Most routers ship with “safe” default settings, and that makes sense. Manufacturers want the whole setup process to be as simple and plug-and-play as possible. But those default settings aren’t always ideal. If you’ve spent hours researching which router to buy, you should definitely spend a few more minutes optimizing it. Below are the six key changes you need to make before your new router ever goes online.
Turn off WPS
The outdated feature isn’t worth the risk
You may have noticed a WPS (or Wi-Fi Protected Setup) button on your router and never known what it’s for. Its main purpose is to let you connect devices to the network without entering that complex Wi-Fi password you’ve set. Yes, WPS sounds useful, which is also why it comes pre-enabled on most routers. But there’s one problem. WPS PIN authentication is vulnerable to brute-force attacks, which means attackers can also gain access to the network without knowing the Wi-Fi password. So if you never plan to use the WPS button to connect devices, it’s better to turn it off entirely.
The vulnerability in WPS has been known for over a decade. In 2011, researcher Stefan Viehböck demonstrated that the PIN-based method could be cracked in under four hours using a simple brute-force attack. Modern routers still support it, but the risk remains. Even if you think you’ll never press the button, the underlying service can run in the background. Disabling it in your router’s admin panel is a quick way to eliminate a significant security hole. While newer Wi-Fi standards like WPA3 have phased out WPS, most current routers still include it for backward compatibility. Turning it off prevents any potential brute-force attempt from ever succeeding.
Use QoS to prioritize important devices
Make sure your gaming PC gets first dibs
By default, your router treats every device on the network equally. That seems fair, but it can also be a problem when one of your devices starts downloading large updates or backing up thousands of photos to the cloud and leaves other devices competing for bandwidth. Quality of Service (or QoS) helps you fix this. It basically lets you tell the router which devices should get priority, so your gaming PC or your phone never has to fight for bandwidth. Some routers can even prioritize certain types of traffic with QoS. For instance, you can set high priority for gaming and streaming while setting low or medium priority for web browsing and messaging.
The concept of QoS has been around since the early days of networking, but consumer routers have only recently made it accessible through intuitive interfaces. Most modern routers offer simple toggles or drag-and-drop priority lists. Some advanced models let you define rules based on MAC addresses or application types. For example, you can ensure that video calls from Zoom or Teams always get top priority, preventing lag during important meetings. QoS is especially valuable in homes with multiple users—children streaming cartoons, adults on video conferences, and smart devices constantly phoning home. Without QoS, a single large download can saturate your connection, causing everyone else to suffer. By assigning priorities, you maintain a smooth experience for the activities that matter most.
Change Wi-Fi channel
Your neighbors could be slowing down your Wi-Fi
Most routers are configured to choose a Wi-Fi channel automatically, which usually works fine. But if you live in a congested area where a lot of your neighbors’ routers are doing the same, it can be a problem. When too many routers end up broadcasting on the same channel, it slows everything down. An easy way to avoid this is to pick a less crowded channel manually. The 2.4GHz band is where this matters the most, because the interference is more common there. The 5GHz and 6GHz bands usually have more channels available, but yes, they can also become congested.
In your router settings, set the Wi-Fi channel selection to manual and choose channels 1, 6, or 11 for the 2.4GHz band. For the 5GHz band, channels 36, 40, 44, or 48 are often good starting points. If you need to see which channels your neighbors are using and want to avoid them, you can use a Wi-Fi analyzer app and run a quick scan. Tools like Wifi Analyzer (Android) or NetSpot (Windows/macOS) show you a visual spectrum of nearby networks. Choose a channel that has the fewest overlapping signals. For the 5GHz band, the non-overlapping channels are more abundant, but you still want to avoid channels that are heavily used. Changing the channel manually can yield noticeable improvements in throughput and stability, especially during peak hours when everyone is streaming and gaming.
Set up a DNS
Ditch your ISP’s DNS
DNS is what’s responsible for converting those website names you type in your browser into IP addresses that your device can understand. By default, your router uses the DNS provider provided by your ISP. While there’s nothing wrong with that, ISP-provided DNS servers aren’t always the fastest or the most reliable option. Switching to a third-party DNS service, like Cloudflare or Google DNS, can make website load a little faster by reducing the time it takes to convert website names into IP addresses. Beyond speeds, these DNS servers often offer better protection against malicious domains and stronger privacy than ISP-run alternatives.
Another major benefit of changing the DNS at the router level is that it applies to every device that connects to the network. That can save you the hassle of changing the DNS settings on your phone, tablet, PC, and TV manually. Popular choices include Cloudflare (1.1.1.1), Google Public DNS (8.8.8.8), and Quad9 (9.9.9.9). Cloudflare, for instance, emphasizes privacy and does not log client IP addresses. Google DNS is widely available and fast. Quad9 blocks known malicious domains, adding an extra layer of security. Some advanced users even host their own DNS servers for maximum control. The change is simple: log into your router, find the DNS settings, and enter the primary and secondary addresses. The effect on browsing speed can be subtle but real, especially if your ISP’s DNS servers are overloaded or geographically distant.
Change the router password
Secure your router before someone else does
Most people never bother to change their router’s default login credentials. That also means anyone who’s connected to the network can easily access the router's settings page using the default credentials printed on the router or listed on the manufacturer’s support website. And once they’re in, they can change the Wi-Fi password, disable security settings, prioritize their own devices, and even lock specific users out. To be fair, some new routers now ask you to change the default credentials during the setup process. But not all of them do. In any case, it’s always best to change the default login password to something strong.
Default credentials are often as simple as “admin/admin” or “admin/password”. A quick online search can reveal the defaults for virtually any router model. Attackers can use tools to scan the local network for routers still using factory credentials. Once they compromise the admin panel, they can wreak havoc—from stealing personal information to using your network for illegal activities. Changing the password to a long, unique passphrase (at least 12 characters, mixing letters, numbers, and symbols) is essential. Some routers also allow you to change the username from ‘admin’ to something custom, adding another layer. Additionally, consider enabling two-factor authentication if your router supports it. This simple step prevents unauthorized users from taking over your network.
Update to the latest firmware
New router, old software? Fix that first
A new router might not always be running the latest firmware. If it was sitting in a warehouse or on a store shelf for months before you bought it, there’s a good chance it’s running an old version. Much like software updates on a phone or PC, router firmware updates can patch security vulnerabilities, improve stability, fix bugs, and sometimes even improve performance. On newer router models, checking for updates and installing them is as easy as clicking a button. But on an older one, you may need to download the update file and install it manually. Either way, it’s not something you should skip.
Router manufacturers regularly release firmware patches to address newly discovered exploits. For example, the Broadcom vulnerability (CVE-2023-1238) affected millions of routers and required users to update the firmware to close the backdoor. Even after purchase, your router may be vulnerable to such attacks if you don’t update. Automatic update features are becoming more common, but they may be off by default. Check your router’s admin panel for a firmware update option. If it’s manual, visit the manufacturer’s support site, download the latest file, and upload it through the admin interface. Some routers also support a “check for updates” button that fetches the latest version from the internet. Keeping firmware current ensures you benefit from performance enhancements, new features (like improved QoS or VPN support), and most importantly, security patches.
Changing the default router settings isn't the most exciting thing to do, but it's just as important as choosing the right location for the router. And you only need to do it once, so there's no good reason to skip it.
Source: MakeUseOf News