Do not use default passwords to log in
All default passwords and usernames for routers are circulating on the internet, from all brands and all models.
Change the default settings at the first opportunity with a strong username (if possible) and an equally strong password.
Set your Wi-Fi security to WPA2
WPA2 encryption isn't perfect, but it's the best solution for home use. It allows you to set a strong password – with letters, numbers, and other characters. The stronger the password, the harder it will be for someone to gain access to your network.
Define a list of "approved" devices
Every network device has a MAC address, which uniquely identifies that device. By setting up MAC Filter, you allow devices with predefined MAC addresses to access the network. No other devices will be able to use your network – even if they have the password.
Constantly upgrade your router's firmware
Updating your router's software will close known vulnerabilities and vulnerabilities. Updates, in addition to security fixes, often bring new features to your software. Firmware updates are usually available from the router manufacturer's website.
Disable remote access, UPnP
The Universal Plug-and-Play (UPnP) feature has been criticized by the security community as it can provide unauthorized access to networks. Disabling UPnP will prevent these attacks.
Also, if you have remote access to your router, disable it. Very few people, unless you are the administrator of the business network, need remote access to networking devices.
Disable guest access
Some routers provide guest access. This feature often separates your home network for guests who need temporary access. However, some hackers have been able to create channels, bypassing the firewall and into other parts of the network.
Source: secnews.gr

