Home network maintenance and security checklist

What to take away

• Keep a current diagram, equipment inventory, and device list.
• Verify firmware, encryption, admin access, guest isolation, and exposed services.
• Measure performance from named locations with consistent methods.
• Review provider price, fees, speeds, latency, and data limits together.
• Prepare a restart sequence and support record before an outage.

Use this checklist monthly and after a provider, router, access-point, password, or major device change. Do not change several settings at once. A saved baseline makes failures easier to reverse. What each piece of equipment does, and which performance terms are not interchangeable, is covered in home networking basics.

Equipment and ownership

• Record provider, plan, support number, and account owner.
• List modem or optical terminal, router, switches, access points, and mesh nodes.
• Record model, serial, firmware, location, power supply, and ownership for each.
• Label cables and port roles.
• Mark which device provides routing, DHCP, DNS forwarding, firewall, and Wi-Fi.
• Store warranty and replacement dates.

Avoid publishing the full network diagram. It can contain addresses, device names, serials, and security details.

Router administration

• Replace default administrator credentials.
• Use a unique administrator password separate from the Wi-Fi password.
• Turn on multi-factor authentication if the router account supports it.
• Limit administrators to people who maintain the network.
• Disable internet-facing administration unless there is a defined secure need.
• Log out after changes.
• Record the supported recovery and factory-reset process.

Firmware and support

• Check that every router, switch, access point, and mesh node still receives fixes.
• Enable supported automatic firmware updates where appropriate.
• Keep stable power during manual updates.
• Read release notes for security or compatibility changes.
• Replace equipment that cannot support required security settings.

CISA's guidance on using wireless technology securely covers router password changes, encryption, firewall use, software updates, safer placement, remote-management controls, and device protection. Use its principles with the current manual for each product because interfaces and supported protocols change. Applying them to one specific model, in order, is how to set up a home router securely.

Wi-Fi security

• Use WPA3 Personal or a supported WPA2-based compatibility mode where required.
• Do not use WEP, open service, or obsolete cipher modes.
• Set a long, unique network password.
• Use a network name that does not reveal an address, owner, or router model.
• Turn off WPS if it is not needed.
• Review UPnP, port forwarding, dynamic DNS, and cloud access.
• Confirm router firewall status.

Device inventory

• Compare the router's connected list with owned devices.
• Identify random-address behavior before blocking unknown entries.
• Rename devices without exposing sensitive personal information.
• Remove products that no longer receive updates or are no longer used.
• Change default device passwords.
• Enable device-level multi-factor authentication where available.
• Record smart-device cloud accounts and owners.

Guest and smart-device separation

• Give visitors a guest network rather than the main password.
• Test whether guest isolation blocks private devices.
• Put cameras and appliances on a separate segment when supported and useful.
• Confirm casting, printing, and local control still work where intended.
• Review every exception to isolation.

Performance baseline

Use one current wired computer and one representative wireless device.

• Test wired service at the router.
• Test Wi-Fi in each important room.
• Record download, upload, latency, time, band, node, and device.
• Note simultaneous calls, streams, backups, or game downloads.
• Check packet loss during real-time trouble.
• Keep results from before and after changes.

Do not compare tests from different devices or servers as though only the router changed. When one room stays slow after that, the coverage options are weighed in Wi-Fi, Ethernet, mesh, and range extenders compared.

Provider terms review

The FCC's broadband consumer-label fact sheet lists plan information including price, introductory terms, added charges, data allowance, download and upload speeds, latency, network-management practices, privacy policy, and support. Save the label for the plan you order and compare it with bills and observed service.

• Confirm the regular price after promotions.
• Record equipment, installation, termination, and other fees.
• Check data limits and overage terms.
• Compare advertised download, upload, and latency figures.
• Note support and complaint routes.
• Review provider privacy and network-management disclosures.

Outage preparation

• Write the normal restart order and wait times.
• Keep status-light meanings and support contacts offline.
• Know which phones or alarms depend on router power.
• Keep a safe approved backup communication method.
• Identify equipment covered by battery backup.
• Do not connect a generator or improvised power source without proper electrical controls.

Change log

For each change, record date, person, reason, old value, new value, affected devices, test, and rollback. Do not store clear-text passwords in the log. The devices joining this network have their own review in the personal device and account security checklist.

Common questions

How often should a router restart?

There is no universal schedule. Restart for a documented fault, update, or provider instruction. Repeated required restarts suggest a problem to diagnose.

Should I hide the Wi-Fi name?

Hiding the name is not strong access control and can create connection and privacy complications. Use current encryption and a strong password.

Is an unknown device always an intruder?

No. Private or randomized addresses, generic labels, and forgotten devices can look unfamiliar. Identify it methodically before blocking it.

Should I save a router configuration backup?

Yes, if the router supports a protected, compatible backup. Also record the firmware version because old configuration files may not restore cleanly to new software.