Begin with WPA3 where supported, a strong passphrase, and disabled WPS. Change default admin usernames, set a long unique router password, and update firmware regularly. Turn off remote management unless you truly need it, and then protect it with multi‑factor authentication. Consider DNS filtering to block known malicious domains. A neighbor once prevented a camera compromise simply by disabling UPnP and closing needless ports—small toggles, big wins, quieter nights.
Place smart plugs, bulbs, and appliances on a separate SSID, VLAN, or guest network, keeping laptops and phones isolated from noisier devices. This reduces blast radius if something goes wrong and limits lateral movement. Even a simple guest network helps. When a friend’s insecure baby monitor started spamming traffic, segmentation kept work files safe and streaming smooth. You will hardly notice a difference in convenience, only in confidence and calm.
Protect every cloud account tied to your home with multi‑factor authentication, preferably app‑based or hardware keys. Use a password manager to ensure uniqueness and length, rotate credentials after incidents, and monitor for breaches with alerts. Credential stuffing attacks are common; preventing reuse is decisive. A reader shared how enabling MFA on a lighting hub blocked suspicious midnight logins abroad, turning potential panic into a quiet notification and a relieved sigh.