Securing WiFi: Five tips for more security

WiFi networks are a popular target for hackers. You can secure your router with just a few clicks. We will show you the best safety tips and explain how to implement them.

Tip 1: The right WiFi encryption for more security

WEP, WPA, WPA2 - the encryption methods for WLAN routers are diverse. But which of the selectable security measures offers the best protection?

• The current standard is the "WPA2 PSK" encryption method. Unfortunately, some older devices like the Nintendo DS do not support it. However, you should not use WEP encryption. It cracked within a few seconds.
• According to the current legal situation, you are also obliged to secure your WLAN network with WPA or WPA2. Otherwise, you may be held responsible for a third party offense. Nevertheless, you should forego the WPA procedure and activate the most secure encryption directly.
• It is best to stick to the simple principle: The newest method is the safest. The only exception to this is the so-called WPS standard. This means you can connect your devices to your router quickly and easily at the push of a button. Hackers like to use this function because it does not require a password and is therefore easier to crack. Therefore: In case of doubt, switch off.

Tip 2: Choose a random and secure WiFi password

Even the best encryption method is useless if the associated password is easy to guess. Especially with the standard passwords, which are set by default, there is a risk that hackers will read out the manufacturer key using special programs. With a few simple tricks, you can turn your password into an effective safe lock:

• A secure password should consist of at least 20 characters. If you want to make life really difficult for password crackers, you can choose an even longer code.
• In addition, you should avoid names, birthdays or other terms that are easy to guess. The seemingly clever password "password" is also at the top of the list for hackers. It is best to choose a random combination of letters, numbers and special characters.
• You can get some help from a freeware program: The free password generator definitely creates a secure password. Simply set the desired password length and check the "characters" as in the screenshot.
• The same applies to the administrator password, which you use to access the user interface of your WLAN. From the factory, this is usually just an easy-to-guess standard password that you should definitely change before you set it up for the first time.

Tip: Long passwords are of course not easy to remember. But with a little trick it works: Make up a sentence that you can remember well, e.g. B. "These 5 practical tips secure my WiFi". Now take the first letter and put some special characters between them: "D-5_P * s-m_W *". And you already have a secure password. Alternatively, use a free password manager.

Tip 3: keep the firmware up to date and deactivate remote access

Even if you do everything right, hackers may gain access to the device thanks to a gap in your router's system. To prevent this, you should update your WLAN router regularly (automatically).

• We reveal in separate articles how it works with the Speedport, the Fritzbox, as well as with TP-Link and Asus routers.
• A current firmware version often comes with many additional functions. One of them is remote access to connected hard drives and printers. While this is quite practical, it can be a gateway for attackers. If you do not need it, you should deactivate this function in the router settings.

Tip 4: Select a fixed IP address and switch off DHCP

To make your WiFi network really secure, you should switch off the DHCP server in the router. This ensures that the end devices are sent all the information they need to communicate with the router:

• If the service is deactivated, the devices can only connect to the router and the Internet after manual configuration. So you have to fill in all the necessary information yourself. Every measure has its price.
• Under Windows, enter the necessary information, for example, in the [Network Connections] area in the Control Panel. There you will find your network card and can assign a fixed IP address to your computer with a right click.
• However, you should not use standard addresses such as 192.168.1.101. The same applies here: the more unusual the combination, the more secure your WLAN. Please note, however, that the first two digits must not be changed. A good IP address is, for example, 192.168.95.11.
• Enter "255.255.255.0" for "Subnet mask". You can also enter the IP address of the router in the "Standard gateway" field. In most cases this is not necessary.

The disadvantage is clear: flexible registration in your network is no longer possible after this tip. For example, if you want to give your visit access, you have to make the settings again on each device.

Tip 5: Secure WLAN with a MAC filter

Each network card of a computer and smartphone has an individual identifier. You can use this so-called MAC address in your favor:

• Many routers can be configured to connect only to devices with a specific MAC address. For example, you can only give your smartphone and notebook access to WiFi. The MAC filter can be activated in the router settings.
• At first, that sounds like a safe, all-inclusive solution. Unfortunately, the entered MAC addresses can also be read out. With special tools, it is also easy to pretend your router has a specific MAC address and thus gain access to your network.
• But here again, the rule is: only a few attackers actually make the effort to circumvent these hurdles.

$config[ads_text5] not found

Additional tip: temporarily switch off WLAN

With our five tips, you are well protected, but there is never a hundred percent protection - at least not as long as the WLAN is active. For this reason, you should deactivate your wireless connection when you do not need it. This works either via the corresponding button on your router or via a schedule in the router menu.

The functions mentioned can all be activated in the configuration menu of your router. How to get there, we will tell you, among other things, for telecom routers and the Fritzbox.