How to setup a wifi router properly (Hacking Resistance)

I have seen many WiFi location everywhere, most of they are having some kind of password  but now  days if your home router is hacked all your personal information and even data in your hard drive could be accessed even by an unskilled hacker. If you are using WiFi connection, Hacking is very easy because no physical connection is required. So if you get SSL certificate error be careful, always check router first, if your getting an error.. Never skip those errors.

I never liked WiFi but in the current time you have to use it..  So I  recently bought a nexus 7 and a portable 3G router.,  so when I am traveling I could just carry it me. One headache was how to configure it and I want everyone not know even I had a WiFi connection.

The main weakness of many routers is not the router but the user who config the router. Many people do not config the router according to the users  needs just putting a WiFi password won't protect the WiFi connection or data in the network.

So in my case, I use the same connection at home so anybody with enough time could easily break a password,  with your average GPU card.  If some body hacks my WiFi at home they could easily access my personal desktop computer, lot of private data could  be compromised.

So the first thing you should do, when you configuration a route is to change default username and password use some things simple but it should be long not just 123.......e.t.c. Because only after connecting the WiFi you can login to the local router setting but it can be hacked over the Internet so don't use a very simple one. anyway if you forget you can always reset the router.
Here in Sri Lanka  using local names in sin-English is good because you don't find them in Hacking dictionaries, so Hacking is difficult.

                                         

  DISABLING WPS (IT'S A MUST)

Then second important thing is to disable WPS, because their is a security vulnerability which allows users to crack any password with in  few hours,  it doesn't matter how good your password is.

Next uses security type as (authentication type) WPA2 only  don't use any other modes such as WEP, WPA because they are not secure.

Then comes the encryption mode (AES/TKIP) protocol both  are aright TKIP support more devices but AES is said to be little bit better than TKIP.  
For the  wifi login key use something long, better if you can use local language, never use numbers only login keys because it is easy to crack.

If this route  is a home or office  and  you know  all the people using the router  you can use Mac filter.  By default  it is off you can turn it on and enter you devices or computers Mac id.  Which can be found on the network card properties.  Just do a Google search "how to find Mac id"  their are many tutorials and video online.  

When you enable this other random people will not be able to connect to your router even if they have the correct password.

Then comes changing the SSID, by default it will normally have the router name which is a very bad thing to do because, people can search information about your router and find a weakness in it.
So change it any random thing.  I don't advice to put any personal information on it.

 
Then comes one of the important things but you have to decide whether you can use it,  Disabling the SSID broadcasting. If you disable it other people won't be able to identify the network and also if the want to connect to the network they should know the SSID.

So this gives another layer of protection to your network..  Making Hacking your network not worth the time.

JUST REMEMBER EVERYTHING IS HACKABLE IF YOU HAVE MONEY, TIME AND RESOURCES.