How to Protect Home Wi-Fi from Neighbors and Hacking
2026-04-29 10 min readITNET
wifisecuritywpa3routerprotection
Why Bother
"I have nothing valuable" is wrong. Risks: bandwidth theft, DNS phishing, traffic surveillance, smart home access, legal liability.
Signs You're Hacked
- Mysterious speed loss
- Unknown MACs in admin
- Random Wi-Fi drops
- Strange redirects
- Browser history of unvisited sites
How It Actually Happens
- Default router password — admin/admin lists are online, 30 sec
- WPS PIN — 4-6 hours brute force, always disable
- Weak passwords — Aircrack-ng + dictionary 5-30 min
- KRACK on WPA2 — 2017 vuln, fixed by WPA3/firmware
- Evil Twin phishing — fake same-named Wi-Fi captures password
Step-by-Step Protection (15 min)
- Change admin password (16+ chars)
- Strong Wi-Fi password (4-6 random words)
- WPA3 or WPA2-AES (never WEP/WPA-TKIP)
- Disable WPS
- Generic SSID (not your name)
- Don't hide SSID (doesn't help)
- Update firmware
- Guest network for outsiders
- Check device list monthly
- Firewall enabled
Advanced
- MAC filtering
- Separate VLAN for smart home
- VPN at router level (WireGuard)
- IDS/IPS (UDM-Pro)
Real Stories
- Slow internet → 5 unknown devices → password change → fixed
- "familyname1990" password → neighbors knew routines → reset
- Office never changed admin/admin → competitor MITM 4 months
Checklist
- ☐ Strong admin password
- ☐ 16+ char Wi-Fi password
- ☐ WPA3 or WPA2-AES
- ☐ WPS disabled
- ☐ Recent firmware
- ☐ Guest network
- ☐ Devices checked
- ☐ Firewall on