Change Default Passwords
All default passwords can easily be found at https://www.routerpasswords.com
Change Default SSID
To avoid attackers exploiting a device specific vulnerability
Firmware Update
Ensure the latest firmware is installed
IP Address Filtering
Create an allow list for all IPs that should be on the network or a deny list for specific domains, urls and IPs.
Place AP Devices In Secured Rooms
Static Addressing
Don’t use DHCP and assign static addresses to all network devices
WAN IP
Your router’s public IP is given by your ISP and is reset when your router resets. You must explicitly request your ISP to give you a static IP