Most of us plug our broadband router into the wall, connect our phones and never look at the flashing lights again. That habit is causing serious problems. According to a Broadband Genie survey, 68% of UK households still use the default router passwords printed on the back of their hubs. Leaving those default settings in place is an open invitation to anyone within range of your house.
The UK National Cyber Security Centre reported a 20% rise in home network hacks in the final quarter of 2025. Unsurprisingly, Ofcom also noted that broadband security complaints rose 15% over the course of 2025. If you are still typing in a string of random capital letters from a plastic sticker, it is time to lock down your network. The process takes less than five minutes, but you need to know exactly where to look.
The Difference Between Your Two Passwords
Before you type anything into a browser, we need to clear up a common trap. Your router actually has two completely different passwords. You need to understand both to secure your network.
The first is the Wi-Fi password. This is the code you type into your phone, laptop or smart TV to get online. The second is the admin password. This is the key to the router itself. You use the admin password to log into the settings panel where you can change how the hardware behaves. You need the admin password to change the Wi-Fi password.
Both of these codes are printed on the manufacturer sticker on the back or base of your router. Sometimes the admin password is called the admin key, settings password or router password. Keep the router nearby because you are going to need those details shortly.
How to Access Your Router Settings
To change your Wi-Fi password, you have to log into your router via a web browser. You do this using an IP address. An IP address is just a string of numbers that acts as a local website for your specific hardware.
Make sure you are connected to your current Wi-Fi network. Open Safari, Chrome or Edge on your phone or computer. Click the address bar at the top, delete whatever is in there and type the specific IP address for your broadband provider. Hit enter. You will land on a login page asking for that admin password we just discussed.
Provider-Specific Steps
The exact numbers you need to type and the menus you need to click depend entirely on who supplies your broadband. Here are the exact routes for the major UK providers.
BT
If you have a BT Smart Hub 2 or Smart Hub 3, the admin panel is accessed at 192.168.1.254. Type that into your browser address bar. Once the page loads, click on Wireless or Advanced Settings. The screen will prompt you for the admin password from the back of the hub. Enter it, and you will see an option to change the wireless network key. Type your new Wi-Fi password and hit save. If you are shopping around for an upgrade, BT broadband Full Fibre packages currently range from £28 to £60 per month for 2026 and include a modern router right out of the box.
Virgin Media
Virgin Media Hub 5 and Hub 5x routers are accessed at 192.168.0.1. Type those numbers into your browser. Enter the settings password from the sticker on the base of the hub. Once you are in, click on Advanced Settings. From there, select Wireless and then Security. You will see a box labelled Passphrase. Delete the default text, type your new password and click apply. For context on their current deals, Virgin Media packages range from £25 to £70 per month in 2026.
Sky
Sky does things differently. You do not need to memorise an IP address. The Sky Broadband Hub is accessed at router.sky.com. You can log in there using the admin details on the back of your box, click Wireless and update your security key. However, if you want the easiest route possible, use your phone. Sky broadband rolled out a one-tap password change in the My Sky app in February 2026. Just open the app, tap on Broadband and select change Wi-Fi password.
Vodafone
Vodafone Hub 3 and Hub 4 routers are accessible via 192.168.1.1. Enter that into your browser, type in the router password and look for the Wi-Fi settings tab to update your network key. Much like Sky, Vodafone also introduced a one-tap password change via the MyVodafone app in February 2026. If you have the app installed, doing it from your phone takes seconds.
TalkTalk
The TalkTalk Wi-Fi Hub also sits at 192.168.1.1. Type that into your browser and log in with the admin password. Click on the Dashboard, select See Wi-Fi Settings and then choose Manage Advanced Settings. Look for the Wireless Security section, update the Wi-Fi password field and save your changes.
Choosing the Right Security Settings
Once you are in the menu to change your Wi-Fi password, you will notice a drop-down box for security type or encryption. This setting matters just as much as the password itself.
You will likely see options like WPA2, WPA3 or WPA2/WPA3 Mixed. WPA stands for Wi-Fi Protected Access. It is the encryption standard that stops neighbours or hackers from intercepting the data travelling between your phone and your router. The Wi-Fi Alliance pushed new WPA3 certification updates in January 2026, and this protocol is now adopted in the latest BT and Virgin Media firmware.
WPA3 is highly secure and protects against offline brute-force attacks. If your router supports it, select WPA3. If you have older devices like a five-year-old smart TV that refuse to connect after you select WPA3, drop the setting down to WPA2/WPA3 Mixed. This allows newer phones to use the best security while giving older tech a way to get online.
When creating the password itself, avoid the usual mistakes. Do not use your street name, your pet’s name or your birthday. The best approach is stringing three random words together with a couple of numbers at the end. It is easy to read out to guests but mathematically incredibly difficult for software to crack.
If you log into your router and only see options for WEP or WPA without a number attached, your hardware is dangerously obsolete. These older standards can be broken by amateur hackers in minutes. When your router cannot support modern encryption, it is a glaring sign that your provider has left you behind. You should compare broadband deals in your area to secure a new contract that includes up-to-date hardware.
Features You Should Disable Immediately
While you are sitting in the router admin panel, you should fix two massive security vulnerabilities that broadband providers routinely leave switched on by default.
The first is WPS, which stands for Wi-Fi Protected Setup. This is the feature that lets you connect a device by pressing a physical button on the router or entering an eight-digit PIN instead of the full password. The PIN system is notoriously weak. Hackers can run automated software to guess the PIN and bypass your complicated Wi-Fi password entirely. Find the WPS setting in your wireless menu and turn it off completely. As noted by the experts at Broadband.co.uk, disabling WPS and remote management are critical steps for home network security.
Remote management is the second feature to kill. This allows someone to log into your router admin panel from outside your home network. Unless you are an IT professional who specifically needs to fix your home network while sitting in an office miles away, you do not need this. Disabling it ensures that anyone trying to access your router settings must be physically connected to your Wi-Fi first.
Setting Up a Guest Network
Many modern routers give you the option to switch on a guest network. This broadcasts a second Wi-Fi name from the same router. You should absolutely use this feature, but not just for your friends.
A guest network isolates connected devices from your main network. This makes it the perfect place to dump all your smart home gadgets. Cheap smart plugs, internet-connected lightbulbs and wireless security cameras often have terrible internal security. If a hacker manages to compromise a cheap smart bulb, they can use it as a bridge to access your main network. If that bulb is on a guest network, the hacker hits a dead end. They cannot see your laptop, your phone or your private files. Keep your personal computing devices on your main network and put everything else on the guest connection.
Reconnecting Your Devices
The moment you click save on your new Wi-Fi password, your router will reboot its wireless signal. Your phone, your television and your smart speaker will instantly drop offline. This is completely normal.
Do not panic when the house goes quiet. Start with your phone. Go into your Wi-Fi settings, tap on your network name and enter the new password. If you use an iPhone or iPad, Apple has a brilliant feature to speed up the rest of the house. Once your iPhone is connected, you can physically hold it near your iPad or Mac. A prompt will appear asking if you want to share the password. Tapping yes sends the secure code over Bluetooth so you do not have to type it again. You can read exactly how this works via Apple support.
For smart TVs and games consoles, you will have to pick up the remote and type the new password in manually. Smart plugs and speakers usually require you to open their respective smartphone apps and follow the setup wizard to pass the new Wi-Fi details across.
What to Do If You Are Locked Out
Sometimes things go wrong. Perhaps you changed your router admin password three years ago and forgot it. Perhaps you bought a house, the previous owners left the router plugged in and you do not know the credentials. If you are locked out of the admin panel, you need to perform a factory reset.
Find a paperclip or a SIM ejector tool. Look at the back of your router for a tiny hole labelled Reset. Push the paperclip into the hole and hold the hidden button down for ten full seconds. The lights on the front of the router will flash and turn off.
This process wipes all custom settings from the router memory. Crucially, it resets the admin password and the Wi-Fi password back to the exact letters and numbers printed on the sticker. Doing this does not cancel your broadband account or lose your actual internet connection. The router will simply dial back into your provider automatically. After three or four minutes, the lights will go green, and you can log in using the default sticker details to start the password change process from scratch.
If you find your provider’s router too frustrating to deal with, you are not trapped with it. Many people choose to buy their own hardware to gain better range and easier menu systems. Take a look at the best wireless routers on the market if you want total control over your home network.
Taking Control of Your Connection
Changing your Wi-Fi password is the single most effective way to kick unwanted users off your connection and secure your personal data. By following the steps for your specific provider and selecting modern encryption standards, you remove the easy targets that opportunistic hackers look for.
If you have worked through this process and realised your router is too old to offer proper security, do not settle for a substandard connection. Internet service providers rely on customers suffering in silence. When your contract ends, you have the power to walk away and demand better equipment. You can avoid broadband price increases and get a brand-new router simply by moving to a competitor.
Run a postcode check to compare broadband deals
