If you're a power user, whether you've built your own router with pfSense, dotted mesh nodes around your home, or just have one of the best Wi-Fi routers supplying your network with features, there is always something that can be tweaked or adjusted in the settings to get your home network even better. Whether that's relatively simple fixes like turning on QoS and adjusting it for your ISP's speeds, or more involved processes of finding out the best transmit power for your wireless, they all add up to a better experience for every device connected to your network.

6 QoS

Give all the devices on your network exactly how much bandwidth they need

AmpliFi Alien allows for QoS settings by individually labeling devices as normal, streaming, or gaming.

Quality of Service, or QoS as you'll most likely see it, is one of the most important settings to enable on your router. It's essentially a digital traffic cop, prioritizing data transfer between your connected devices so that latency-sensitive data like video conferencing or online gaming gets higher priority than bulk data transfer. That way, even when multiple devices are using the network, they all seem smooth to the user, and no one device can hog all the available bandwidth.

On some routers, like those in the best mesh Wi-Fi systems, QoS will be adaptive, so the user doesn't have to do anything other than enable it, and it will monitor the bandwidth available and adjust levels accordingly. But really, it's not that hard to set up on more basic routers, all you need are the numbers from a speed test to set as incoming and outgoing bandwidth levels.

5 Transmit power

Tweaking this will give all your devices a better signal

We all know that it's the antennas on our routers that supply the wireless signal we use. The transmission strength of the signal is generated by the power supplied to the antenna, and you might think that a higher number would be better in all situations. Except, Wi-Fi doesn't behave like that, and a higher transmission strength could make the signal worse. If it's too high, not only could it be interfering with other devices, but it could also make it so you think your devices aren't working correctly.

That's because turning up the transmit power makes the router able to reach out further to your devices, but Wi-Fi is a two-way street, and you haven't increased the transmit power of your devices, leading them to connect to the router but not be able to transmit. Turn the transmit power down as far as you can, and if you need more coverage, think about Wi-Fi extenders or mesh nodes to make up the coverage gaps.

4 SSID and Wi-Fi password

Please don't leave it on the defaults

Source: Comcast

Wherever you got your Wi-Fi router, be that from your ISP or bought from a store, please, please, please do not use the default Wi-Fi credentials. Just don't do it. They should be one of the first things anyone changes when they plug in a router, and there are some very good reasons for this. It's not just that the employees of the router manufacturer could have a list of all the passwords, or that many routers use a simple algorithm (via RouterSecurity.org) to create the Wi-Fi password based on the serial number or MAC address.

Some routers even use part of the MAC address as the actual password, which is seriously silly (via Hackaday). Those are all good reasons to change the SSID that's broadcast and the password to access it, but you also want to have a SSID that will be more recognizable to you, so it stands out in the sea of FiOSxxx or Xfinity SSIDs around you.

👁 Spectrum Wi-Fi router powered on
4 reasons your ISP's router is holding you back

The router supplied by your ISP will get you online, but you're missing out if you keep connecting that way

3 Security

Disable WPS, uPnP, and NAT-PMP, and set strong Wi-Fi encryption

Many of the settings in our router are there for convenience, so that the less technically inclined can get advanced features without having to dive into the configuration pages. If you're a power user, you either already know how to change these settings manually, or can find out how and learn. Some things that can be a security issue while having ways to configure alternatives manually include:

  • UPuP: which was designed to manage port forwards automatically.
  • WPS: which was created to do away with Wi-Fi passwords by pressing a button, but has a history of security issues.
  • NAT-PMP: an alternative to UPnP designed by Apple.

These can all be turned off without worry, and while you're in the router's admin pages, make sure the Wi-Fi connection is using either WPA2 or WPA3 if available, so that you're using the strongest level of consumer encryption on your wireless connection.

👁 A black Wi-Fi router on a small round table with a green background
How to check if someone is stealing your Wi-Fi

Check if someone is stealing your Wi-Fi with these simple methods and learn how to kick them out

2 Disable WAN Administrator Access

Security beats convenience every time

Here's a question for you. Do you actually need to touch your router's administration page from outside your home network? Because leaving remote administrator access enabled is a really tempting target for anyone who automatically portscanned the internet and found your router. Just like limiting who can access your NAS outside your network, you don't need to get admin access to your router when you're away from home in most cases. And if you find you do, turning off WAN admin access and using a VPN or reverse proxy to look like you're on your home network is the way to go.

1 Create separate networks to group devices

Not just for guests, but separate IoT devices as well

It's always a wise decision to set up a guest network for visitors, so you don't have to hand them the Wi-Fi password that you use on your devices. That's just smart security practices, and it also means they can't see your network-attached storage devices or other things that you'd rather they don't access. But it's also a good idea to set up separate networks for groups of your own devices, so that any issues are isolated.

This could be as simple as adding your smart home devices to one network because, really, the only thing they need to talk to is the internet and the apps on your smartphone. But you could go further, adding multiple VLANs to add your game consoles to one, or any other grouping of networked devices that makes sense. That way, not only do you gain some level of hardening against attacks, you also can fix issues more quickly once you know which of the VLANs is at fault.

Tweaking these advanced router settings will make your home network better

From limiting the number of ways an attacker can get onto your network, to changing the default settings that you might not have thought of, these tips will make your home network more secure. Some of them will make it perform better as well so that every device can get its fair share of bandwidth when necessary. The best part is that none of these tweaks cost money to implement, so you can change them and get on with your day.