You change your WiFi password by logging into the router's admin page — usually at 192.168.1.1 or 192.168.0.1 — opening the wireless security section, typing a new password of 12 or more characters, saving, and then reconnecting every device, because nothing reconnects on its own. The one condition that decides how long this takes: whether you still know the admin login. If you don't, the reset button on the back of the router turns a five-minute job into a 25-minute one, since every custom setting is wiped along with the old password.

Most people attempt this because a neighbor is leeching bandwidth, a roommate moved out, or the password is a decade-old pet name. Whatever the reason, the sequence below is the same on the major brands — TP-Link, Netgear, Asus, Linksys, and the router your internet provider supplied — with a few brand-specific quirks worth knowing before you start. Here's the whole job, in the order it actually goes.

Find Your Router's Admin Address and Login Before Touching the Password

The admin page is a small website hosted on the router itself, not on the internet. Its address is printed on a sticker on the back or bottom of the unit, alongside the default username and password. Common addresses are 192.168.1.1, 192.168.0.1, 192.168.1.254, and routerlogin.net for Netgear; TP-Link often uses tplinkwifi.net, and Asus uses router.asus.com. If the sticker is worn off, you can find the address from a connected device.

On Windows, open Command Prompt and type ipconfig. Look for the "Default Gateway" line under your wireless adapter — that number is the router's address. On a Mac, go to System Settings, then Network, then Wi-Fi, then Details, and read the "Router" field. On an iPhone or Android phone, the gateway appears in the WiFi network's details screen, labeled "Router" on iOS and "Gateway" on Android.

Type that address into a browser's URL bar, not the search bar. A login prompt should appear. Enter the credentials from the sticker, or the ones you set yourself. If the default password doesn't work, someone changed it — possibly you, years ago — and you'll need a factory reset, covered below. Don't guess more than a few times; some routers lock the login for a few minutes after repeated failures.

One quirk worth flagging: provider-supplied gateways often use a non-standard address and a password printed on a separate card, and a handful of ISPs lock the wireless settings entirely behind their own app. If the admin page shows your WiFi name but the password field is greyed out, that's a managed router — you'll change the password through the provider's app or support line instead.

Pick an Encryption Mode First, Then a Password You Can Actually Type

Before you type the new password, look at the security mode dropdown on the same page. You want WPA2-Personal (sometimes labeled WPA2-PSK) at minimum, or WPA3-Personal if the router offers it. WPA3 became mandatory for WiFi-certified devices in 2020, per the Wi-Fi Alliance's certification requirements, so any router made since roughly 2021 should offer it. Older modes — WEP, and WPA with TKIP — are broken enough that a determined neighbor can crack them in minutes, so change the mode along with the password.

WPA3 has a practical wrinkle: in its pure form it can drop older devices — a 2015 smart plug, a first-generation Chromebook — that only speak WPA2. Most routers offer "WPA2/WPA3 mixed" mode, which accepts both. That's the safer default if you have a mix of old and new hardware. Pure WPA3 is fine if everything on your network was made in the last five years.

For the password itself, length beats complexity. A 16-character passphrase of three or four unrelated words — something like "copper-lantern-tuesday-river" — is easier to type on a phone than "X7$kq!2m" and far harder to crack. WiFi passwords can be up to 63 characters. Avoid your address, your name, your phone number, and the router's brand name followed by a number, which is the first thing cracking tools try. If you're changing the password because of a breakup or a departing roommate, also check the router's "connected devices" list afterward and remove anything you don't recognize.

Here's how the security modes compare, since the dropdown rarely explains itself:

Mode Label you'll see Works with Verdict
WEP WEP Devices from before 2006 Crackable in minutes; replace
WPA/TKIP WPA-PSK Older devices Deprecated; avoid
WPA2 WPA2-PSK (AES) Nearly everything since 2006 Minimum acceptable
WPA2/WPA3 mixed WPA2/WPA3 Personal Old and new devices Best default for mixed households
WPA3 WPA3-Personal WiFi-certified devices from 2020 on Strongest; check old devices first

Two more fields sit near the password box on most routers: the network name (SSID) and, on dual-band routers, separate names for the 2.4 GHz and 5 GHz bands. You don't have to change the name, but if you do, every device treats it as a brand-new network and forgets the old one automatically — which can actually save you the "forget this network" step later. Some routers also have a guest network with its own password; changing the main password doesn't touch it, so change the guest one too if strangers have used it.

Step-by-Step: Changing the Password on TP-Link, Netgear, Asus, and Provider Routers

The menu names shift between brands, but the path is the same three clicks: wireless settings, security, password field. Here's the sequence in real performance order, with the exact labels you'll see.

1: Log in at the gateway address from the sticker, using the sticker's username and password. On TP-Link, the first login often asks you to create a new admin password — do it. 2: Find the wireless section. TP-Link: Wireless > Wireless Security. Netgear: Wireless > Wireless Setup. Asus: Wireless > General, then the WPA2/WPA3-Personal authentication method. Linksys: Wi-Fi Settings > Security. Provider gateways bury it under Home Network or WiFi. 3: Confirm you're editing the right band. Dual-band routers show 2.4 GHz and 5 GHz tabs; edit both, or they'll keep different passwords. 4: Set the security mode to WPA2-PSK or WPA2/WPA3 mixed. 5: Type the new password twice if there's a confirm field, and check the "show password" box if one exists before saving. 6: Save or Apply. The router reboots its wireless radio — on most models this takes 30 to 90 seconds, and every device drops off the moment it saves. 7: Reconnect one device — your phone is easiest — before touching anything else, and confirm the new password works.

If the admin page rejects the new password on save, the usual cause is a character the router's firmware doesn't accept — a few older Netgear and D-Link models choke on spaces or symbols like & and #. Switch to letters, numbers, and hyphens and try again. If the page saves but your phone says "incorrect password," the router may have kept the old one because you edited the 5 GHz tab while connected on 2.4 GHz, or vice versa; log back in and check both bands. And if you get logged out and the old password still works everywhere, the save didn't stick — some provider gateways require you to hit a separate "Save" at the top right after "Apply."

One more failure case worth knowing: on a handful of mesh systems and provider gateways, changing the WiFi password also changes the admin login, or logs you out mid-save. If the admin page goes dark right after you click save, wait a full two minutes before concluding anything is broken — the router is rebooting, and refreshing too early can leave the page in a broken state.

Mesh Systems and Provider Gateways Change the Rules

If you have a mesh system — Eero, Google Nest WiFi, TP-Link Deco, or the pods your ISP rents you — the password usually doesn't live on a web page at all. It lives in the maker's phone app: Eero in Settings > Network, Nest WiFi in Settings > Network, Deco in WiFi Settings. The app pushes the change to every node at once, which is convenient, but it also means there's no sticker with a gateway address to fall back on. If you lose app access, the account recovery is with the manufacturer, not the router.

Provider gateways are the other special case. If your ISP supplied the box and the wireless fields are locked, changing the password means the ISP's app or a call to support. That's not a bug — the provider manages the wireless settings remotely, and some also push firmware that resets a custom password during updates. If your password keeps reverting after ISP maintenance windows, that's why: the gateway is re-syncing to the provider's stored configuration. In that situation, change the password in the provider's app so the stored copy matches what you set.

A less obvious edge case: routers running in "access point" or bridge mode have their wireless settings controlled by the main router, so changing the password on the access point itself does nothing. If a second router in your house has a different WiFi name and its own password, it's probably in router mode behind the first one — worth fixing, since two overlapping networks cause the dropped connections people blame on the password change.

Reconnect Every Device — and Expect the Smart Home to Be the Slowest

Every device that used the old password drops off the moment the router saves, and nothing reconnects automatically except devices that stored the password and retry. Phones, laptops, and tablets just need the new password typed once. The friction is in the corners of the house: smart plugs, robot vacuums, doorbell cameras, thermostats, printers, and TV streaming boxes each have their own reconnect path, and some make you redo the whole setup rather than just entering a new password.

Plan for that. A house with eight or ten smart devices can take an hour to fully restore, mostly spent re-adding devices that only pair through a phone app in pairing mode. Printers are the classic annoyance: a wireless printer that was set up years ago may need to be re-run through its setup wizard from a computer. Streaming sticks and smart TVs usually just prompt for the new password when you open a streaming app.

If a device refuses the new password even though you typed it correctly, the cause is usually the security mode, not the password. An older device that only supports WPA2 will fail silently on a pure WPA3 network — the password prompt loops or the connection attempt dies. Switch the router to WPA2/WPA3 mixed and try again. Similarly, devices that only see 2.4 GHz won't find a network whose 2.4 GHz band you forgot to update.

A shortcut worth using: most phones let you share the WiFi password by holding two phones near each other — iOS shares via AirDrop-style proximity, Android via a QR code in the network's share menu. That saves typing a 16-character passphrase on a tiny keyboard for guests and family members.

Logged Out and Locked Out? The Reset Button Fixes It in About 25 Minutes

If the admin login doesn't work and no password you remember gets you in, a factory reset is the way back. Find the recessed reset button — usually a pinhole on the back, sometimes a small button next to the ports — and hold it with a paperclip for 10 seconds while the router is powered on. The lights will blink and the router will reboot to factory settings, including the WiFi name and password from the sticker. Then you log in with the sticker credentials and set everything up again, including the new WiFi password.

Budget the time honestly. The reset itself takes about a minute, but the router comes back with default settings: the WiFi name reverts, the password reverts, and any custom configuration — port forwarding, parental controls, a changed admin password, static IP assignments — is gone. Rebuilding that is the 20-minute part, more if you had a lot of custom rules. This is why the sticker is worth photographing the day you get the router.

One warning about the reset button: on some provider gateways, holding reset for 10 seconds does a "soft" reset that keeps the provider's configuration, while holding it for 30 seconds does a full factory reset that may wipe the ISP's provisioning — leaving you with a gateway that can't get online until the provider re-provisions it. If the gateway belongs to your ISP, call them before resetting. The same caution applies to mesh systems, where resetting one node can unpair the whole set.

Before you resort to the reset, try the two free options: the sticker credentials (many people never changed the admin password, only the WiFi one), and the manufacturer's default-password list for your exact model, which the maker publishes on its support site. If both fail and the router is rented from the ISP, a support call is faster than a reset — they can often push a new admin password remotely.

You Don't Have to Change the WiFi Name — but Do Change These Two Settings

Changing the password alone is enough to kick off anyone who had the old one. You don't need to change the network name (SSID), and keeping it saves you re-adding every device. But two adjacent settings are worth five extra minutes while you're already logged in.

First, change the router's admin password — the one that guards the settings page, not the WiFi. Many routers ship with "admin" as the admin password, and anyone on your WiFi who knows the default can log in and change your WiFi password back. Set a different, strong password for the admin page and write it somewhere you'll find it. Second, check for a firmware update in the router's administration or system section. Router firmware fixes security holes, and a router that hasn't been updated in five years is a bigger risk than a weak WiFi password.

While you're in there, look at the "connected devices" or "client list" page. It shows everything currently on the network with names and MAC addresses. If you see a device you can't identify — a generic name like "android-8f2c" when every phone in the house is an iPhone — that's worth investigating before you assume the new password solved the problem. You can also enable MAC address filtering if the router offers it, though it's fiddly to maintain and easy to lock yourself out with.

One setting to leave alone unless you know why you want it: WPS, the push-button pairing feature. It's convenient, but it's also a known weak point, and some security guidance recommends disabling it. If your router has a WPS toggle, turning it off costs you nothing except the ability to pair devices by button press.

Whose Router Is It? Rentals, Roommates, and Landlord Rules

If the router is rented from your ISP, you can usually change the WiFi password yourself — the wireless settings are yours even though the hardware isn't. What you shouldn't do is a factory reset on rented equipment without checking, because it can wipe the provider's configuration and leave you offline until they re-provision it.

If you share a house or apartment, the person who pays the internet bill usually controls the router, and the admin password is the real key — whoever has it can change the WiFi password whenever they like. If you're the one changing it, give the new password to the people who need it before you save, because they'll be offline the moment you do. And if you're moving out and the router stays, change the WiFi password and the admin password on your way out; leaving either one is how former roommates keep free internet.

For renters whose landlord supplies the internet through a shared connection, the WiFi password may be controlled by the landlord's account with the ISP. In that case, the change goes through the landlord or the provider's app, not the router's admin page.

How Long Should a WiFi Password Be, and Does the Change Actually Stop a Determined Neighbor?

Twelve characters is the practical floor; 16 or more is better, and length matters more than symbols. A 16-character passphrase drawn from ordinary words has more guessing resistance than an 8-character jumble of symbols, and it's dramatically easier to type on a TV remote or a phone.

Does changing the password actually keep a determined person out? Against a casual neighbor who had the old password, yes — completely. Against someone who knows your router's admin login and is on the network, no, because they can log back in and read or change the password. That's why the admin password change matters as much as the WiFi one. Against someone cracking the password from outside, the security mode does most of the work: WPA3 makes offline guessing dramatically harder than WPA2, which is why it's worth enabling if your devices support it.

One thing a password change won't fix: a router that's reached end of support and no longer gets firmware updates. If the manufacturer stopped updating it years ago, the right move is replacing it, not changing the password again.

FAQ

What is the default WiFi password for my router?

There usually isn't one — most routers ship with no WiFi password at all, or with a random one printed on the sticker, not "admin" or "password." The sticker on the back or bottom lists the default network name and, if one was set at the factory, the default WiFi password. If the sticker is gone, the router's support page lists defaults by model, and a factory reset restores them.

Can I change my WiFi password from my phone?

Yes, on most routers — open the gateway address in your phone's browser and log in exactly as you would on a computer. Mesh systems and provider gateways are easier through their apps, which push the change to every node at once. The one catch: the moment you save, your phone drops off the network, so reconnect it before doing anything else.

Why did my WiFi password change by itself?

Two common causes. On ISP-supplied gateways, the provider's remote management can re-push its stored configuration after a firmware update, reverting a custom password. On mesh systems, a node that loses sync can fall back to an earlier setup. If it keeps happening on a rented gateway, change the password in the provider's app so their stored copy matches yours.

Will changing the WiFi password disconnect my smart home devices?

Yes, every device drops off at the moment you save, and smart plugs, cameras, and thermostats often need to be re-added through their app's pairing mode rather than just given the new password. Budget up to an hour for a house with eight to ten smart devices. Devices that only support WPA2 will also fail on a pure WPA3 network — switch to WPA2/WPA3 mixed if that happens.

Do I need to change the WiFi name too?

No. Changing the password alone removes anyone who had the old one, and keeping the name means your devices reconnect with just the new password. Changing the name forces every device to be set up fresh, which is occasionally useful — after a breakup, for instance — but usually just creates work.

What's the difference between the WiFi password and the router admin password?

The WiFi password lets devices join the network; the admin password guards the settings page where the WiFi password is changed. Many routers ship with a weak or default admin password, which means anyone on your WiFi who knows it can change your WiFi password back. Change both, and make them different.

How long does changing the WiFi password take?

About five minutes if you know the admin login and have a handful of devices, plus 30 to 90 seconds for the router to reboot its wireless radio. Add 20 to 25 minutes if you have to factory reset the router first, because the reset wipes custom settings you'll need to rebuild.

Does changing the WiFi password affect the guest network?

Usually not. The guest network has its own name and password on most routers, and changing the main password leaves it untouched. If strangers or a departing roommate have used the guest network, change that password separately in the same wireless settings section.