A home network now carries work data, cameras, door locks and dozens of devices that rarely get updates. This category explains how to protect all of it in practical layers, without fear-mongering and without turning your house into a data center.
Start with the basics
The biggest gains usually come from simple steps. Change default admin passwords, keep router and device firmware current, turn off remote administration and features you don’t use, and replace equipment that no longer gets security updates. We explain each step and how to check your own equipment.
Wi-Fi encryption: WPA2 vs. WPA3
Wi-Fi security settings decide who can join your network and how well traffic over the air is protected. We explain WPA2, WPA3, transition modes and the difference between personal and enterprise security. We also cover what to do when older devices refuse to connect to a WPA3 network.
Segmentation: guest networks, IoT isolation and VLANs
Splitting your network keeps a compromised smart plug or a visitor’s phone away from your work laptop and file storage.
Guest and IoT networks
Many consumer routers offer guest networks that provide basic separation with very little setup. We explain what guest networks do and don’t protect, and which devices belong on an IoT network.
VLANs
VLANs give you finer control when your router, firewall and switches support them. We explain VLAN tagging, native VLANs, port-based VLANs and how VLANs differ from subnets, and then walk through practical home configurations.
Firewalls and router platforms
A firewall decides what traffic is allowed in and out. We compare built-in router firewalls with dedicated platforms such as pfSense, OPNsense and OpenWrt, explain hardware versus software firewalls, and cover rule-writing practices that keep things manageable.
VPNs and secure remote access
Reaching your home network from elsewhere is useful, but it’s also where many people accidentally expose too much.
Safer alternatives to open ports
Whenever possible, we recommend VPN-based access such as WireGuard or mesh VPN tools rather than forwarding ports directly to services. We compare those options and explain how secure each approach is in plain terms.
When ports must be opened
If you do need to forward a port, we explain exactly what gets exposed and how to limit the risk.
Ground rules
Only test, scan or change networks and equipment that you own or are authorized to administer. Security advice ages quickly, so check for current firmware and vendor advisories before you rely on any configuration.
Where related topics live
Everyday router settings and port forwarding basics are covered in Routers. Self-hosted services, server builds and network-wide ad blocking are covered in Home Lab.