Wireless networks offer mobility and flexibility. They let you access the Internet from almost anywhere. But to make sure your computer is secure, you have to protect it against the risks that wireless networks can pose.
Did you know that hackers and fraudsters can:
- Intercept your messages;
- Access your computer and the data it holds;
- Use your Internet connection to commit crimes for which you could be held responsible?
This could expose you to fraud, identity theft, computer viruses and spyware.
Your risk level also depends on the information stored on your computer. It’s up to you to decide what level of security you want to protect your information and your personal wireless network.
Here are some tips you can apply, depending on your personal situation.
Best practices for configuring a router
To create your wireless network, you’ll need a router. Unlike household appliances, a router isn't something you can just plug in and forget about it – you have to configure it first. If you need help, talk to a technical support person.
- The first thing to do with a router (or Wifi access point) is to put it in a safe place so no one can connect to it directly.
- Next, pick a good name for your network (SSID). Since your network name is always visible, even outside of your home, you should choose a name that’s easy to remember but that doesn’t reveal any personal information (such as your name or address). Furthermore, from your computer’s control panel, there is sometimes an option to disable broadcasting to prevent your personal network from being automatically picked up by people in your neighbourhood.
- You can set up MAC (media access control) address filtering. This lets you choose which computers are authorized to connect to your network. It's not foolproof, but it's a good start and offers an extra layer of security.
- To manage the administrator password, select the option to manage it from within your network as opposed to from an external network (this option is generally not selected by default). And remember to save a copy of your password in a safe place.
- You can adjust your signal strength, depending on the area you need to cover. Why tempt fate by broadcasting your signal to the whole neighbourhood?
- Make sure that information is encrypted by using the highest encryption level supported by your devices and wireless access point – WAP2 is highly recommended. You can check this information before you buy your wireless router. Next, create a strong encryption key that includes letters and numbers separated by symbols to make it easy to write out (you might want to use a password generator for help). Keep a written copy stored in a safe place. If you lose your password, you’ll need to get a factory reset. Change it if you suspect it might have been compromised and always change it after any installation by a technician.
Best usage practices
Now that your router is configured, here are a few helpful tips for using it.
- Set up an Internet access schedule. This option lets you control when and what type of access is permitted. It’s an extra layer of security, and can be used as a kind of parental control.
- Turn it off when you’re not using it. It’s a good idea to turn off your wireless router and any peripherals when you're not using them.
- Avoid unknown networks. Never connect to an unknown network (that is, a network you haven’t been authorized to use). Not only is it dangerous, it’s illegal too. And there have been many reports of fraudsters (hackers) in airports.
- Update your firmware regularly. This embedded software is regularly updated by manufacturers to improve its performances and to add new features.
- Be wary of unknown devices (e.g., a friend’s flash drive, iPod, or printer). Even a network with excellent encryption can be compromised by an authorized user, however unwittingly. Make sure that every device hooked up to your network has the latest antivirus and spyware updates.
Advanced best practices
These are some extra tips for people who want to make sure their networks are as secure as possible.
- Use your router’s firewall, after checking the default access rights, to avoid unpleasant surprises.
- Remember that with some Wifi access points you can have end-to-end virtual private network (VPN) for 100% secure communications. It also lets you control access based on which sites are being accessed and when, and the types of applications and services being used.
- Use logs and check them regularly. Don’t forget to save a copy when the log is full (email/syslog).
- Configure your DHCP (Dynamic Host Configuration Protocol) to restrict access based on how many computers are on your network.
- Synchronize the clock for your wireless access point (NTP) when analyzing events.
- Use the parallel security services offered by some Wifi access points that provide additional protection when you’re on the Internet.

