Despite improvements in cybersecurity for both businesses and home users, many popular wireless routers still lack basic security protections, according to a report from Consumer Reports' Digital Lab.
Digital Lab studied 29 routers, evaluating them on about 60 different security and privacy, as well as 100 other data points to evaluate speed, ease of use, and other factors.
"Routers are the conduit through which all data , so it's really important to look carefully at how they handle security," said Robert Richter, who oversees the research's security and privacy testing.
The security issues discovered include:
- 20 routers allow users to change the password, but not the web apps username, which is used to change settings, including the Wi-Fi
- 20 routers do not protect against multiple failed login attempts, potentially allowing a hacker to use software that tries passwords until the system is compromised.
- 11 routers allow users to set very weak passwords (those with fewer than eight characters or that lack any complexity). Some routers do not require users to change the default login credentials of “admin” and “password.”
- Two-thirds of routers had the Universal Plug and Play (UPnP) networking protocol enabled by default, which has a history of security vulnerabilities
- 11 routers don't support automatic software updates
- Few router manufacturers state how long they will provide firmware updates
In terms of performance, 18 of the 20 traditional routers tested earned a “good” score for throughput at distances of around 92 feet. And all nine mesh routers earned a higher score for range at distances between 140 and 330 feet, so if you have a larger area that needs consistent coverage, mesh routers are a better choice.
Traditional routers that received good scores for security, privacy , and performance include the Synology RT2600ac and the Netgear Nighthawk X10 AD7200. Mesh routers with the highest scores include the Netgear Orbi and Eero.
How to secure your router
No matter what router you have in your office or home, there are several steps you can take to make sure it's as secure as possible.
- Set a strong password
- Disable features you don't use, including UPnP, and disable remote management
- Enable automatic updates or, if that's not an option, periodically check for new software updates manually
- Enable WPA2 or WPA3 (if available on your router) and make sure WEP is disabled
If your router is old and only supports WEP or WPA, or if it no longer receives any updates, you need to buy a new router.
