Wi-Fi & Keeping It Safe

The Wi-Fi is the part of the box you actually touch - the name you pick from a list, the password you type once and forget. It's also the part most people get a little wrong, usually in ways that either slow them down or leave the door unlocked. This phase demystifies what you're picking when you pick a network, then walks through the small set of security settings that genuinely matter.

The SSID - the name of your network

The SSID is the name your Wi-Fi broadcasts - the thing you see in the list of available networks. "Home_5G", "NETGEAR47", "PrettyFlyForAWiFi": all SSIDs. Your router announces it so devices can find and join the right network.

📝 Terminology. SSID = Service Set Identifier. A fancy name for "the network's name."

⚠️ Gotcha. Default SSIDs often reveal your router's brand or model (like "NETGEAR47" or "TP-Link_AB12") - a small hint to anyone nosing around about what hardware you're running. Renaming your network to something that isn't your name, your address, or your hardware model is a tiny, free privacy win.

Bands and channels - 2.4 GHz vs 5 GHz

Wi-Fi rides on radio waves, and home routers broadcast on two main bands - two different radio frequencies, each with its own trade-off:

• 2.4 GHz - travels farther and passes through walls better, but is slower and far more crowded (microwaves, baby monitors, and your neighbors' routers all share it).
• 5 GHz - much faster with less interference, but has shorter range and is more easily blocked by walls and floors.

   2.4 GHz   ████████████████████████  far reach, slower, crowded
                                         → good for the far bedroom, smart-home gadgets

   5 GHz     ██████████                 short reach, faster, cleaner
                                         → good for the laptop near the router, video calls, streaming

📝 Terminology. Within each band there are channels - narrower lanes on the same road. Neighbors on the same channel interfere with each other, like two conversations on the same walkie-talkie frequency.

Many modern routers carry one network name and quietly put each device on whichever band suits it ("band steering"), so you don't have to think about it. On older or split setups you'll see two names, like "Home" and "Home_5G," and you choose. Rule of thumb: close and needs speed → 5 GHz; far away or just needs to stay connected → 2.4 GHz.

⚠️ Gotcha. If a smart-home gadget refuses to connect during setup, it's often because it only speaks 2.4 GHz and your phone is sitting on 5 GHz. Putting your phone on the 2.4 GHz network during setup usually fixes it - this trips up almost everybody the first time.

As for channels: leave them on "Auto" unless you have a specific reason. Routers pick a reasonable channel on their own.

The firewall - the router's bouncer

Your router includes a firewall - a layer that inspects incoming traffic and blocks anything that wasn't invited. Phase 2 showed that NAT already makes inbound connections fail by default; the firewall is a deliberate, configurable layer on top of that, keeping unsolicited traffic out.

For almost every home, the firewall does its job out of the box and needs no attention. It's worth knowing it exists for two reasons: it's why random machines on the internet can't poke at your devices, and it's the thing you'd carefully adjust if you ever deliberately opened a port (a follow-up-guide topic, not something to do casually).

The security settings that actually matter

You don't need to become a network administrator - just get a small number of things right. Here's the checklist, in priority order:

The one gotcha that bites hardest

⚠️ Default admin credentials are the single most common way home networks get taken over. Routers ship with a factory username and password - often admin / admin or admin / password - printed in manuals anyone can find online. The admin login is not the same as your Wi-Fi password: it's the master key to the router's settings, where someone could redirect your traffic, open your network up, or lock you out. If you change one thing after reading this guide, change the admin password - two minutes, biggest hole closed.

📝 Terminology. WPA2 / WPA3 (Wi-Fi Protected Access) are the encryption standards that scramble your wireless traffic. WPA3 is the newer, stronger one; WPA2 is still solid and widely supported. Anything older - WEP, or "open"/no-password - should be avoided. (Source: Wi-Fi Alliance - WPA3.)

Why a guest network is worth the two clicks. A guest network is a separate Wi-Fi that can reach the internet but is walled off from your main devices. Put visitors on it so you're not handing out your real password, and put your smart bulbs, cameras, and plugs on it too - those cheap devices are the ones most likely to have security holes, and a guest network keeps a compromised gadget from being a doorway to your laptop.

Most "my network got hacked" stories trace back to one of two things: a default admin password nobody changed, or weak/old Wi-Fi encryption. Get the table above right and you've closed the doors that actually get used.

Recap

1. The SSID is your network's name; rename it off the factory default so it doesn't advertise your hardware.
2. 2.4 GHz goes far but slow; 5 GHz is fast but short-range - close-and-fast vs far-and-reliable. Smart gadgets often need 2.4 GHz to set up.
3. The router's firewall blocks uninvited inbound traffic and works out of the box; it's the deliberate layer on top of NAT's default protection.
4. The security that matters: change the admin password (the big one), use WPA2/WPA3, set a strong Wi-Fi passphrase, turn on a guest network, and let firmware auto-update.

When something's still wrong

If your network is set up and safe but a device still won't load pages, the problem is usually one layer deeper - names not resolving, the wrong port, or a connection that never completes. That's the ground covered in IP, DNS, and Ports: start there and you'll know which layer to poke at instead of restarting the router for the third time.

You now know what the box on your shelf is, what it's doing every second, and how to keep it yours. That's the whole machine, named.

← Phase 2: NAT & Private IPs · Guide overview

Related: IP, DNS, and Ports · How the Internet Works · The TCP/IP Model