IndependentParent-ledNo trackingNo affiliation

PARENT HOW-TO / REVIEWED SEP. 24, 2026

HOME WI-FI

Secure your home Wi-Fi

Lock down the router, add a guest network, group each child’s devices for pauses and bedtimes, and set a family filter for everything on your home Wi-Fi.

PLAN ON 30–45 minutes

THE WALKTHROUGH

Go down the list.

Tap a step’s number to check it off. Your progress stays on this device.

0 of 7 steps done

  1. Lock down the router itself

    Open your internet provider’s or router maker’s app, or the web address printed on the router. Change the admin password, which guards the router’s settings, to something long and unique. Turn on automatic updates if offered. eero and Google Nest Wifi update on their own. If your provider supplied the router, ask whether it updates automatically. Turn off remote management and WPS if you see them.

  2. Turn on strong Wi-Fi security

    Encryption scrambles what travels over your Wi-Fi. Choose WPA3 Personal, or a WPA2/WPA3 mode (called Transition or Hybrid in some apps) if older devices struggle. Never leave it open or on WEP. Xfinity app > WiFi > WiFi details > Edit WiFi settings > Security mode. eero app > Settings > Network settings > Encryption. Then set a Wi-Fi password of 5 to 7 unrelated words, used nowhere else.

  3. Give guests their own network

    Turn on the guest network with its own name and password. Use it for visitors and smart-home gadgets, so they stay apart from your family’s devices. Keep kids’ devices on the main network, since some filters, such as eero Plus, skip the guest network, and don’t share the guest password with your kids. eero app > Settings > Guest wifi network. Google Home app > Home > Wifi > Devices > Network settings > Guest Network.

  4. Make a profile for each child

    Group each child’s devices under their name, then use Pause or a bedtime schedule. Xfinity app > Home > + > Family Settings, then Schedule a pause (Bedtime is a template). eero app > Home > Profiles > Add a Profile, then Add a scheduled pause. Google calls this Family Wi-Fi. Turn off each device’s private Wi-Fi address for your home network, or the router may not recognize it.

  5. Turn on the built-in filter

    Many router apps can filter a profile’s browsing. Xfinity app > Home > your child > Block content not suitable for kids > Turn on. This sets Google SafeSearch, Bing SafeSearch Strict, and YouTube Restricted Mode. Google Home app > Home > Wifi > Family Wi-Fi > your group > Edit, then turn on SafeSearch. eero Content Filters need an eero Plus subscription.

  6. Add a family DNS filter

    DNS works like the internet’s phone book. A family DNS service refuses to look up adult and harmful sites for your whole Wi-Fi. In your router’s DNS setting, often under Internet or WAN, enter 1.1.1.3 and 1.0.0.3 (Cloudflare 1.1.1.1 for Families) or 208.67.222.123 and 208.67.220.123 (OpenDNS FamilyShield). If your provider’s router has no DNS setting, use its built-in filter instead. The service sees which sites your home looks up, so read its privacy policy.

  7. Check who is connected

    Look over the device list now and then, and turn on new-device alerts if your app has them. Xfinity app > WiFi, then Device Details shows the maker. eero app > Devices. Google Home app > Home > Wifi > Devices. If you find a device you do not know, block it (eero: the device > more options > Block device) or change the Wi-Fi password.

FIVE-MINUTE CHECK

Verify, don't assume.

  • The router uses your new admin password, not the default
  • Wi-Fi security shows WPA3 or WPA2, never WEP or open
  • Visitors and smart-home gadgets use the guest network
  • Each child’s devices sit in their profile, and no unknown devices appear
  • A paused device cannot load sites, and your filter’s test page shows it working

WHAT THE CONTROLS DO NOT SOLVE

  • Home Wi-Fi rules stop at your Wi-Fi. Cellular data, public hotspots, and other Wi-Fi networks skip them, so set up the phone’s own parental controls too.
  • A VPN, iCloud Private Relay, or a device’s own Private DNS or secure DNS setting can route around router filters. School-issued devices are managed and filtered by the district.
  • Filters block websites, not people. They do not screen chats, messages, or content inside apps, and no filter catches everything. Keep talking with your kids about what they see online.

OFFICIAL INSTRUCTIONS

CISA: securing your home Wi-Fi ↗Cloudflare: 1.1.1.1 for Families setup ↗OpenDNS: FamilyShield setup guide ↗Xfinity: use Family Settings in the Xfinity app ↗eero: what are Profiles? ↗

Platform features and menus change frequently. This guide was checked against the linked official documentation on September 24, 2026.

← All parent how-tos