How to protect Wi-Fi from neighbors

To protect your Wi-Fi network from neighbors, you have to lock down your router. Use WPA3 or WPA2 encryption, set a strong Wi-Fi password, and change the router’s default admin login. These settings go a long way, so you may not need new hardware unless your router stops receiving updates.

A slow connection doesn’t necessarily mean someone is using your network, so we also explain how to find out who is connected, what to do if someone is, and how a VPN fits in.

Before you start thinking about protecting your Wi-Fi, you need to know who is using it. There are a couple of ways to find this out, but we’ve listed some of the most convenient options for you. So here’s how to see who is using your Wi-Fi:

Learn how to identify whether your router has been hacked.

Before you call the Wi-Fi police, an unfamiliar entry isn’t always a stranger. Recent Apple devices and Android 10 or later use different private Wi-Fi addresses for each network. This means the MAC (Media Access Control) address in your router’s list may differ from your device’s hardware address. To identify an entry:

Third-party applications provide an easy-to-read list of devices connected to your network, and many router makers offer their own apps that do the same. You can use these apps to identify unknown connected devices.

In addition, these apps also provide alerts for new connections to spot unauthorized devices, though features vary by app and plan.

Routers have LED indicators that show network activity. The blinking light means data is being sent and received. If it blinks continuously when no known devices are using the internet, someone unauthorized might be on your Wi-Fi.

This is only a rough clue since phones, TVs, and smart-home devices send data in the background. Confirm by checking your router’s device list.

Once you’ve confirmed a device isn’t yours, remove it and change your passwords. The step-by-step plan below walks through the full response.

If the device list looks clean but your Wi-Fi is still slow, interference or congestion is often the cause, not a malicious neighbor. Other routers, cordless phones, microwave ovens, and thick walls can weaken or crowd your signal without joining your network. Wi-Fi routers broadcast on numbered channels, a bit like lanes on a road. On the 2.4 GHz band, only channels 1, 6, and 11 don’t overlap. So, in a crowded building, many networks end up sharing the same lane and slowing each other down. Switching your router to a less crowded channel often helps with speed.

Most steps take only a few minutes, so grab a coffee and follow this checklist in order. Setting names vary by router brand but are usually found in your router’s admin page under Wireless, Security, or Administration.

Encryption scrambles the data traveling between your devices and your router, so devices without your password can’t easily join or read it. Choose WPA3-Personal if your router offers it. Since July 2020, Wi-Fi Alliance rules have required newly certified Wi-Fi devices to support WPA3, so a router bought in recent years likely has it. On many routers, it’s a single drop-down menu, so no engineering degree required.

WPA3 (Wi-Fi Protected Access 3) is the latest Wi-Fi security protocol that provides better security features than WPA2. It uses SAE (Simultaneous Authentication of Equals) to protect against brute-force attacks. Instead of relying solely on a pre-shared key, SAE requires the device and the router to generate unique keys each time they connect.

WPA2 (Wi-Fi Protected Access 2) is a security protocol that uses AES (Advanced Encryption Standard) to encrypt data sent over the network, helping protect it from interception. It requires a PSK (Pre-shared Key) to maintain a secure connection between a device and a wireless access point.

The PSK is a shared secret key known to the WAP (Wireless Access Point) and the client device. You can set it up during the network’s initial configuration. Then, whenever a device attempts to connect to your network, it will have to provide the correct PSK. This encryption makes it much harder for attackers to intercept and decipher the data.

Create a strong, unique password combining uppercase and lowercase letters, numbers, and special characters. Avoid easily guessable passwords like your name, age, or birthday.

Length matters too: the FBI recommends unique, random passwords of at least 16 characters, depending on your router’s limit. So a long passphrase of random words or a random combination from a password generator works well.

You can also change the default SSID (Service Set Identifier) to something unique that isn’t personally identifiable. Doing so makes it harder for attackers to guess the type of router you’re using.

Your wireless router has two passwords, and they do different jobs. The Wi-Fi password lets devices join your network. The administrator (admin) password lets someone log in to your router’s settings.

Leaving the default admin login is like leaving a spare key under the doormat — anyone on your network can try it. Once in, they can change settings, see connected devices, or lock you out. Replace it with a long, unique password that’s different from your Wi-Fi password.

To change it, type your router’s IP address into a web browser. It’s often 192.168.1.1 or 192.168.0.1, depending on the router manufacturer, and usually printed on the router’s label. Log in, then look for Administration, System, or Router Password in the settings.

Log out when you’re done, and turn off remote management, which lets people log in from outside your home network. If your internet provider supplied your router, you may need to use its app or portal instead.

WPS (Wi-Fi Protected Setup) lets a device join your network with a short PIN or a button press instead of your Wi-Fi password. That shortcut is a weak spot, because attackers can guess a WPS PIN by brute force, and the FTC (Federal Trade Commission) advises turning WPS off. Look for a WPS option under Wireless, Security, or WPS in your router settings and switch it off.

Manufacturers often release updates to patch security vulnerabilities, but users may be unaware. Check your router’s admin page for firmware updates and apply them as needed. If your router offers automatic updates, turn them on.

Routers don’t last forever, so check if yours still receives updates. The FBI warned in May 2025 that cybercriminals exploit end-of-life routers, which no longer get security patches, turning them into proxy networks for crime. Routers from 2010 or earlier likely no longer get updates.

In these attacks, malware doesn’t need your password. It scans for open ports and targets vulnerable software, so a strong Wi-Fi password alone won’t protect an unpatched router. If your manufacturer stopped issuing updates, replace the router.

If your router’s device list shows something you don’t recognize, disconnect it and change your Wi-Fi password so it can’t rejoin. Not sure if it’s a stranger or your own gadget? The section above explains how to tell.

You may want to share your Wi-Fi with guests. If you share, set up a separate guest network for visitors to keep them separate from your main network.

A guest network has its own name and password, so you can share it without giving out your main one. Enable it under Guest Network or Guest Wi-Fi in your router settings, choose WPA3 or WPA2, and set a different password.

Check your router’s device list every few months and after sharing your password. A quick look helps catch unfamiliar devices early.

Some people want to use free Wi-Fi anywhere they go. If a neighbor or a neighbor’s kid keeps connecting to your network, they may have your password or have found a way in via WPS.

If someone is using your IP for malicious or illegal activities, then it could cause serious trouble for you. To reduce the risk, follow this action plan if your neighbor has access to your Wi-Fi network:

Yes, you can keep neighbors off your Wi-Fi, and strong encryption does most of the work. WPA3 (or WPA2) with a strong password makes it much harder for anyone without the password to join your network, and it’s also how you make your home Wi-Fi more private.

Two popular extras add less protection than you might expect. MAC address filtering lets you allow only your devices’ MAC addresses, but adds little protection because anyone who sees a MAC address can copy it. Hiding your SSID is like removing your name from the mailbox: free tools can still reveal it. Use these only after the steps above, never instead of them.

You might be wondering: what about a VPN (Virtual Private Network)? Unfortunately, it doesn’t prevent neighbors from joining your Wi-Fi, nor does it secure your router — the steps above do that. But it does encrypt your internet traffic once a device is connected, which makes it especially useful on public Wi-Fi and other shared networks. Think of it as two layers: your router settings decide who gets through the front door, and a VPN helps protect what you send once everyone’s inside.

Protecting your Wi-Fi from neighbors mostly comes down to your router: use WPA3 or WPA2, set a long, unique Wi-Fi password, change the default admin login, turn off WPS, and keep the firmware up to date. Check your device list every few months and add a VPN like Surfshark VPN as an extra layer for traffic over networks you don’t control.