How to protect your router: the NSA's checklist
Six practical steps to lock down your home network, based on the guidance the NSA and FBI issued after the 2026 router-hijacking campaign. Most take just a few minutes.
6 steps to secure your router
Reboot your router regularly
This is the NSA's headline advice — weekly at a minimum. A power cycle clears malware that hides in your router's memory and drops the temporary connections attackers rely on. To reboot manually, unplug the router, wait 30–60 seconds, then plug it back in. (ISP-provided modems and gateways count too.)
Update your firmware
Router firmware is software, and like any software it gets security patches. The 2026 campaign specifically targeted a known, unpatched flaw. Log into your router's admin page (or its official app) and enable automatic updates if it offers them; otherwise check for updates monthly.
Change default usernames and passwords
Factory logins like admin / admin are published online and are the first thing attackers try. Change both the router admin password (for the settings page) and your Wi-Fi password to long, unique passphrases. Use a password manager so you don't have to memorize them.
Disable remote management
"Remote management" (sometimes called remote administration or WAN access) lets someone configure your router from the public internet. Unless you specifically need it, turn it off in your router's settings — it's a common way in for attackers.
Replace end-of-support routers
If your router no longer receives firmware updates, it can't be patched against new threats — and old, unsupported devices were among the easiest targets in the 2026 campaign. If yours is several years old or the manufacturer has stopped supporting it, it's time to replace it.
Watch for trouble — and stay online
Keep an eye out for signs something's off: your internet slowing to a crawl, settings you didn't change, or unfamiliar devices on your network. Rebooting on a schedule keeps things fresh, and getting an alert when your router restarts helps you notice unusual patterns.
Do the reboot step first
Of everything on this list, rebooting is the fastest win and the one the NSA leads with. Do it now — then set it on autopilot so you never have to think about it again. Read the full breakdown of the warning.
Automate the reboot the NSA recommends
Keep Connect covers steps 1 and 6 for you — scheduled reboots plus 24/7 outage recovery and alerts.