apartment therapy changing the world, one room at a time


How To: Secure Your Home Network

042309securerouter.jpgWith broadband access now nearly as common as cable subscriptions, DVRs and other tech services that many of use on a daily basis, home networking has moved forward from an "expert install" into a mostly simple DIY affair. But even so, many people are unaware that their home networks remain unsecure (our list of local wi-fi networks always reveals 1-2 open ones with default router names signifying someone set it up and didn't protect it). Our friends at D-Link TV sent us some helpful tips for home networking security that we think are worth reviewing...

 
 

1. Replace the default passwords: Almost all routers and access points come with an administrator password that is a weak default, like "password" or the manufacturer's name. Replace the default passwords on every wireless router or access point you purchase with passwords of your own. Imagine, for instance, how many "dlink" networks there would be in the world if none of our customers renamed their routers? Hackers make it a point to know every company's default passwords. By simply defining a new password, one that will certainly be easier for you to remember than the default, you will establish the protection you need to halt hackers from accessing your network or devices.

Most reputable vendors supply easy set-up wizards with their devices. Just follow the directions to rename your router or device with something unique and easy for you to remember. But be careful not to be so creative or simplistic that you provide sensitive information with the name you give your device. "Smith Family Router" is not the best idea. Be sure to write it down and keep it someplace safe for future reference. Without it, the only way to access the router or access point may be to reset it to factory default settings. which will wipe away any configuration changes you've made.

2. Don't broadcast your SID: Most wireless network devices continuously broadcast the network's name, or SSID (Service Set IDentifier). This may be convenient to locate WLANs, but it leaves your network visible to any wireless systems within signal range. By turning off the SSID broadcast, your network becomes invisible to neighbors and passers-by. It still can be seen by WLAN "sniffers", however.

3. Turning on WPA or WEP: Further secure your wireless network by turning on the WPA (Wi-Fi Protected Access) or WEP (Wired Equivalency Privacy) security feature on your router or access point. Follow the easy instructions for the installation process, including choosing your level of security. WPA and the newer WPA2 provide better protection and are easier to use.

4. Finally, you should disable remote administration: Most WLAN routers can be remotely administered from the Internet. As a rule, unless you absolutely need this capability, it's best to keep it turned off.

For other helpful hints check out dlinktv.com

Tags

How to..., security, network, router, D-link

Related Links

Share

Comments (2)

I don't agree with #2, that may stop your neighbors from seeing your AP, but anyone that is really looking for wifi will still see your AP (airpcap, kismet, netstumbler, backtrack 3). Also there are some devices that will not function properly with the SSID broadcast disabled. Also, forget WEP exists, might as well be open if you're using WEP.

posted by g17jimmy on May 5th 2009 at 10:41pm
view g17jimmy's profile

I think the tips here will prevent the casual freeloader and I think that's the basic point of making these changes. If you're really concerned with ANYONE gaining access to your AP, you shouldn't even be using consumer-grade equipment.

One other suggestion I would recommend regarding the SSID is to change it to something other than the default. Cuts down on confusion when there are several access points in an area and they're all using the same default SSID.

Happened to someone I know. They thought their AP was being hacked because they found an unrecognized node connected to it. Turned out my friend was connecting to someone else's AP and not his own!

posted by joetron2030 on May 19th 2009 at 5:02pm
view joetron2030's profile