Memorable Wi-Fi, Safer Access

Make a Phrase You Can Recall

1. Generate at least six independent random words using a trusted local generator or a dice-based wordlist method.
2. Keep the selected order. Imagine an unusual private scene linking those words; the scene helps your memory, not the attacker.
3. Save the phrase in your credential manager before changing the router. Do not reuse your email or vault phrase.
4. Check the router and client character limits. A space or hyphen may help typing; a fixed separator does not add randomness.

Choose Supported Encryption

Prefer WPA3-Personal when the devices support it. If compatibility requires an older option, use WPA2-Personal with AES/CCMP. Avoid WEP, original WPA and TKIP. Transition mode may be useful for older devices but is not identical to WPA3-only protection.

Keep firmware current. Disable WPS and unnecessary remote administration. A hidden network name or a MAC allow-list is not a substitute for authentication and encryption.

U.S. Router Rules: Check Before You Buy

Policy note reviewed 26 September 2026. On 23 March 2026, the FCC added foreign-produced consumer routers to its Covered List on national-security grounds. This restricts FCC equipment authorization for new models, with conditional exceptions. It concerns foreign production generally—not only China—and is not a blanket ban on every Chinese technology product. Read the FCC router notice and its September conditional-approval update.

The FCC’s March announcement says retailers can continue selling, importing and marketing router models previously authorized by the FCC. Do not assume every foreign-made router on a shop shelf has become prohibited.

These are U.S. equipment-authorization and market-access restrictions. Export controls are a separate issue: they regulate exports, reexports and certain transfers of controlled goods, software and technology. A headline about exports to China does not, by itself, tell you whether a home router can be sold in the U.S.

• Check the exact model and hardware revision with the supplier, along with its FCC authorization and any applicable conditional approval—not just the brand or a “made in” label.
• Check the current FCC Covered List and conditional approvals before buying; exceptions can have conditions and expiry dates.
• Also ask how long security updates will be supplied. Country of origin alone is not a security audit; supported firmware, safe settings and timely patches still matter.

Guests Get Their Own Door

Use a different guest-network phrase. Where supported, verify that guest clients cannot reach your private devices or router administration. A second network name alone does not prove isolation.

Share access deliberately. A Wi-Fi QR code can contain the network secret, so treat it like the phrase itself. Replace guest access when sharing circumstances change; do not publish it on the internet.

Passkeys & 2FA Protect the Management Account

A Wi-Fi joining phrase is not the same as signing in to a router’s web panel or its vendor’s cloud account. Use unique credentials for management. Enable a passkey or 2FA if that account supports it, and prepare recovery before you need it.

Passkeys and 2FA do not automatically replace a WPA2/WPA3-Personal Wi-Fi phrase. They protect a different sign-in step. Read about passkeys or compare second factors.