UPnP Security Risk on Your Home Router: Should You Turn It Off?
Any device on your network can use UPnP to open ports in your router's firewall without asking. Find the toggle in the admin panel, test what breaks, and decide.
Read guideGuide archive
Category: Router Security
Router guides: firmware updates, open ports, remote management, UPnP and WPS, and what to do when a router may be compromised.
How to Open (Forward) a Port on Your Router
How to Open (Forward) a Port on Your Router. Static IP or DHCP reservation, the admin panel steps, common use cases, and how to avoid leaving unnecessary ports exposed.
Read guideInbound vs Outbound Firewall Rules: What Each One Controls
Inbound rules guard against port scans and direct attacks, while outbound rules can stop spyware from phoning home. See how to read and create a rule in Windows Defender Firewall.
Read guideRouter Automatic Updates: Should You Turn Them On?
Most homes should turn automatic updates on to close the flaws that botnet scans hunt for. Power users and home businesses may prefer manual or scheduled updates, chosen in the admin panel.
Read guideA Firewall Checklist for Beginners: What Each Check Proves
Record your IP, DNS resolver and existing rules, then test each new rule with a port scan, a log entry or an unapproved app. Expect your public IP to stay the same.
Read guideHow to See Which Ports Your Router Actually Exposes
Scan your public IP with an external port checker, check each open port against your router's forwarding table, and tell a refused connection (closed) from no reply (filtered).
Read guideA Router Patch Checklist That Catches Privacy Regressions
Record port forwards, DNS and VPN settings before you update, retest after, and watch for DNS reverted to ISP defaults or cloud features turned on. An ASUS advisory is the worked example.
Read guideHow to Update Router Firmware Without Losing Your Settings
Back up your settings and connect by cable first, then update from the admin page, a downloaded file or the mobile app, and restore the backup if the update resets anything.
Read guideRouter Remote Management: What It Exposes and How to Turn It Off
Where the setting hides on Netgear, TP-Link, Asus, Linksys and D-Link routers, how to confirm it is off from outside your network, and why an ISP router may keep its own TR-069 access.
Read guideWhy the WPS Button Is a Risk and How to Disable It
Both WPS modes skip your Wi-Fi password: the PIN can be brute-forced in hours and the push button opens a pairing window of about two minutes. Router lockouts only slow the PIN attack.
Read guideSecuring a Router After Malware: The Full Recovery Sequence
Unplug the WAN cable, note odd DNS servers or port forwards, hold reset for 10 to 20 seconds and install firmware downloaded on a clean device. VPNFilter shows why a reboot alone fails.
Read guideRouter Malware Symptoms: Real Signs vs Ordinary Noise
If every phone and laptop shows the same redirects or odd DNS servers, suspect the router first. Here is how to tell malware from an ISP's DNS proxy and what to do once it is confirmed.
Read guide