Router settings worth knowing
These are the four settings a Clearsweep network check can point at on a network you own. Menus differ by maker; the names below are the ones most routers use. Look in your router's own manual for where.
The Wi-Fi mode
WPA3 or WPA2 personal are the current choices. Open means no encryption at the Wi-Fi level. WEP and the original WPA are old and weak. The mode describes how the join is encrypted. It does not say who has the password.
UPnP
UPnP lets a device on your network ask the router to open a port to the internet without asking you. Some games and video calls use it. If you do not need it, turn it off. The check can see that the router offers UPnP; it cannot see whether a port has already been opened.
A guest network
A guest network keeps visitors, and smart-home devices you do not fully trust, away from your computers and files. Turn on "client isolation" or "AP isolation" if it is offered. Devices on a separate network cannot be seen from the main one, by you or by this check.
The admin password
The router's admin page usually answers to anyone on the network. Make sure its password is not the one printed on the label. The check never tries a password; it only notes that the page answers.
Smart plugs
Old TP-Link Kasa firmware answers anyone on the network on port 9999. Updating the Kasa app and the device firmware usually moves it to a protected protocol. A port number alone does not prove the maker.