The router is the front door to every device in the office. It usually still has the installer's password.
Router basics
Change the admin password from the default; use WPA3 (or WPA2-AES) with a long passphrase; turn off WPS; disable remote / WAN administration; keep the firmware updated; rename the network so it does not reveal the router model.
Guest network
Customers, visitors and personal phones go on the guest network, isolated from the billing PC, printers and CCTV. Change the guest password monthly.
CCTV and smart devices
Change the default password on every camera and DVR; do not expose them to the internet with port forwarding; keep them on their own network segment where the router allows.
Public Wi-Fi
Use mobile data or a VPN for banking and e-mail outside the office; never enter passwords on a captive-portal page that asks for more than an OTP.
Checklist
- ☐Router admin password changed
- ☐WPA3 / WPA2-AES, WPS off, remote admin off
- ☐Firmware updated
- ☐Guest network on, isolated from business devices
- ☐CCTV / DVR default passwords changed
- ☐No banking on public Wi-Fi without a VPN