensive lines, this is a mandatory step. Don’t ignore him.
Wi-Fi password
If you change the password and login for accessing the router, and at the same time install a strong code on the wireless network itself, it is unlikely that your neighbors will be able to get to the free Internet.
As you can see, one without the other has minimal protection power. And in the kit it allows you to get a serious result.
Invisible web
Also, in order to protect your home wireless Internet network using Wi-Fi technology, you can make it invisible altogether. It’s not that hard at all.
The meaning of the task is that when you enable the search for available networks from strangers, your wireless network is not displayed in the list. If you make the appropriate changes to the settings, your Wi-Fi will become invisible and inaccessible to other gadgets.
To do this, you need to open the router settings, go to the wireless settings section. There should be an item like Enable SSID Broadcast. It’s about enabling network broadcasting. You need to uncheck or disable this feature and save the changes.
This option turns off the display of your network.
You just need to check if your router specifically supports such a function. It is present on most modern models.
Disable WPS
If you decide to protect your own WiFi network with a strong password, but at the same time activate the WPS function, all efforts to come up with a complex access code will be in vain.
You should not abuse the inclusion of WPS. Yes, this is a handy technology that allows you to connect to the network without a password. But it is worth resorting to her help only in extreme cases. And if possible, turn it off altogether.
Disabling the WPS option itself is not difficult. This is done through the settings of the router in the WPS section.
Encryption
To establish really reliable protection for your Wi-Fi network, you must definitely choose the appropriate encryption option.
If the encryption is weak, it will be quite easy to intercept data from the side of attackers. It so happens that even when connecting to a home network, a message appears on the device screen about the use of weak encryption.
In this situation, you need to make the appropriate changes to the settings. After connecting to the router menu, it is recommended to set the following parameters in the wireless security section:
- select WPA-WPA2 Personal;
- in the “Version” field, set the WPA2 PSK value;
- in the section with encryption, set the AES option.
This is an example of how the settings change on TP-Link routers. Equipment from other manufacturers may differ slightly, but the general principles of changing the parameters remain unchanged.
Filtering MAC addresses
All devices that have a network interface or a network card have their own MAC address.
Therefore, the user can create a list of trusted addresses that can connect to your wireless network. This applies to a computer, laptop, smartphones, tablets, etc. If you managed to find the MAC address of a neighbor or third-party user who tried to connect without permission, you can simply add his address to the list of prohibited ones. No matter how he tried, he will not be able to connect from this MAC address.
But the best solution would be to create a list of trusted addresses, and restrict access for everyone else. As needed, if new gadgets appear in the house, their MACs are simply added to the previously created whitelist.
For the appropriate changes, just open the router settings, go to the wireless mode section and find the item with MAC addresses filtering there.
Network radius
Basically, in order for the wireless network to reach the signal to the most remote points of an apartment or house, the maximum transmitter power is turned on.
But if the apartment is small, or the router itself is very powerful, then the signal will easily reach the neighbors, go out into the street. This opens up additional opportunities for unauthorized access.
By reducing the range of the wireless signal, it will become available only within the apartment or house.
To change the corresponding parameters, you need to find the section with the transmitter power settings. It can be changed by changing the digital values, or by switching between the Low, Medium and High modes.
Additional measures
It is worth highlighting a few more additional measures that will help in many ways to strengthen the already reliable protection of access to your own home wireless network.
As in the previous case, all these methods are best used in a set.
Firmware upgrade
Periodically, there are messages that new vulnerabilities have been discovered in a particular router, security protocols. And users immediately begin to think that their turn to hack will soon come, and they are in danger.
In fact, you shouldn’t panic. Networks that are of little value to attackers are unlikely to be hacked. Rather, a question for freeloaders-neighbors.
But still, such a measure as a periodic firmware update will be correct and necessary. Some routers are updated simply by clicking the “Update” button in the corresponding section with settings.
In other cases, you need to download the latest firmware on the manufacturer’s official website, then open the router settings and update it through this file.
Approach the issue of choosing the firmware as responsibly as possible. If you take the wrong file, then when you load it, the equipment may stop functioning altogether.
Remote access
In some cases, this is a convenient function that allows you to manage and change the settings of the router over the Internet. That is, you do not need to be on your own home network.
But for the average user, this function is even dangerous in many ways. After all, attackers can use remote access. Therefore, it is recommended to open the settings and check if this option is disabled.
Guest access
Some brands and models of routers (routers) have a function that allows you to create additional networks. Or rather, subnets, for conditional guests. Moreover, they will have nothing to do with the main wireless network.
This is a great option for those who care about security, but at the same time have to often give access to the network for guests, visitors, friends.
If this feature is present on the router, it is worth using it.
Router and firewall
For routers, developers may suggest additional security measures and tools. This applies to a firewall, firewall, firewall, etc.
These tools are specifically designed to thwart attacks. Yes, for home Internet this is largely a waste. But if a wireless network is created within an office, an enterprise where you can get important and valuable information by hacking, you should not skimp on protected equipment.
Digging into the settings, you can activate the appropriate tools and significantly raise the level of network protection.
Router and VPN
Objectively, VPN is one of the most effective ways to protect data during transmission over the Internet and during wireless communication between devices.
A VPN creates a kind of encrypted tunnel that connects the nodes of the network.
Alas, this feature is only available in a limited number of routers. But if it is available, the data of all connected devices will really be under reliable protection.
Changing passwords periodically
Putting in a strong password and leaving it forever is not a good idea.
The correct solution is to periodically change the access codes. And this applies not only to the wireless network itself, but also to the passwords from the router.
This will give you more confidence in your safety. Therefore, it is recommended to carry out such events with an interval of 2-3 months.
Checking connected devices
There are many methods to find out who is connected to your wireless network. This can be done through the settings of the router itself, or by running special utilities.
Periodic verification of connections gives confidence that no third-party device is using your Internet for their own selfish purposes.
But it is also an opportunity to timely detect an attempt of unauthorized access, block the freeloader and protect yourself from the possible consequences of his actions.
Special equipment and programs
If you go beyond the usual home wireless network, and create a serious connection, then you cannot do without specialized equipment and reliable software.
This is usually necessary for those who store important and very valuable information on their computers. Then it makes sense to turn to specialized specialists.
Summing up
There is nothing fundamentally difficult about establishing a reliable and secure connection to a wireless home network.
The owner will need to change the standard passwords to more secure ones, choose a modern and effective type of encryption, turn off WPS and activate the available additional protection tools.
You should not get too carried away. Yes, if you wish, you can generally form a network where everything will be under strict control, and for other users the network will be inaccessible, sometimes even invisible. But this is already an option for those who fear for the safety of important and valuable data and do not want to risk it.
Subscribe, comment, ask relevant questions on the topic!