Why I need to change the default router login and password?

[seventrad]

Hi guys,

I am novice in wireless networks and have a question but, before, my wireless network:

• 1 Computer with ADSL modem and wireless router; The modem is connected in WAN port of router; and the computer is connected in LAN port of router.
• 1 Notebook with wi-fi receptor

Question: Why a need to change my default login and password in wireless router IF:

1 - The connection is encrypted with WPA2-PSK and AES with a very strong password (25 characters including letters, numbers and symbols);
2 - The SSID broadcast is disabled;
3 - The router have a MAC filter for only the my home computers;
4 - I allocated the number exactly of IP numbers to my home computers;
5 - The router Firewall is enabled and all computer of my home network have a good Internet Security (Firewall + Antivirus + Antispyware + Antispam + Antiphishing etc).

Can somebody invade my home network with this settings?

Is stricly necessary the change of my router default login and password?

 

[Bongo]

Welcome to the Seven Forums
I am not and expert on security but at least anybody on your network could get to the router settings and change them and there could be a possibility of someone outside your network getting to your router settings I'm not sure.
But setting up your own user name and password and is just good security.
Jerry

 

[DeaconFrost]

All of what you listed occurs behind your router. None of that affects connections coming from the internet to your touer, which is why you need to protect the router by changing the default account info.

On a side note, MAC filtering is way over paranoid for a home network, and usually results in more work than is needed. As long as your Wi-Fi network is protected by strong encryption, you're fine. I don't disabled SSID broadcast, nor do I restrict the IP addresses, as I want friends and family to be able to bring their devices over andconnect with only the need for my password. Who wants to reconfigure a router each time??

 

[severedsolo]

Hi seventrad, welcome to SevenForums.

Changing the default password is always a good idea, regardless of how strong your security is. What happens if someone gets access to your network by whatever means (say you give them the key?) and locks you out? It's a hell of a lot of hassle.

On top of this, quite a few routers have "remote access" ports open by default, so that your ISP can troubleshoot quickly by telnet/other means. It's not just the ISP that has access to them though, any hacker with enough knowhow could get in.

3 - The router have a MAC filter for only the my home computers;
4 - I allocated the number exactly of IP numbers to my home computers;

I'll answer these 2 together, because they go hand in hand. Chances are your router has assigned these computers "preferred IP's" from DCHP and when the MAC address connects, it will try to give them that IP first. Here's the thing though, a MAC is easily spoofed. If someone was to connect using a spoofed MAC (and your computer broadcasts it's MAC unencrypted) they would be given your IP, and so number 4 would be rendered useless.

5 - The router Firewall is enabled and all computer of my home network have a good Internet Security (Firewall + Antivirus + Antispyware + Antispam + Antiphishing etc).

The router firewall won't save you from a Telnet attack. (see above) If the router is listening on that port constantly, (as a router I just got from a certain UK broadband company is ) then again, any hacker can gain access.

In honesty though, it sounds like you have a pretty secure setup, but why not just go the whole hog and change the password too? Certainly can't do any harm can it?

 

[seventrad]

Ok! I understood. I will change my login and password!

Thank you all for help!