Latest news about Bitcoin and all cryptocurrencies. Your daily crypto news habit.
Have you ever heard the saying âSafety starts at homeâ?
Itâs true, especially in the context of the Internet. For the bad guys, no target is too small as long as data is concerned. This was certainly the case in April 2018 when it was reported that Russian hackers targeted home routers.
Once a hacker gets access to an unprotected home network, theyâre pretty much free to do what they want. Malware campaigns, data and identity theft, and botnets are just a few of the possible ways a hacker can exploit a vulnerable home network. This is why setting up a secure home network is a must.
But, without the necessary know-how, safeguarding your home network can seem like quite a complicated taskâââespecially if you arenât tech savvy.
Donât fret.
In this post, I give some helpful tips on how you can set up a secure home networkâââeven if youâre a tech novice. Now, while thereâs no way to be 100% secure, you can, at least, make yourself a harder target.
Secure your Wifi and Router
The first thing you have to do is change your SSID (Service Set Identifier). This makes it harder for hackers to identify what type of router you have, thereby, preventing them from exploiting known vulnerabilities. Your network name shouldnât disclose any personal information as even a little can be used in identity theft. Also, donât challenge hackers by naming your network something like âUnhackableâ or âCanât hack thisâ.
Next, change your default admin credentials. Routers usually come with weak usernames and passwords by default. If a hacker determines what router you have, they can look for its default credentials by going to sites like RouterPasswords and DefaultPassword. Use strong passwords that are both long (16â20 characters) and complicated. You could always perform a master reset if you ever forget your password. You may want to use a password manager app to help you formulate and keep your strong password.
Make sure to turn on WPA2 encryption with AES (Advanced Encryption Standard), if possible. TKIP (Temporary Key Integrity Protocol) is better than nothing but AES is always be preferable. WPA2 AES is currently the most secure encryption standard available (despite its weakness to KRACK attacks) until WPA3 becomes widely available.
You should then Disable WPS (Wifi Protected Setup) and UPNP (Universal Plug and Play) features. WPS makes adding new devices to the network easier by simply pressing the WPS button on the router and then pressing the WPS button on the device. This can, however, be used by unauthorized persons to gain access to your router, hence, the need to disable it. UPNP lets devices on the network discover newly-connected devices and it comes with its own set of security dangers.
You may also want to disable remote access to your routerâs admin panel. While accessing this admin panel isnât itself a problem, doing so wirelessly can be. This is because the login credentials you send through the air may be intercepted by hackers. Disabling remote access prevents hackers from accessing your admin panel even if they were somehow able to break in wirelessly.
When it comes to hardware, having a Network Firewall is always a good idea. Hardware firewalls add an extra layer of security by blocking incoming data which it deems unsafe. Your router may already come with a built-in firewall so all you have to do is make sure itâs enabled.
Now, you may have already heard this a hundred times before but, you should remember to regularly update your softwareâââespecially your router firmware. Older firmware will have vulnerabilities which hackers can exploit. Also, you might miss important security features available only on the updated version. Firmware updates are usually rare so make sure to regularly check the manufacturerâs website for the latest version.
If your router has a guest feature, make sure to have your visitors use it. A guest network lets visitors access your Internet connection without providing them your Wifi password while also limiting accessible network information. You can set this guest network feature to turn off after a set amount of time which makes it quite handy. It also protects your local network from network worms when an infected device is plugged in. Additionally, you can connect your IoT devices to a separate guest network to protect your more important main network.
Once youâve done all of the above changes, you may want to place or transfer your router at the center of your home or as close to the center as possible. This ensures an equal wireless signal range around your home. More importantly, it makes your signal harder to find from far away.
While talking about signal range, you may want to switch to using 5 GHz instead of 2.4 GHz if you live in a single room apartment. 5 GHz frequencies have a smaller range and donât penetrate solid objects too well. This makes it perfect if youâre trying to make your home network as isolated as possible.
Finally, donât forget to turn off your wireless home network and Ethernet-connected devices whenever you plan to be away for extended periods of time. Doing this prevents hackers from finding your home network while youâre away and prevents damage via power surgesâââit may even reduce your utility bills a bit.
Essential security tools for your computer and IoTÂ devices
Firstly, youâll need a firewall software on your computer and mobile devices. While your routerâs built-in firewall usually does a good job of blocking incoming connections, it usually has a hard time deciphering outgoing traffic. This is where firewall software comes in. By deciphering which programs should be allowed to go out, it helps prevent botnets, trojans, and other malware from phoning home.
The great thing about firewall software is that they often come built into the best antivirus software already. Just make sure to do a little research on any antivirus software you find as it may be rogue security software. Make sure to only install software that experts trust. You can check out the top antivirus software reviewed by CSOÂ Online.
Antivirus and firewall aside, youâll also need a VPN (Virtual Private Network). A VPN adds not just one but two layers of security to your online connection. It does this by adding another layer of encryption (on top of the AES encryption provided by your routerâs WPA2 AES) as well as replacing or hiding your true IPÂ address.
The great thing about VPNs is that installing one on your router effectively protects all the IoT devices on your home network. However, it should be noted that while a VPN is important for your home devices, it is doubly so for your mobile devices which you use to connect to risky public Wifi. The thing is not all VPNs are safe. Some free VPNs, like popular Chrome extension Hola, have been known to sell usersâ bandwidth and/or data. Instead, check out these safe Android VPNs to keep your mobile devices safe.
Final thoughts
By following the tips in this article, youâve just set up a secure home network. While the tips I gave may help prevent some attacks, they sadly canât defend against attacks, like phishing or social engineering, that target you specifically.
How to Set up a Secure Home Network was originally published in Hacker Noon on Medium, where people are continuing the conversation by highlighting and responding to this story.
Disclaimer
The views and opinions expressed in this article are solely those of the authors and do not reflect the views of Bitcoin Insider. Every investment and trading move involves risk - this is especially true for cryptocurrencies given their volatility. We strongly advise our readers to conduct their own research when making a decision.