Cyber Security

Home Cyber Security: How to Protect Your Wi-Fi, Devices and Personal Data

Home networks now connect far more than computers.

Phones, tablets, smart TVs, security cameras, speakers, printers, gaming consoles, appliances and home automation devices may all share the same internet connection.

That convenience also means your home network has become part of your personal cyber security.

You do not need to be an IT expert to improve it. A few sensible changes to your router, passwords, devices and online accounts can significantly reduce your risk.

Start with your router

Your router is the gateway between your home network and the internet.

Every computer, phone, television and smart device in your home may depend on it, so it deserves more attention than simply plugging it in and forgetting about it.

The Australian Signals Directorate recommends securing your router, keeping its firmware updated and replacing equipment that no longer receives security updates.

Basic router security should include:

  • Changing the router administrator password
  • Using a strong Wi-Fi password
  • Installing firmware updates
  • Enabling automatic updates where supported
  • Using WPA3 or WPA2 encryption
  • Disabling features you do not need

Use a strong Wi-Fi password

Your Wi-Fi password should be long, unique and difficult to guess.

Avoid family names, addresses, phone numbers and simple combinations such as password123.

You usually do not need to change a strong Wi-Fi password frequently, but you should change it if you believe someone unauthorised knows it.

It is also worth reviewing the devices connected to your router occasionally. Unknown devices may indicate that someone has access to your network.

Separate less trusted devices

Use a guest Wi-Fi network. Visitors do not necessarily need access to the same network as your computers, storage devices and other important equipment.

Consider a separate network for smart devices. Smart TVs, speakers, cameras and home automation equipment can often be placed on a guest or separate IoT network.

Use client isolation where practical. Some routers can prevent devices on a guest network from communicating directly with each other.

Keep important devices on your main network. Computers, NAS devices and systems containing sensitive information deserve greater protection.

Smart home devices need security too

Internet-connected devices are sometimes referred to as Internet of Things, or IoT, devices.

These include security cameras, video doorbells, smart plugs, lighting, speakers, TVs, appliances and home automation equipment.

Before adding a device to your network, consider whether the manufacturer is reputable and whether the product receives software and security updates.

Change default usernames and passwords wherever possible and remove devices you no longer use.

A cheap smart device that receives no security updates can remain connected to your network for years after the manufacturer has stopped supporting it.

Keep everything updated

Updates are one of the simplest and most effective forms of cyber security.

Security vulnerabilities are regularly discovered in operating systems, applications and network-connected devices. Software updates repair many of these weaknesses.

Keep the following updated:

  • Windows and Mac computers
  • Phones and tablets
  • Web browsers
  • Smart TVs
  • Security cameras
  • Routers
  • NAS devices
  • Home automation systems
  • Gaming consoles
  • Apps and software

Where available, automatic updates are usually the easiest option.

Stop reusing passwords

Password reuse is one of the easiest ways for a single security breach to become a much larger problem.

If one website is compromised and you use the same password elsewhere, attackers may try that password against your email, banking, social media and other accounts.

Use a different password for every important account.

A reputable password manager makes this practical by creating and storing long, unique passwords for you.

Your email account deserves particular attention because it is often used to reset passwords for your other online services.

Turn on multi-factor authentication

Protect your primary email account first. If an attacker controls your email, they may be able to reset passwords for many of your other services.

Protect banking and financial accounts. Use the strongest authentication method your provider offers.

Protect cloud storage. Services containing photographs, documents and backups should also use MFA.

Never approve an unexpected authentication request. It may indicate someone already has your password.

Be suspicious of unexpected messages

Many attacks never attempt to break into your home network directly.

Instead, they try to convince you to provide a password, approve a login, install software or make a payment.

Common examples include fake parcel notifications, toll notices, bank warnings, account suspension messages and fraudulent login pages.

If an unexpected message tells you there is a problem with an account, avoid using the supplied link.

Open the organisation's official application or type its website address into your browser yourself.

Protect your banking and financial accounts

Never provide passwords, PINs or authentication codes to someone who contacts you unexpectedly.

Be particularly suspicious if someone claiming to represent a bank asks you to transfer money to a so-called safe account or install remote access software.

If you are unsure whether a call or message is genuine, end the conversation and contact the organisation using its official telephone number.

Do not rely on the telephone number or website address supplied by the person contacting you.

Secure your home security cameras

Security cameras are themselves network-connected computers and should be treated accordingly.

Change default passwords, keep camera and recorder firmware updated and avoid exposing equipment directly to the internet unless there is a genuine need.

Remote viewing should use the manufacturer's supported secure method rather than unnecessary port forwarding.

If a camera system no longer receives updates, consider whether continuing to connect it to your home network is appropriate.

Check unnecessary router features

WPS. Wi-Fi Protected Setup is primarily a convenience feature. Disable it if you do not need it.

Port forwarding. Avoid opening ports to the internet unless you understand exactly why they are required.

UPnP. Universal Plug and Play can make devices easier to configure, but it can also increase exposure. Consider disabling it if your devices do not require it.

Remote administration. Your router's administration page generally does not need to be accessible directly from the internet.

Back up the things you cannot replace

Photographs, personal documents and other important files should not exist in only one location.

Hardware can fail, devices can be stolen and ransomware can encrypt files.

Maintain backups of important information and periodically check that those backups can actually be restored.

Cloud synchronisation can be useful, but synchronisation and backup are not necessarily the same thing. If damaged or encrypted files are automatically synchronised, the damage may also be copied.

Be especially careful with NAS devices

Network Attached Storage devices are popular for storing photographs, documents, media and backups at home.

They can also become attractive targets because they often contain large quantities of valuable personal information.

Keep NAS software updated, use strong unique passwords and multi-factor authentication where supported.

Avoid exposing a NAS directly to the internet unless remote access is genuinely required and you understand how that access is being secured.

Important files stored on a NAS should still be backed up elsewhere. A NAS should not automatically be treated as a complete backup strategy simply because it contains multiple hard drives.

Cyber security is a household issue

One compromised account or device can affect other people in the household.

Family members should understand basic precautions such as not sharing passwords, questioning unexpected messages and asking before installing unfamiliar software.

Children and teenagers may also use school accounts, gaming platforms, social media and messaging services that contain personal information.

Good cyber security habits are generally more effective than relying entirely on technical restrictions.

Old devices can become a security risk

A device may continue working long after the manufacturer stops providing security updates.

This is particularly common with routers, smart devices, older tablets and network equipment.

Periodically check whether important network-connected equipment is still supported.

The Australian Cyber Security Centre recommends replacing routers that have reached end of life because known vulnerabilities may no longer be repaired.

Remove your data before selling or disposing of devices

Old phones, tablets, computers and smart devices may contain more personal information than you realise.

Before selling, recycling or giving away a device:

  • Back up anything you want to keep
  • Sign out of important accounts
  • Remove SIM cards and removable storage
  • Perform the manufacturer's recommended factory reset
  • Confirm your personal information has been removed

Home cyber security checklist

Change the administrator password on your router.

Use a strong and unique Wi-Fi password.

Keep your router, computers, phones and smart devices updated.

Use WPA3 or WPA2 Wi-Fi encryption.

Put visitors and less trusted smart devices on a separate network where practical.

Use unique passwords for important accounts.

Enable multi-factor authentication.

Treat unexpected messages and links with suspicion.

Maintain backups of important files.

Replace equipment that no longer receives security updates.

Home cyber security does not need to be complicated

Most homes do not need enterprise-grade security equipment.

A secure and supported router, strong account protection, regular updates, sensible network separation and reliable backups provide a very strong starting point.

The aim is not to eliminate every possible risk. It is to remove the easy opportunities that attackers routinely exploit.

Further information

The Australian Signals Directorate's Australian Cyber Security Centre provides detailed guidance for securing home routers, Wi-Fi networks, smart devices and personal computers.

Australian Cyber Security Centre: Secure Your Wi-Fi and Router