Update your router firmware to fix security holes

Your router runs on firmware, the operating software inside the networking box. It needs regular patches because researchers continually find ways to exploit vulnerable code. An unpatched router can be taken over, added to botnets or used to redirect traffic.

A firmware update can repair a security hole, improve stability and add features. The process is usually straightforward, but the wrong file, a power loss midway or an incompatible restored setting can leave the router unbootable. Official instructions and a configuration backup matter.

In Australia, many connections run over NBN FTTP, FTTN, HFC or fixed wireless, and the router may come from an internet service provider rather than the hardware maker. Establish who supports the device first, because ISP equipment often updates through an app or receives patches automatically.

Why router security matters at home

Firmware flaws can expose more than browsing. A compromised router may give an attacker access to smart TVs, cameras, baby monitors and consoles. In a busy Sydney or Melbourne household, one weak device can affect many accounts and stored files.

The Privacy Act 1988 regulates how Australian organisations handle many kinds of personal information. A household is not directly liable under that law, but a compromised network can expose data banks, retailers and health services are trusted to protect. Patching the router reduces that wider exposure.

Identify the exact router and supported update

Read the model number and hardware revision from the label beneath the router. Record the current firmware version from the admin page, usually reached at 192.168.1.1 or 192.168.0.1. Never select a file because its model name or Wi-Fi speed looks similar.

Australian homes commonly use equipment supplied by Telstra, Optus, iiNet or Aussie Broadband, plus ASUS, TP-Link, Netgear and D-Link products sold locally. ISP versions may use modified firmware, so a generic manufacturer image might not install. Use only the update issued for that exact unit.

Prepare before the installation starts

Connect the computer with Ethernet, then sign in to the admin panel. Save the current settings, including Wi-Fi names and passwords, broadband details, port forwards, parental controls and DNS choices. This makes recovery easier if the update performs a factory reset.

Keep mains power stable throughout. Do not reboot, unplug the router or interrupt broadband while firmware is written. A UPS can help during outages, but it must power the router and any connected equipment for the entire restart cycle.

Install the firmware without interruption

Open the firmware, software or router update section. Some interfaces check online and download the correct file; others require an installation image from the vendor’s official support site. If the vendor provides a checksum or digital signature, verify it before uploading.

The normal sequence is to select the exact file, accept the restart warning, and allow the router to validate, install and reboot. A cloud update may show several stages before the final restart. Keep power and Ethernet stable until the admin page returns.

Never flash unofficial firmware simply to gain a feature. Community images such as OpenWrt can be useful on supported hardware, but they can brick the device and may not retain the vendor’s Australian support and regulatory status.

Verify the update and check changed services

After rebooting, confirm that the displayed firmware version matches the release notes. Test wired and wireless connections, run a speed test, and reconnect smart-home equipment to ensure cameras, TVs and consoles reach their services.

Some updates preserve settings and others reset the router. If custom settings disappear, restore only options that still apply. A configuration saved under an earlier major release may contain obsolete keys or insecure defaults. Recreate port forwards, dynamic DNS entries and parental-control rules individually, and change passwords stored in the old file.

Lock down the router after updating

Current firmware is only one layer of protection. Change default administrator credentials, use a long unique Wi-Fi passphrase, choose WPA2 or WPA3 where available, and disable WPS unless needed. Avoid internet-facing remote administration unless it is required and protected by strong authentication.

Put cameras, speakers and other IoT products on a guest or separate network when possible. Review connected clients for unknown devices, enable automatic security updates, and disable UPnP if gaming and smart-home discovery do not need it. The Australian Signals Directorate’s Australian Cyber Security Centre advises replacing unsupported equipment rather than relying on it indefinitely.

ACMA warns that fake technical-support messages and calls can steal router access. Download updates from a typed vendor address or trusted ISP app, never from an unsolicited link, and change the administrator password if support staff unexpectedly request it.

Replace the router when patching is no longer possible

If the vendor has stopped issuing firmware, the device lacks a current secure build, or the release notes contain no fix for the relevant vulnerability, replace the router rather than wait. A cosmetic version bump does not correct every risk, and old hardware may lack signed updates, modern Wi-Fi protection or maintained apps.

Choose an Australian-supported model with the RCM mark and enough throughput for the household’s NBN speed tier. For NBN service, confirm whether the replacement works in ISP-managed mode or supports the required PPPoE, bridge and ONT arrangement; FTTP, FTTN and HFC installations differ in what the router must handle.

If the old router remains until a replacement arrives, disable its wireless radio when unused, remove unnecessary port forwards, change its administrator credentials and watch for unknown devices. When no supported patch exists, disconnect the unsupported unit and use the replacement instead.