KREN awareness programme for Kosovo schools

Emergency: 192
KREN KREN CyberHygiene
🆘 Help

Home / Devices / Home Wi-Fi and router

Home Wi-Fi and router

The router is the internet doorway for the whole home. A new admin password, WPA3/WPA2, WPS switched off and up-to-date firmware protect every device in the family.

All the devices at home – phones, computers, TVs, consoles – go through the router. If the router still has its factory password or old software, an attacker could change its settings, redirect websites to fake versions or use your internet connection for attacks.

Many routers in Kosovo are provided by the internet provider. You can change some settings yourself; for others (e.g. the firmware) you may need your provider's help.

The admin page, menu names and options vary a lot depending on the router brand and model (TP-Link, Huawei, ZTE, Nokia, Mikrotik, Asus, etc.). The address and sign-in details are usually on the label underneath the router.

⚙️ Step-by-step settings

Menu names may differ slightly depending on the model and version.

Sign in to the router's admin page

All the security settings are changed here.

  1. Connect to your home Wi-Fi or plug in with a cable.
  2. Look at the label underneath the router for the address (often 192.168.0.1, 192.168.1.1 or a web-style address) and the sign-in details.
  3. Type the address into your browser. Some routers are managed with the manufacturer's mobile app.
  4. If the router belongs to your provider and you don't have the sign-in details, contact your internet provider.
  5. Never open the admin page through links you receive by email or message.

Change the administrator password

The factory password (e.g. admin/admin) is publicly known.

  1. On the router page, find System, Administration or Management.
  2. Choose Administrator password / Change password.
  3. Set a long, unique password (e.g. a phrase of 4–5 words), different from your Wi-Fi password.
  4. Save it in a password manager, or write it down and keep it somewhere safe at home.
  5. If the router allows it, change the administrator username too.

Use WPA3 or WPA2 encryption and a strong Wi-Fi password

Strong encryption stops neighbours or strangers from connecting and eavesdropping on your traffic.

  1. Go to Wireless / Wi-Fi / WLAN → Security.
  2. Choose WPA3-Personal (SAE) if all your devices support it; otherwise WPA2/WPA3 (mixed mode) or WPA2-Personal (AES).
  3. Never use WEP, WPA (without a number) or an open network. Avoid TKIP.
  4. Set a Wi-Fi password of at least 12–16 characters that doesn't include your family name, address or phone number.
  5. Change the network name (SSID) to something neutral – don't use your surname or flat number.
  6. After the change, reconnect all your devices with the new password.

Turn off WPS, remote access and UPnP

These features make connecting easier, but they also open doors for attackers.

  1. In Wireless → WPS → Disable. WPS with a PIN can be cracked easily.
  2. In Administration / System → Remote Management (Remote Access, WAN Access) → turn it off, unless your provider needs it for support.
  3. In Advanced / NAT → UPnP → turn it off unless a console or particular app needs it. If online gaming has problems without it, you can turn it back on, knowing the risk.
  4. Check Port Forwarding / Virtual Server and delete any rules you don't recognise.
  5. Save your changes (Save / Apply).

Update the router's firmware

Old routers have known holes that attackers exploit on a massive scale.

  1. In System → Firmware Upgrade / Software update, check for new versions.
  2. Turn on automatic updates if they're offered.
  3. Only download firmware from the manufacturer's official website or through the router itself.
  4. Don't switch off the router during the update.
  5. If the router belongs to your provider, ask them how it gets updated. If the manufacturer no longer supports the model, get a new router.

Create a guest network

Guests and IoT devices shouldn't have access to the family's computers and phones.

  1. In Wireless → Guest Network → turn it on.
  2. Set a separate name and password (WPA2/WPA3).
  3. Turn off the option that lets guests see each other and access the local network (Allow guests to access local network → Off).
  4. Use it for guests, the Smart TV, cameras and other smart devices.
  5. Change the guest network password every now and then.

Parental filters and safe DNS at router level

A filter on the router protects every device connected to your home Wi-Fi at once.

  1. See whether your router has Parental Controls / Access Control: you can set internet hours for particular devices and block websites.
  2. For general filtering, change the DNS servers under Internet/WAN or DHCP → DNS to a service with a family filter, e.g. Cloudflare for Families (1.1.1.3 and 1.0.0.3 – blocks malware and adult content) or OpenDNS FamilyShield (208.67.222.123 and 208.67.220.123).
  3. If you only want protection from harmful websites without content filtering: Quad9 (9.9.9.9) or Cloudflare 1.1.1.2.
  4. Save and restart the router; test whether the filter works.
  5. Note: the router filter doesn't work when your child uses mobile data, or when the device uses private DNS / a VPN. Combine it with parental controls on the device.
  6. Some providers' routers don't allow DNS changes – in that case, set the DNS on the device or ask your provider.

Check connected devices

Unknown devices on your network could be neighbours who've got hold of your password, or attackers.

  1. On the router page, find Connected Devices (DHCP Clients, Device List).
  2. Compare the list with the devices you have at home.
  3. If you see unknown devices, change your Wi-Fi password.
  4. Repeat this check once a month.

✅ Do / Don't

✅ Do this

  • Change the router's administrator password and the Wi-Fi password.
  • Use WPA3 or WPA2-AES.
  • Turn off WPS and remote management.
  • Update the firmware or ask your provider about updates.
  • Create a guest network for visitors and smart devices.
  • Use a family-filter DNS or the router's parental controls.
  • Check the list of connected devices regularly.
  • Place the router in the middle of your home, not by a window facing the street.

❌ Don't do this

  • Don't leave the factory password on the router.
  • Don't use WEP or an open network with no password.
  • Don't share your main Wi-Fi password with everyone – give guests the guest network.
  • Don't use your name, surname or address as the network name.
  • Don't download firmware from unofficial websites.
  • Don't open router ports by following instructions in unknown videos.
  • Don't use public Wi-Fi without protection for banking or important accounts.
  • Don't think the router filter is enough on its own – talking with your children is still the most important thing.

👨‍👩‍👧 Parental controls on the router

The router adds a layer of protection for the whole home, but it doesn't replace controls on the devices or talking with your children.

  1. On the router page, open Parental Controls or Access Control (names vary by model).
  2. Choose your child's devices from the list (by name or MAC address). Note: modern phones use private MAC addresses that can change – on your child's device you can turn this off just for your home Wi-Fi.
  3. Set internet hours, e.g. no internet after 21:30 on school days.
  4. Add websites or keywords to block, if your router allows it.
  5. Set a family-filter DNS (e.g. Cloudflare for Families 1.1.1.3 / 1.0.0.3 or OpenDNS FamilyShield) to block adult and harmful websites.
  6. Combine it with Google Family Link, Apple Screen Time, Microsoft Family Safety or the consoles' family settings – because outside the home or on mobile data, the router filter doesn't apply.

⚠️ Warning signs

  • You can no longer sign in to the router with your password.
  • The DNS settings have been changed to servers you don't recognise.
  • Familiar websites (your bank, Facebook) show certificate warnings or look different.
  • There are unknown devices in the list of connected devices.
  • The internet is much slower than usual for no obvious reason.
  • The Wi-Fi network name has changed, or there are new port-forwarding rules you didn't create.

🆘 If you get hacked

  1. Step 1: Disconnect the router from the internet (the provider's cable) and tell an adult.
  2. Step 2: Reset it to factory settings by holding down the Reset button for about 10 seconds (check the instructions for your model). If the router belongs to your provider, call them to make sure the connection will be set up again correctly.
  3. Step 3: Update the firmware before using it normally.
  4. Step 4: Set a new administrator password, a new Wi-Fi password and WPA3/WPA2, and turn off WPS and remote management.
  5. Step 5: Check that the DNS is your provider's or the one you chose yourself.
  6. Step 6: Change the passwords of important accounts if you suspect you were redirected to fake websites.
  7. Step 7: If data or money has been stolen, keep the evidence and report it to Kosovo Police on 192.

More help: Help & Reporting

📱 Other devices

🤖 Android phone📱 iPhone and iPad💻 Windows computer🍏 Mac / macOS🌐 Web browser🎮 Game consoles📺 Smart TVs and smart devices
↑↓ to move · Enter to openEsc to close