Google Nest Wifi: lock it down in the app

Plain steps for Google Nest Wifi and Google Wifi: they are run from the Google Home app, so here is where to find UPnP and port forwarding.

This page is for people with a Google Nest Wifi router. Menu names change from one model and software version to the next. If yours does not match, look for the words in bold, or search the maker's support site for your model number. You can always call your internet company instead.

Sign in

Nest Wifi has no settings web page to sign in to. You use the Google Home app, signed in with the Google account you set it up with.

Change the admin password

Your Wi-Fi and router are protected by your Google account. Keep that account secure with a strong password and 2-Step Verification.

Turn off remote access

There is no "remote management" switch to hunt for. Settings are changed through your Google account in the Google Home app.

Turn off UPnP

Open the Google Home app, tap Wifi, then Settings, then Advanced Networking, and turn UPnP off. Google says UPnP is on by default. It also says turning UPnP off gives you total control over which ports are open, but you then set up any needed port forwarding yourself, and some consoles and cameras may stop working until you do. More about UPnP.

Check the port forwarding list

In the Google Home app, go to Wifi, then Settings, then Advanced Networking, then Port management. Delete anything you did not set up on purpose. If you are not sure what an address in that list is, see Which device is this?

Keep it updated

Nest Wifi normally updates itself. You can check in the Google Home app. Is my router too old?

What we checked

Google's help pages for UPnP and port forwarding were read directly.

See the full router checklist, how to sign in to any router, or signs a router has been hacked.

Not comfortable doing this? That is okay.

You do not have to do this alone. You can ask a family member, call your internet company, or take your router to a local computer repair shop. Take your time and ask for help instead of guessing.

Want a professional to look at it? Frequency 42 is the company that makes Network Check, and it offers IT help. You can email support@frequency42.com and ask whether they can help with this.

Then check again

Run the free check again after you make a change.

Run the free check