TL;DR: A compromised router often shows unrecognized devices in the admin panel's connected-devices list, DNS settings changed without your knowledge, or a noticeably slower connection with no obvious cause. Log into your router's admin panel (usually 192.168.1.1 or 192.168.0.1), change the default admin password, update the firmware to the latest version, disable remote management if you don't use it, and switch WiFi encryption to WPA3 or WPA2 with a strong passphrase.
A compromised router often shows unrecognized devices in the admin panel's connected-devices list, DNS settings changed without your knowledge, or a noticeably slower connection with no obvious cause.
What Usually Causes This
Routers are commonly compromised through default or weak admin passwords, outdated firmware with known vulnerabilities, or remote-management features left enabled and exposed to the internet.
What to Do About It
Log into your router's admin panel (usually 192.168.1.1 or 192.168.0.1), change the default admin password, update the firmware to the latest version, disable remote management if you don't use it, and switch WiFi encryption to WPA3 or WPA2 with a strong passphrase.
If this looks similar to something else you've seen, it's worth reading How to Securely Wipe a Phone Before Selling It.
This pattern shows up elsewhere too — see How to Spot a Fake Browser Extension.
Frequently Asked Questions
What are the real warning signs?
A compromised router often shows unrecognized devices in the admin panel's connected-devices list, DNS settings changed without your knowledge, or a noticeably slower connection with no obvious cause.
What usually causes this?
Routers are commonly compromised through default or weak admin passwords, outdated firmware with known vulnerabilities, or remote-management features left enabled and exposed to the internet.
What should I do about it?
Log into your router's admin panel (usually 192.168.1.1 or 192.168.0.1), change the default admin password, update the firmware to the latest version, disable remote management if you don't use it, and switch WiFi encryption to WPA3 or WPA2 with a strong passphrase.
Should I be worried if I only see one sign?
One sign alone (like a slower device) is usually not cause for alarm — most single symptoms have mundane explanations. Multiple signs together, especially unexpected data usage or unfamiliar apps, are worth investigating.