Skip to content
FIN-CSIRT
RS

FIN-CSIRT / Search

What are you looking for?

Start typing to see results.
    Report an incident

    FIN-CSIRT / Practical lesson

    Protect the entry point to the home network

    Set up essential router protection without randomly changing advanced options you do not understand.

    Home users and people working remotelyAbout 8 minutes of reading + 3 questions
    Start with the example Unknown device or setting visible?

    What you will learn

    • Distinguish the Wi-Fi password from router administration access.
    • Check updates, encryption and remote management.
    • Respond to an unknown device or suspicious setting change.

    Practice example

    An unknown device appears on the router

    Connected-device listAn unknown device appears on the router

    A device you do not recognise appears beside your phone and computer. The router administrator password has never been changed.

    Device names may be unclearDefault administrator credentialsRecovery needs to be controlled
    Fictional situation for practice; an unfamiliar name alone does not prove an attack.
    Show the example explanation
    Device names may be unclear
    First compare devices at home; a television or smart plug may use a generic name.
    Default administrator credentials
    Publicly known factory credentials may allow settings to be changed.
    Recovery needs to be controlled
    Follow operator or manufacturer guidance before resetting and reconfiguring the router.

    Start with administration access

    Read the router model from its label. Find its instructions on the operator’s or manufacturer’s official site. Use the management address or app specified there; no single address and password works for every router. Make changes from your trusted device connected to the home network.

    A router normally has an administrator account for settings and a separate password used by devices joining Wi-Fi. Replace a factory administrator password if it is shared or easily guessed. Use a long, unique password and do not give it to guests.

    Use a different long password for Wi-Fi. If you frequently have guests or many smart devices, use a separate guest network where supported.

    Recognise menu labels

    These are common labels, not a reproduction of one router. If an operator does not expose a setting, ask for its instructions instead of bypassing restrictions.

    On-screen label Meaning and purpose
    Wireless / Wi-Fi Settings Wireless network settings.
    Network Name / SSID The network name selected on a phone.
    Wireless Password / Wi-Fi Password The password used to join the network.
    Administration / Admin Password Router management and its separate password.
    Security / Encryption Wireless connection protection.
    Guest Network A separate network for visitors.
    Connected Devices / Clients The currently connected device list.
    Firmware Update Updating the router’s built-in software.
    Remote Management Managing the router from another network.
    Save / Apply Store or apply the changes.
    Reboot / Factory Reset Restarting / erasing settings; these are different actions.

    Change the Wi-Fi password step by step

    Choose a time when a brief interruption will not disrupt household calls, payments or work. Prepare a long new password and store it privately. If using a cable for setup, check the model’s instructions.

    1. Open the official management method in the instructions and sign in with administrator credentials.
    2. Find Wireless or Wi-Fi Settings.
    3. Check which network you are changing. Separate 2.4 and 5 GHz networks may have separate fields; the guest network is also distinct.
    4. Enter the new password in Wi-Fi Password or Wireless Password, not Admin Password.
    5. Choose Save or Apply and wait for the change.
    6. Reconnect your phone using the new password.

    A Wi-Fi disconnection after the change is expected. Check that internet access works, then reconnect your other devices. If old saved credentials prevent joining, choose Forget network on the phone and enter the new password. Do not disable network protection to fix a problem with one device.

    Change the administrator password separately under management settings, following the model’s instructions. Sign out after saving and test the new sign-in. Ask the operator for help if its equipment does not expose the setting. Do not hold Reset as an experiment: it can remove internet, television or telephone configuration.

    Encryption, updates and remote access

    • Choose WPA3 when supported by the router and required devices, or WPA2 for compatibility. Do not use WEP.
    • Enable automatic firmware updates if available. For an operator-supplied router, follow operator guidance; never install an unverified firmware file.
    • Disable router administration from the internet when it is not needed.
    • Disable WPS when unused and the device allows it.
    • Replace equipment that no longer receives security updates once the provider or manufacturer confirms support has ended.

    Review connected devices

    Periodically inspect the connected-device list. Names may be generic, so compare phones, computers, televisions, printers and smart devices at home. An unfamiliar name is a reason to check, not final proof of compromise.

    Open Connected Devices or Clients. If names are unclear, check household devices one at a time with their users; do not randomly block everything. After changes, confirm that recognised devices work and the settings remain saved.

    If your screen differs

    For mts or SBB equipment, official Serbian-language instructions are listed in the sources below. Use the instructions for your model; an older screenshot does not mean you should select obsolete protection. For another operator, use its known website or the contact in your contract.

    Tell support the model and what you want to change: “I want a new Wi-Fi password but cannot find Wireless Password.” Do not post the existing password, a photo of all credentials on the label or a configuration export in a public group.

    If you suspect unauthorised access

    1. Preserve a screenshot and ask household members which devices belong to them.
    2. Change the administration and Wi-Fi passwords from a device you have no reason to suspect is compromised.
    3. Update the router using official guidance. If DNS, remote access or unfamiliar settings changed, contact the operator or manufacturer.
    4. Factory-reset only after you have official instructions and the information needed to reconnect. A reset removes configuration and may interrupt internet access.
    5. Check important accounts and devices when other signs of compromise are present.

    Check your knowledge · 3

    Your turn to choose the next step.

    Choose one answer for each question shown. More complex lessons select three questions from a wider question bank when the lesson loads.

    Questions and explanations are also available without JavaScript.

    Are the Wi-Fi and router administrator passwords the same thing?

    Why does this matter? One gives network access while the other permits changes to network settings.

    1. Yes, they are always the same.

      Reuse connects two different levels of access.

    2. No; they should be separate and unique.Correct answer

      Separation limits the effect of one password being disclosed.

    3. It does not matter if the network name is hidden.

      A hidden name does not replace access and administration protection.

    The router offers WPA3, WPA2 and old WEP. What do you choose?

    Why does this matter? Newer supported standards provide stronger protection for the wireless connection.

    1. WPA3, or WPA2 if required devices do not support WPA3.Correct answer

      This uses the strongest option reliably supported by the router and required devices.

    2. WEP because its name is shortest.

      WEP is obsolete and should not be selected merely for convenience.

    3. An open network without a password.

      An open network permits connection without password verification.

    An unfamiliar device name appears on the network. What is a reasonable first step?

    Why does this matter? A generic name may belong to your own equipment, so check the inventory without dismissing the signal.

    1. Compare household devices and the router list, then change access if it remains unknown.Correct answer

      The check separates an unclear label from genuinely unknown access.

    2. Publish the administrator password to ask for help.

      Publishing the password creates a new exposure.

    3. Ignore it permanently.

      Permanent inaction misses possible unauthorised access.

    No registration. Your answers are not sent; the result is just for you.

    Two passwords, two roles

    Use a unique router administration password and a separate long password for Wi-Fi access.

    Use public Wi-Fi more safely

    References

    Sources and further reading

    Recommendations follow ENISA cyber-hygiene guidance and the NCSC guide to smart devices at home. For operator-supplied equipment, its official instructions for the specific model take priority.

    Example control labels follow a TP-Link user guide, not a universal menu layout. In Serbia, mts explains Wi-Fi parameter changes, while SBB provides model-specific instructions and an example of changing the network name and password (Serbian). These examples are not endorsements of an operator or device.

    Content last reviewed