Solved How to Change Router Password

[Lady Fitzgerald]

According to Wireless Network Watcher, I have an occasional "hitchhiker" on my network who must have gotten a lucky guess on my router's password. I want to change the password on the router in hopes of keeping the thieving person of questionable parentage off but I have no clue how to do so. The router is a Netgear WNR2000 and was set up by the ISP. It's located on a shelf in the linen closet in the bathroom (the only place I had room for it, the modem, and the telephone modem).

 

[Shadowjk]

Hey Lady Fitzgerald,

Do you wish to change your wireless security password or the password needed to enter your router setup?

If you wish to change your wireless security password then you will have to reassign all of your wireless devices with the new network password.

Your routers Manual - http://documentation.netgear.com/wnr2000/enu/202-10397-01/pdfs/FullManual.pdf

Page 2 will show you how to access your routers settings.

Page 36 and onward will show you how to change your wireless security pass phrase

Hope This Helps,
Josh

 

[Lady Fitzgerald]

Which one do I need to change to get rid of the hitchhiker?

 

[Shadowjk]

Most likely your wireless pass phrase (WEP, WPA, WPA-2 ... etc)

Remember to update your devices with the new connection. This can be done by forgetting your wireless network and then re-joining it

Josh

 

[Lady Fitzgerald]

Using the directions in the manual you linked (thanks for that; I have it saved), I was able to change the password for accessing the network and have reset my desktop and my printer to the new password (I'll deal with my notebook the next time I have it out). Hopefully, that will keep the Wi-Fi thief out. Thanks again!

 

[Shadowjk]

No worries, Glad I could help

In your router you should find a table showing all connected devices. You should also see device names like (Josh-PC ...etc) if anything is out of the ordinary then please post back and we will do some further troubleshooting.

   Note

If your router cannot find a hostname it will show a MAC address (FOR EXAMPLE: AA-3E-54-9F-00-01-A8-B6). If you see these do not worry they are normal

Josh

 

[Kari]

In addition to the excellent advice already given by Shadowjk I would also change the login credentials for router setup interface, if you still use the default ones (username:admin password:password as told in page 18 of the manual).

If default credentials are used it is a simple task for outsider free-riders to try different router manufactures default credentials to login and find out or change the credentials. Really, manufacturers use so simple username / password combinations (admin, admin and admin, password are the most common) that you do not need to be a hacker to get in to other peoples routers.

Kari

 

[Lady Fitzgerald]

In addition to the excellent advice already given by Shadowjk I would also change the login credentials for router setup interface, if you still use the default ones (username:admin password:password as told in page 18 of the manual).

If default credentials are used it is a simple task for outsider free-riders to try different router manufactures default credentials to login and find out or change the credentials. Really, manufacturers use so simple username / password combinations (admin, admin and admin, password are the most common) that you do not need to be a hacker to get in to other peoples routers.

Kari

Apparently, that is how the *&^%$#@! is getting in since s/he did a little earlier today. I changed the router's setup password a little while ago.

 

[kbrady1979]

Lots of good advice given here. First thing I do when setting up a new router is to change the login credentials to an ID/PW the client is comfortable with, if it is secure enough, and I make a text file with that information for myself because 90% of the people I deal with don't remember the router ID/PW a week after it is set up. Then I set the Wireless Key to something the client can remember but make sure it is not the same as the router password. As far as I know, none of my clients have had any problems. A little trick on passwords: something common that you may remember or may be important to you can be made really secure if you misspell the word purposely, or use it in a phrase. I listen to music while braiding kables(no spaces), for example, would be nearly impossible for someone who knows what they are doing to crack, so they would move on to the next wireless network. You could disable SSID broadcasting but that makes it more of a pain in the butt when connecting your own devices as well.

 

[Shadowjk]

In addition to the excellent advice already given by Shadowjk I would also change the login credentials for router setup interface, if you still use the default ones (username:admin password:password as told in page 18 of the manual).

If default credentials are used it is a simple task for outsider free-riders to try different router manufactures default credentials to login and find out or change the credentials. Really, manufacturers use so simple username / password combinations (admin, admin and admin, password are the most common) that you do not need to be a hacker to get in to other peoples routers.

Kari

Apparently, that is how the *&^%$#@! is getting in since s/he did a little earlier today. I changed the router's setup password a little while ago.

Hmmm :huh:, The only way they would access your routers setup would be to be connected to the wireless or wired network. I am assuming such person doesn't have a wired connection to their laptop so they must have accessed the router wirelessly. The above suggestion is a good tip with disabling SSID broadcasting however that would be extreme cases. Please note that if they have already successfully connected once and saved the profile for that network then disabling the SSID broadcasting will not make any difference.

Josh

 

[Kari]

Hmmm :huh:, The only way they would access your routers setup would be to be connected to the wireless or wired network.

Shadowjk, I am almost paranoid when it comes to security. Assuming that "OK, no one can crack my WPA key so I do not need to protect the access to the router itself" does not work with me.

To start, anyone with an Ethernet cable and access to my house could connect to my router and edit its information and credentials. I am not saying I believe my cleaning lady would do that but I do not want to give her the opportunity in the first place. Also, today is quite normal to grant access to your home network for your guests and visitors. When my family for instance visits from Finland, I do not only allow them to use my network with their own devices but I also have a PC set up in guest room for this purpose. Although I know all my overnight guests (I do not grant network access to occasional visitors), I do not want to take any risks. No nosy teenager nephew will ever log in to my router's web interface to make a practical joke.

That's why in my case I have a strong WPA2 password on my wireless network, and evenly strong password for my router which only I know. Additionally I use MAC filtering and when a need arises (like the overnight visitors I mentioned), I temporarily allow the Guest access.

Kari

 

[Shadowjk]

If only everyone took security as seriously as you

I don't think people understand the risks that it can pose. Not only the fact that 'oh, they can use my internet and rack up usage charges' but also it only takes a packet sniffing program like Wire-shark and they could potentially capture broadcast packets and essentially reconstruct the website you are viewing on their machine. One of my mates at college had his bank account emptied because someone managed to capture his credentials via his WiFi. The stereotypical white van with satellites on it outside your house is more real then some may think!

Josh

 

[Lady Fitzgerald]

As I said, I changed the router's setup password last night, then changed the logon password (again). So far, the *&^%$#@! hasn't gotten in so it's a matter of hurry up and wait. Btw, my security is WPA2-PSK.

 

[subspace3]

That's all anyway one can do really, a good long and strong password with WPA2. Mac filtering is easily bypassed so a waste of time. WPA networks can still be hacked, but the time and effort involved is not worth it for some free Internet so I would consider it safe as long as a decent password is use.

If you are concerned about security other things you could are check upnp and wps.

To see if upnp is enabled on your router go to

upnp-check.rapid7.com and run a scan. ( no need to download anything)

If its enabled you should try and disable in the router.

To check wps, you'll have to log into your router and check manually.

 

[Lady Fitzgerald]

I thought I checked for upnp a while back but I ran the check again just now and everything is fine.

I don't understand what you are saying about WPS. I thought the only way anyone can access the router through WPS it is to be able to press the button on the router.

 

[subspace3]

With a wps enabled router, they are easily hacked and hackers can get your password using a tool called reaver. Lookup 'wps hack reaver' on google.

I always make sure upnp and wps are disabled whenever I get a new router just to be safe.

 

[Lady Fitzgerald]

I'm very reluctant to disable WPS since it's the only way I can get my printer to linkup to it. I'm keeping an eye on the monitoring program I'm using and if changing passwords doesn't keep the *&^%$#@! out, I may have to resort to disabling WPS and connect my printer to the computer via a UPS cable (and what a royal pain that will be).

 

[Lady Fitzgerald]

Well, it appears I've finally dislodged the *&^%$#@! hitchhiker. S/he normally has gotten on by now and there's been no sign of the low-life. Thanks for all the help.

 

[kbrady1979]

Glad you got them straightened out! Keep an eye on it though.

 

[Lady Fitzgerald]

...Keep an eye on it though.

No worries about that. I have Wireless Network Watcher running full time now.