All articles

How to Protect Home Wi-Fi from Neighbors and Hacking

2026-04-29 10 min readITNET
wifisecuritywpa3routerprotection

Why Bother

"I have nothing valuable" is wrong. Risks: bandwidth theft, DNS phishing, traffic surveillance, smart home access, legal liability.

Signs You're Hacked

  • Mysterious speed loss
  • Unknown MACs in admin
  • Random Wi-Fi drops
  • Strange redirects
  • Browser history of unvisited sites

How It Actually Happens

  1. Default router password — admin/admin lists are online, 30 sec
  2. WPS PIN — 4-6 hours brute force, always disable
  3. Weak passwords — Aircrack-ng + dictionary 5-30 min
  4. KRACK on WPA2 — 2017 vuln, fixed by WPA3/firmware
  5. Evil Twin phishing — fake same-named Wi-Fi captures password

Step-by-Step Protection (15 min)

  1. Change admin password (16+ chars)
  2. Strong Wi-Fi password (4-6 random words)
  3. WPA3 or WPA2-AES (never WEP/WPA-TKIP)
  4. Disable WPS
  5. Generic SSID (not your name)
  6. Don't hide SSID (doesn't help)
  7. Update firmware
  8. Guest network for outsiders
  9. Check device list monthly
  10. Firewall enabled

Advanced

  • MAC filtering
  • Separate VLAN for smart home
  • VPN at router level (WireGuard)
  • IDS/IPS (UDM-Pro)

Real Stories

  1. Slow internet → 5 unknown devices → password change → fixed
  2. "familyname1990" password → neighbors knew routines → reset
  3. Office never changed admin/admin → competitor MITM 4 months

Checklist

  • ☐ Strong admin password
  • ☐ 16+ char Wi-Fi password
  • ☐ WPA3 or WPA2-AES
  • ☐ WPS disabled
  • ☐ Recent firmware
  • ☐ Guest network
  • ☐ Devices checked
  • ☐ Firewall on
Ubiquiti catalog | Contact