nullpay.
Back to toolkit
NetworkAdvanced30 minall

Router Security

Risk

The risk

Why this matters

ISP-provided routers often have remote management backdoors, outdated firmware, and default credentials. Everyone secures their laptop but nobody secures the box everything flows through. Your router is the weakest link.

Recommended tools

What to use

OpenWrt
OpenWrtOSSFree

Open-source router firmware. Full control over your network.

Pi-hole
Pi-holeOSSFree

Network-wide DNS ad blocker. Self-hosted on any Linux device.

Setup guide

How to set it up

  1. 1

    Log into your router admin panel (usually 192.168.1.1)

  2. 2

    Change the default admin password immediately

  3. 3

    Disable remote management / WAN access

  4. 4

    Update the firmware to the latest version

  5. 5

    Disable WPS (Wi-Fi Protected Setup) — it's a known attack vector

  6. 6

    Consider replacing ISP router with your own running OpenWrt

Go further

For power users

Flash OpenWrt on a compatible router for full DNS-level ad blocking, VPN at router level, and granular firewall rules. Add Pi-hole for network-wide tracker blocking.