Every small office has one

Description and use

Small offices often leave routers misconfigured. This workflow updates admin credentials, enables WPA3, splits networks, and schedules quarterly audits to secure the office Wi‑Fi.

Problem

Small offices often leave their router unsecured and misconfigured, leading to weak admin passwords, outdated firmware, and network segmentation failures.

Outcome

Implementing the workflow reduces router-related security risks, ensures proper network segmentation, and establishes a repeatable audit cadence.

Workflow

• 1. Secure admin plane: change admin password, store in manager, disable remote admin, UPnP, WPS, update firmware.
• 2. Set Wi‑Fi security: use WPA3 if possible, otherwise WPA2‑AES; choose long random passphrase.
• 3. Split network: create separate SSIDs for staff, guests, IoT; test guest reachability to ensure isolation.
• 4. Define password rotation trigger: on offboarding, device loss, or every six months; make rotation quick.
• 5. Audit devices: disable auto‑join on laptops, review client list quarterly, retire unused devices.
• 6. Conduct quarterly walk test: check signal strength from outside, review client list and admin logs, document firmware date, client count, changes.

Evidence

The admin password is still admin or the sticker value.

Source

Turn off remote administration and UPnP unless something genuinely needs them, kill WPS entirely, and check firmware.

Source

Split the network: staff, guests, everything else.

Source