We spend a lot of time on customer networks around the Helderberg, and the same handful of weak spots shows up again and again. None of them are exotic. All of them are fixable in under an hour with the router you already own, and most take less than five minutes each.

1. The admin password is still the default

Your router has two passwords, and people mix them up all the time. The WiFi password decides who can connect. The admin password decides who can control the router: change your WiFi password, see every device connected, redirect your traffic, or lock you out entirely.

Log into the router’s admin page (usually 192.168.0.1 or 192.168.1.1 in a browser) and check the login. If it’s still admin/admin, admin/password, or whatever came on the box, anyone who joins your WiFi can take over your network. Attack tools try those default logins automatically.

Fix: change the admin password to something long and unique, and keep it in a password manager. Do it before anything else on this list.

2. The WiFi password has been shared since 2019

A WiFi password isn’t like a bank PIN. It gets spoken aloud, written on the fridge, handed to every visitor, the painter, the nephew. Every person who has it could still have it saved on a phone that’s now in a pawn shop.

That’s not a reason to be paranoid about guests. It’s a reason to rotate the password once a year, and to keep a separate one for visitors (our guest network guide covers that). And it should never be your surname, your street address, or the phone number printed on the router’s box.

3. Old encryption: WEP or WPA instead of WPA2/WPA3

In the router’s wireless settings, look for the security mode. If it says WEP or plain WPA, your network can be cracked in minutes with free software, regardless of how clever your password is. These modes survive in older routers because they’re the default “compatibility” option.

WPA2 has been the standard since 2004 and is still acceptable. WPA3, released in 2018, is better again: it stops attackers from recording your login handshake and cracking the password offline at their leisure. Set WPA2/WPA3 mixed mode if some older devices won’t connect to WPA3 alone. Our WPA2 vs WPA3 guide explains the difference in detail.

4. Firmware that hasn’t been updated since unboxing

Router firmware updates patch real holes, and routers are a favourite target because they sit between you and the entire internet. Most people have never updated theirs once. Some ISPs push updates automatically; many don’t, and ISP-supplied routers are often the worst offenders.

Fix: check the admin page for a firmware or system-update section. Newer routers can update themselves; older ones need a file downloaded from the manufacturer and uploaded manually, which takes ten minutes. Put a reminder on it every few months.

5. Remote administration left on

Some routers offer “remote management” or “web access from WAN”, which lets you administer the router from the internet instead of only from inside your home. Unless you specifically set that up and need it, switch it off. It puts your router’s login page on the public internet where scanners knock on it all day.

6. The WPS button

That push-button pairing feature (WPS) was meant to make connecting easier. Its PIN method has a known flaw that lets nearby attackers guess the PIN by brute force. There’s little reason to keep it: you pair a new device a few times a year, and typing the WiFi password once is not a hardship. Turn WPS off in the router settings.

7. Everything sitting on one network

The smart TV, the doorbell camera, the printer, the kids’ tablet, and your work laptop all share one network in most homes. The weak link problem is real: a cheap IoT camera with sloppy security, once compromised, becomes a foothold onto everything else, including the laptop you do your banking on.

The fix costs nothing: most routers have a guest network feature. Put visitors and smart-home gadgets on the guest network, keep your personal computers on the main one, and the two can’t see each other. Our guest network guide walks through the setup, and our network team can do it for you if you’d rather not poke around router settings yourself.

If your WiFi struggles to reach the back of the house, that’s a coverage problem rather than a security one, and it’s fixable too: properly placed access points beat repeating gadgets every time. We do Wi-Fi setup, coverage and troubleshooting as part of our network services across Somerset West, Strand and Gordon’s Bay.

Frequently asked questions

How often should I change my home WiFi password?

Once a year is a sensible rhythm for a home network, and immediately if a person you no longer trust has it. The stronger fix is keeping visitors and smart devices on a separate guest network, so the main password is shared far less.

Is WPA2 still safe to use in 2026?

Yes, provided the password is long and random, and the router’s firmware is current. WPA3 is stronger because it blocks offline password cracking, so choose WPA2/WPA3 mixed mode if your router offers it.

Does hiding my WiFi network name make me safer?

Not really. The network name still leaks when devices connect, and hiding it causes connection problems of its own. A strong password with WPA2 or WPA3 encryption is what actually protects the network.

Related guides

• WPA2 vs WPA3: which one should your router use?
• Guest network setup for homes and guesthouses
• Router settings worth changing beyond the WiFi password