Securing a Home or Small Office Network

A short, practical checklist, the small-network equivalent of the "Staying Safe Online" checklist in Cybersecurity Fundamentals:

• Change the router's default admin username and password.
• Use WPA3 (or WPA2 at minimum) with a long WiFi password, never WEP.
• Keep router firmware updated, check the admin panel periodically.
• Turn off remote administration on the router unless you specifically need it.
• Put IoT devices (smart plugs, cameras) on a separate guest network from your main devices, so a compromised smart bulb can't reach your laptop.
• Disable UPnP on the router unless something specifically requires it, it can automatically open ports without asking.

None of this requires specialized tools, just going through the router's own admin panel once and changing what's still sitting on factory defaults.