📶Wi-Fi for rent: quickly secure a shared router

Rental properties are a fantastic option for those looking for a more flexible living arrangement. They often come "as is", which means you get to make your own mark on the space. Whether it's sharing a router with the previous tenant, using one password for everyone, or dealing with a chaotic mess of gadgets, there's something for everyone. It's incredibly convenient, but it's important to remember that it's not secure. This means that your neighbours can see your devices, guests can connect to the main network, and IoT gadgets can open unnecessary doors. The great news is that maintaining your personal hygiene is a breeze! It only takes 10–15 minutes, and you'll feel so much better. We're going to explain the real threats, how to enable a guest network, choose encryption, disable "leaky" options, and properly separate your devices to keep your calls and payments safe.

What are the real risks of shared Wi-Fi?

The main risks are access to your devices within the local network, traffic interception at "open" points, and weak passwords. Plus, IoT devices love UPnP and "stick out," and WPS makes it easy to brute-force access. The bottom line: files on your laptop may be visible, guests may accidentally access your network, and you may experience instability and dropouts during calls due to other people's downloads. The solution is to isolate guests, disable unsafe options, separate devices into different networks, and enable WPA2/WPA3 encryption.

How do I enable a guest network on a typical router?

Go to the admin panel (the address is on the router sticker), change the administrator password, update the firmware, and activate Guest SSID. Set a clear name (e.g., Home-Guest), enable client isolation (Client/LAN isolation) so that guests cannot see your devices, and limit the network's operating hours according to a schedule. Create a QR code for quick connections so you don't have to share your password out loud. Check the guest network from a second device, then check your files from the main network to make sure they are accessible.

Which password/encryption should you choose (WPA3)?

Use WPA3-Personal (if supported) or WPA2-Personal AES. The password should be at least 12–16 characters long, with words/symbols that are easy to type and read from a printout. Avoid TKIP/WEP "mixes" — they are a thing of the past. For convenience, keep different passwords for your main and guest networks and change the guest password every 1–3 months (or after a "big party"). Store them in a password manager and duplicate the guest password with a QR code on paper.

Do you need a VPN and when?

A VPN is useful on public Wi-Fi (cafes/train stations) and when you don't control the router. At home, on your own encrypted network, a VPN is a matter of company policy (often mandatory for corporate clients). Remember: a VPN can increase latency, so check your connection quality before important calls. For banking/payments, only use official apps and check the address bar in your browser; a VPN is not a substitute for basic hygiene here.

What is UPnP and why is it better to disable it?

UPnP automatically opens ports from your network to the internet. This is convenient for some games/camera access, but in rented accommodation it is a "back door". Go to your router settings and disable UPnP; if necessary, manually forward ports as needed. Also disable WPS, which is a quick but insecure way to connect. Then restart your router and check that no external ports are open unnecessarily.

How to separate IoT and work devices?

Create separate networks/SSIDs: "Work-5G" for your laptop/phone, "Home-2G" for home appliances/smart lights, "Guest" for visitors. If VLAN/guest isolation is supported, enable it. Keep IoT on 2.4 GHz (better penetration), work devices on 5 GHz. Disable IoT access to local resources (NAS/laptop). Ideally, use a mesh with a guest VLAN and wired backhaul so that the separation does not impair connectivity.

When should you run an Ethernet cable?

If you have important video calls, editing/streaming, or sensitive work, run Ethernet (Cat6/Cat6a) to your workspace. This will minimise lag and "micro-drops" that are audible in Zoom/Meet. Even with good Wi-Fi 6, a wired connection is the "red button" of stability: if you have problems with the airwaves, just switch to a cable and finish your meeting without stress.

How to check for "uninvited guests" on your network?

In your router's admin panel, open the list of connected clients and match the MAC addresses with your devices. Disconnect anything unnecessary and change your passwords. Enable notifications for new connections, if available. Once a month, do a review: it's best to delete/reset any IoT devices you don't recognise. Don't leave any "open" network folders, especially on laptops with corporate clients and work documents.

How to negotiate with neighbours/landlords?

Be polite and to the point: "Stable connections are important to us, so I suggest enabling a guest network and changing the admin password; I'll take care of the setup and remind you." Explain that isolating guests and disabling WPS/UPnP improves security for everyone, not just you. If the router is the landlord's property, ask for access in the presence of the owner or offer to call a technician. Agree on who will store passwords/QR codes and how often to change them.

How to store passwords/QR codes for guests?

The best option is a password manager + a paper card with a QR code for the guest network. Do not store passwords in notes/gallery without protection. On the card, write a clear network name, band (5 GHz is preferable), update date, and contact information for access questions. After large events, update the password and QR code. If there are frequent changes of residents in the apartment, create a separate folder called "Wi-Fi/services" and pass it on to the new residents.

Do I need to separate 2.4 and 5 GHz into different names?

Yes, this is convenient for managing devices: Work-5G for work (low latency/high speed), Home-2G for IoT/old gadgets. This makes it easier to direct devices to the right band and avoid laptops "jumping" to the busy 2.4 GHz band. If you have a mesh network with "smart" distribution, you can leave a single SSID, but still check that critical devices are staying on 5 GHz.

How can you quickly restore stability before an important call?

Quick fix: 1) Restart your router 10–15 minutes before the meeting. 2) Disconnect power-hungry devices (smart TVs/torrents). 3) Switch to Ethernet or sit next to the router on 5 GHz. 4) Disable updates/cloud services on your laptop; 5) Keep a hotspot as a backup. If the connection is unstable, temporarily reduce the video quality to 720p and turn off background effects.

A shared router is absolutely nothing to worry about, as long as you take a systematic approach: guest network with isolation, WPA3, WPS/UPnP disabled, device separation, Ethernet to the workstation, and a QR card for guests. These steps are super quick, and they give you back control over your privacy and stability. Best of all, your next video call will go off without any surprises.

I would absolutely love to hear from you if you have found an inaccuracy or update on encryption, firmware or security practices. Just write to us via the feedback form in the catalogue and we will check and update the article as soon as we can. And don't forget to share your experience in the comments – your stories are so helpful for other tenants!