Secure your WiFi\Router

We all love WiFi for its mobility. So lets secure it. First step is to read the owners manually of your device to see what options there are. You can find them on the manufactures website or via their tech support options. There is usually a sticker on the bottom that lists the model number.

• Change the default administration password that the device came with. Use a password manager to generate a super complex one.

• Never leave it open and always use a strong passphrase. Not a password but a phrase, it is much harder to decipher. While a funny cartoon, there is much truth to it. https://xkcd.com/936/

• For WiFi, we recommend setting up what is commonly called 'Client Isolation'. What this does is prevents two devices from 'talking' directly to each other. This prevents a malicious actor from trying to hack into your system if you are on the same WiFi network.

• For the router, disable ping and all other services from the internet side of it. This will help keep it 'invisible' from the internet scanners that constantly are searching for devices to exploit.

• Don't like public WiFi? Neither do we, turn your phone into a 'hot-spot' and connect via it.

• Make sure you set rules/policies to only allow DNS resolution to OpenDNS. This way you know what servers you are using for look ups and some malware will point at different DNS servers to try and bypass DNS filtering.

• If possible, send telemetry data back to the provider(s). The more that perform this, the better the herd immunity becomes.