Secure Your Home Wi-Fi
NBN Router Settings That Matter

If you work from home in Brisbane, your NBN router is now part of your business network — full stop. The same router carries your client video calls, your accounting data, your kid's PlayStation, and the dodgy IoT lights you bought on Kogan. Each of those is a potential way in.

This guide covers seven router settings that take an afternoon to fix and dramatically reduce your home cyber risk — whether you are on FTTP in New Farm, FTTN in Logan, or a 5G fixed-wireless link in Ipswich.

Why Home Wi-Fi Security Matters Now

Hybrid working, Microsoft 365 client data on home laptops, and an explosion of connected gadgets have changed the risk picture. We see it every week across Brisbane:

• Smart fridges and IoT cameras with default passwords spreading malware
• Kids' devices torrenting, leaving the network attractive to attackers
• Neighbours connecting to default-passworded NBN routers
• Old TP-Link / D-Link routers with no firmware updates since 2019

If your business uses notifiable personal information at home (it does, the moment you read a client email), you have Privacy Act obligations to keep that data secure — and home Wi-Fi is in scope.

Step 1: Change the Router Admin Password

Most NBN routers ship with a default web admin login like admin / admin or a sticker password. Change it. Otherwise anyone on your Wi-Fi can reconfigure your network.

1. Find router IP
   Usually 192.168.0.1 or 192.168.1.1. Type into a browser.
2. Sign in with default creds
   Default usually printed on a sticker on the router.
3. Change admin password
   Use 16+ characters. Save in your password manager.
4. Disable any 'guest' admin accounts
   Some routers have multiple admin users — delete unused ones.

Step 2: WPA3 (or Strong WPA2)

The Wi-Fi protocol is what protects each device's connection. Older standards are broken:

• WPA3 — current, strongest. Most routers from 2020+ support it.
• WPA2-AES — acceptable. Use AES (CCMP), not TKIP.
• WPA / WEP / Open — broken. Replace the router if it cannot do WPA2 minimum.

Set your Wi-Fi password to 16+ characters. Random words like storm-lorikeet-mango-quay are easy to remember and impossible to brute force.

Step 3: Split Guest, Work and IoT Networks

Most NBN routers can broadcast multiple Wi-Fi networks. Use that:

1. Main SSID — work + family computers/phones
   WPA3, full speed, trusted devices only.
2. Guest SSID — visitors
   WPA2/WPA3, isolated from main network. No access to your printer or NAS.
3. IoT SSID — smart bulbs, cameras, doorbells
   2.4 GHz only often (most IoT cannot do 5 GHz). Isolated from main network.

If your router does not support multiple SSIDs, that is a sign to upgrade. Mid-tier mesh systems (Ubiquiti UniFi, TP-Link Deco, Eero) handle this well.

Step 4: Smart SSID Naming

Don't broadcast your apartment number, street name or family surname:

• Avoid: Smith_Apt_4B, NewFarm_Riverview_404
• OK: Lorikeet, Mango-Network, anything generic
• Hidden SSID is not security — it just makes your own life harder. Skip it.

Step 5: Keep Firmware Up to Date

Router firmware patches block known exploits. Most ISP routers have an auto-update toggle buried in admin settings. Turn it on.

• Telstra Smart Modem and TP-Link Deco — auto-update on by default in 2026
• Older Netgear, D-Link, Asus — check manually every 3-6 months
• If the router is older than 5 years and the manufacturer no longer ships firmware updates, replace it

Step 6: Turn Off WPS, UPnP, Remote Admin

Three router features that are convenient — and risky:

• WPS (Wi-Fi Protected Setup) — let-anyone-in 8-digit PIN, brute-forceable in hours. Turn off.
• UPnP — lets devices auto-open ports. Used by gaming consoles, but also malware. Turn off if you don't need it for gaming/streaming.
• Remote management — lets you log in from outside. Turn off unless you actually need it (use a VPN instead).

Step 7: Use Secure (Filtered) DNS

DNS is how device names become IP addresses. Default DNS = your ISP's. Free options that block known malware and phishing domains:

• Cloudflare 1.1.1.1 for Families — blocks malware (1.1.1.2) or malware + adult content (1.1.1.3)
• Quad9 (9.9.9.9) — Swiss non-profit, blocks malicious domains
• NextDNS — paid, customisable, family controls included

Set DNS at the router level so every device on Wi-Fi gets protection automatically.

Brisbane Storm Season Tips

October-March in Brisbane brings nasty storms, brownouts and lightning surges that fry routers, modems and everything attached:

• Surge protector on the NBN connection box and router — minimum
• UPS for the router and your work laptop — keeps Wi-Fi up during a 60-second power blip
• Backup 4G/5G — if you bill clients, a $30/month backup SIM in a 4G modem keeps you trading during NBN outages
• Keep router off the floor — flood season is real in Wynnum, Sandgate and bayside areas

Brisbane Setup Costs