TP-Link router: sign in and lock it down
Plain steps for TP-Link routers and Deco: sign in at tplinkwifi.net, change the admin password, turn off remote management and UPnP.
This page is for people with a TP-Link router. Menu names change from one model and software version to the next. If yours does not match, look for the words in bold, or search the maker's support site for your model number. You can always call your internet company instead.
Sign in
Open a web browser on a device connected to your TP-Link Wi-Fi and type tplinkwifi.net or 192.168.0.1. If your device is a modem router (one that also connects to the phone line or a 4G or 5G service), use tplinkmodem.net or 192.168.1.1 instead. Deco systems are run from the Deco phone app.
Change the admin password
Go to Advanced, then System, then Administration. Enter the current password, type the new one, then press Save. In the Tether phone app, tap More, then System, then Manage Password. This is the router (admin) password, not your Wi-Fi password.
Turn off remote access
Go to Advanced, then System (on some models System Tools), then Administration, and find the Remote Management section. Choose Disable Remote Management and press Save. TP-Link marks this as the default, but it is worth checking.
Turn off UPnP
Go to Advanced, then NAT Forwarding, then UPnP, and switch it off. TP-Link's own page also mentions Advanced, then Port Forwarding, then UPnP on some models, so look under both names. In the Deco app, tap More, then Advanced, then NAT Forwarding, then UPnP. TP-Link says that if you do not need UPnP you should consider turning it off. More about UPnP.
Check the port forwarding list
Go to Advanced, then NAT Forwarding, then Virtual Servers. Delete anything you did not set up on purpose. If you are not sure what an address in that list is, see Which device is this?
Keep it updated
Look for Firmware Upgrade or Auto Update in the menus. The Tether and Deco apps also show when an update is waiting. Is my router too old?
What we checked
TP-Link's help pages for UPnP, remote management and the admin password were read directly. TP-Link says menu names vary by model.
More
See the full router checklist, how to sign in to any router, or signs a router has been hacked.
Not comfortable doing this? That is okay.
You do not have to do this alone. You can ask a family member, call your internet company, or take your router to a local computer repair shop. Take your time and ask for help instead of guessing.
Want a professional to look at it? Frequency 42 is the company that makes Network Check, and it offers IT help. You can email support@frequency42.com and ask whether they can help with this.
Then check again
Run the free check again after you make a change.
Run the free check