Home internet security basics

Start with the router and Wi-Fi

• Change default router or admin passwords where you control them.
• Use a strong Wi-Fi password that is not reused for email, banking, camera accounts or social media.
• Use WPA2 or WPA3 Wi-Fi security where available.
• Keep router firmware updated if the router is yours. For provider gateways, ask whether the provider manages updates.
• Use a guest network for visitors if your router supports it.
• Consider putting smart-home devices on a guest or IoT network if your router supports that and you are comfortable managing it.

What if you forgot the modem or router password?

If you forgot the admin username or password for your modem, router, or gateway, do not rush straight to a factory reset. First check whether the provider has an app, support page, sticker label, or customer portal that can help you recover or change the Wi-Fi name, Wi-Fi password, or admin password.

A reboot simply restarts the equipment. A factory reset usually erases saved settings and returns the device to its original setup state.

If those settings are lost, the modem may not reconnect until it is configured again. Many ordinary users find DSL modem setup difficult, even when a provider support agent is helping by phone or chat. Small mistakes in the username, password, connection type, or advanced settings can keep the service offline.

Also consider the timing. Many people only try a factory reset when the internet is already frustrating — often on a Friday night, Saturday night, holiday, or before an important work or school task. That is the worst time to discover that the modem needs provider-specific settings before it can reconnect.

How long does a modem or router usually last?

A modem, router, or modem/router gateway can keep working for many years, but “still turns on” is not the same as “still works well.” Older equipment may have weaker Wi-Fi, slower ports, fewer security updates, poorer coverage, or trouble keeping up with newer internet plans.

As a practical rule, many households should review router or Wi-Fi equipment after about four to six years. Provider modems and gateways may last longer, but they should still be replaced when the provider says they are outdated, when they no longer support the plan speed, or when they become unstable.

Keep devices updated

Windows updates, macOS updates, iPhone and Android updates, browser updates, app updates, antivirus/security updates, game updates, cloud photo backup, file sync, and console downloads can all use the internet even when nobody is actively browsing.

This is usually a good thing. Security updates should not be turned off just to save bandwidth. Instead, schedule large updates for a better time when possible and pause unnecessary cloud syncing during important calls.

Antivirus without panic

On modern Windows PCs, the Windows Security app and Microsoft Defender Antivirus are built into Windows. For many ordinary home users, the first step is to make sure built-in protection is turned on, updated, and not ignored. Some people still choose paid security software for extra features, but do not panic-buy antivirus software just because a scary ad says you must.

Passwords and multi-factor authentication

• Use unique passwords for email, banking, cloud accounts, provider accounts, camera accounts and shopping accounts.
• Turn on multi-factor authentication for important accounts where available.
• Use a password manager if you are comfortable with one.
• Do not reuse the Wi-Fi password as the router admin password or camera-account password.

Smart-home devices, cameras and appliances

Smart thermostats, doorbell cameras, pet cameras, baby monitors, smart plugs, smart speakers, security cameras, smart TVs and smart appliances are part of the home internet network. They should not be treated as “set it and forget it” devices.

Use strong account passwords, turn on multi-factor authentication where available, keep apps and firmware updated, and remove devices you no longer use. Before selling, recycling, or giving away a smart device, remove it from your account and follow the manufacturer’s reset process.

Be especially careful with cameras and microphones. Use official apps, avoid unknown brands with poor support, and do not expose cameras directly to the public internet unless you truly understand what you are doing.

Smart devices can also slow down the internet

Doorbell cameras, pet cameras, baby monitors, security cameras, smart TVs, TV boxes, cloud-connected speakers and other connected devices may upload video, download updates, stream media, or stay connected in the background. Several cloud cameras uploading video at the same time can affect video calls, gaming, cloud backup, remote work and other real-time uses.

Smart devices can use monthly data too

If your internet plan is not unlimited, smart-home devices can increase monthly usage. A camera that uploads video clips, records continuously, or is viewed remotely may use more data than expected. Several cameras, streaming devices, game systems or unofficial TV boxes can add up quickly on a capped internet plan.

Use authorized streaming sources

For movies, shows, live sports, pay-per-view events and TV channels, use authorized streaming services, official broadcaster apps, provider TV apps, or other legitimate sources that clearly have the right to offer the content.

Be cautious with aftermarket TV boxes, modified streaming sticks, or “fully loaded” devices that promise free access to paid TV channels, live sports, movies, pay-per-view events, or subscription services without a legal paid subscription.

• Legal risk: the content may be unauthorized or pirated.
• Security risk: the device or apps may be modified, unsupported or unsafe.
• Privacy risk: unknown apps may track viewing, collect data or ask for unnecessary permissions.
• Fraud risk: some services disappear after payment or demand strange payment methods.
• Bandwidth risk: unofficial streaming devices may use heavy data, run poor-quality streams, retry failed streams or slow down the rest of the home network.

Do you need a VPN at home?

A VPN can be useful in some situations, but many ordinary home internet users do not need to keep a paid VPN turned on all the time. A VPN can slow down the connection, add latency, make streaming or banking sites behave strangely, and make speed-test results harder to understand.

Do not buy a VPN just because an ad scared you. If the goal is basic home internet safety, a VPN is usually not the first step. Updates, strong passwords, MFA, router security, official apps and scam awareness usually matter more.

VPNs and streaming services

Some people subscribe to VPNs because they have heard that a VPN can change how their location appears online. Be careful with that idea. Streaming services, sports apps, broadcaster apps and TV providers often license content by country or region, and their terms may limit where certain movies, shows, channels or events can be watched. A VPN can also make streaming more frustrating by causing location errors, quality problems or extra sign-in checks.

Cookies, cache and search history

Clearing cookies, cache and browsing history can sometimes help with privacy on shared devices or fix strange website behaviour. It is not always something to do constantly.

Phones, tablets, game systems and handhelds

When at home, connect phones and tablets to home Wi-Fi if the home internet plan is unlimited or has more data than the mobile plan. If the home internet plan has a usage limit, using Wi-Fi moves the usage from the mobile plan to the home plan; it does not make the data disappear.

Game consoles and handheld gaming systems can also connect to home internet. Games can use data for downloads, updates, cloud saves, online play, voice chat, screenshots, video clips, store browsing and background updates.

Better first steps for most households

• Keep Windows, macOS, iOS, Android, browsers, apps, routers and smart devices updated.
• Use strong unique passwords and MFA for important accounts.
• Use WPA2 or WPA3 Wi-Fi security and a strong Wi-Fi password.
• Do not install fake updates, “free TV” apps, or unknown browser extensions.
• Use authorized streaming services and official app stores.
• Run a speed test with the VPN turned off before blaming the provider.
• Check the router’s connected-device list if the internet suddenly feels slow.

For more detailed reading

• How much internet does my household use?
• Internet speed-test results explained
• Provider gateway vs router vs mesh Wi-Fi
• Fibre vs cable internet in Canada
• Digital Security Explained
• Cyber Risk Explained

Public source notes

• Canadian Centre for Cyber Security: router best practices
• Canadian Centre for Cyber Security: multi-factor authentication
• Microsoft: Windows Security app
• Netflix: VPN or proxy connection errors