Keeping Wifi Safe

Note: This info is out of date due to the Wifi KRACK exploit and CIA Vault 7 attacks on routers

Wifi Protection Tips

New! KRACK

Because of the KRACK hack, all Wifi's even if you are using WPA2 can be compromised. So I would just assume that my Wifi is a public network and protect myself through other means such as via a VPN and TOR Router. The information below is out-of-date.

Dump WEP

WEP is broken. If your router uses WEP for authentication, then you already be sharing your Wifi with your neighbor. Or worse, your neighbor is a hacker and has been doing Man-in-the-Middle (MITM) attacks.

Use WPA2 Authentication

Make sure you use WPA2 for authentication. If you're using an older router, then dump it.

Dump Routers that have WPS

Newer routers with a feature called WPS automatically generates keys. Unfortunately these are all numeric and can be guessed with quick brute force.

Change Router Admin Password

By default, routers come with fixed usernames and passwords. For example, Netgear uses 'admin/password'. Using something called an XSS attack, someone can break into your router and hack you.

Apple Airport

In my experience, Apple Airport routers are more difficult to get into. This is because they use a different protocol instead of the typical web access provided by typical routers (port 80).

Use Non Dictionary Passwords

Because Wifi routers can accept multiple password tries very quickly, these devices are particularly vulnerable to brute force attacks (password guessing). Do not help the hackers by using words in a dictionary or common stupid passwords like 'password1234'.
See the link on setting up good passwords and that applies even more to Wifi.

So what if my WIFI gets hacked?

Be smart. Once someone breaks into your router, all your traffic can be 'sniffed' (read). Everything you are doing on the Internet will be known. And an MITM attack might compromise your data (like bank accounts).

Your protection in case of a WIFI break in is to use a VPN.