The Free Home Network and Smart Home Setup Guide (2026)

This guide brings together and replaces our early-2025 series of quick tips on router settings and do-it-yourself smart home setup, rewritten and expanded in October 2026 with current steps for routers, Apple Home, Google Home and Home Assistant.

A home Wi-Fi router seen from the back, showing its network ports

Your router is the front door for every device in your home, from laptops and phones to smart plugs and TVs. Most people never open its settings after the installer leaves, which means default network names, old firmware and features they never asked for stay switched on. The U.S. National Security Agency's guidance for home networks recommends keeping the router patched (preferably with automatic updates), replacing it once the maker stops supporting it, and using a Wi-Fi passphrase of at least 20 characters. None of that costs money.

Once the network is in good shape, a small amount of free automation goes a long way. An old phone or tablet can become a wall-mounted control panel, and location-based automations (geofencing) can switch off lights and adjust the heating when the last person leaves. This guide covers all three in order: secure the network first, then add the controller, then automate. It also corrects some outdated advice from our earlier posts, including which devices can actually act as a smart home hub.

In this guide

Use your router's built-in privacy and security tools
Turn an old phone or tablet into a smart home control panel
Set up geofencing so lights turn off when you leave
Settings at a glance
Quick-start checklist
FAQ

Use your router's built-in privacy and security tools

A home router is a small computer with its own operating system, and like any computer it needs updates and sensible settings. Most routers, including ones supplied by internet providers, have a set of free security features. You don't need a paid VPN app or extra hardware to use them, only a few minutes in the router's settings.

Step 1: Sign in to the router

Check the label on the router or the box it came in. Many routers today are managed through a phone app from the manufacturer or internet provider; others use a web page at an address printed on the label.
Sign in with the admin username and password from the label or the app. If it is still the factory default, change it to a long, unique password and store it in your password manager.
Before you change anything, look for a Backup or Save settings option. Apple's router guidance recommends backing up the existing configuration so you can restore it if something goes wrong.

Menu names vary by brand, so this guide describes features rather than exact menus. If you can't find something, search your router maker's support site for the feature name plus your model number.

Step 2: Update the firmware, and turn on automatic updates

Firmware updates fix security holes. Look for Firmware, Update or Administration, install anything pending, and turn on automatic updates if offered. Apple recommends enabling automatic firmware updates, and the NSA recommends replacing a router once it reaches end-of-life and stops getting patches. If your router is more than about five years old, check the maker's site to see whether it still receives updates.

Step 3: Use modern Wi-Fi security

Set security to WPA3 Personal. If some older devices can't connect, use WPA2/WPA3 Transitional. Apple advises avoiding WEP, plain WPA, TKIP and WPA/WPA2 mixed modes, and never leaving a network open, even a guest network.
Use a long passphrase. The NSA suggests at least 20 characters; a string of four or five unrelated words is easy to type and hard to guess.
Give the network a unique name, not the default. Apple recommends using the same name across all bands (2.4, 5 and 6 GHz) so devices connect reliably.
Don't bother hiding the network name or relying on MAC address filtering. Apple's guidance says hidden networks don't secure access and can expose identifying information, and MAC addresses are easy to copy or spoof.

Step 4: Switch off features that open doors

Remote administration: turn off access to the router's settings from the internet. The NSA recommends making configuration changes only from inside your own network. A manufacturer's official app may still work remotely through its own cloud service; that is a separate setting.
UPnP (Universal Plug and Play): this lets devices open ports on your router automatically. The NSA recommends disabling it. Some games and video-calling apps may then need a manual port setting, which is a fair trade for most homes.
WPS (Wi-Fi Protected Setup): the push-button or PIN pairing feature is convenient but not needed once your devices are connected. If your router lets you turn it off, consider doing so.

Step 5: Separate your devices with a guest or IoT network

Most routers can create a second Wi-Fi network. The NSA recommends splitting the home network into a primary network for computers and phones, a guest network for visitors, and a separate network for smart home ("IoT") devices. If a cheap smart plug has a security flaw, it is then kept away from your laptop and its files. Many routers label this as Guest Network; some also offer a dedicated IoT network option. Use WPA2 or WPA3 on every one of them.

Step 6: Use the router's DNS and filtering options

DNS is the internet's address book: every time a device looks up a website, it asks a DNS server. By default, your router uses the provider's servers. You can set it to use a free filtering service that refuses to look up known malicious domains. For example, Quad9's recommended service at 9.9.9.9 and 149.112.112.112 blocks known malware domains and validates DNS records. Look for DNS or WAN settings, and change the DNS server addresses there; every device on the network then benefits. Many routers also include parental controls, such as schedules and content filters for children's devices, which are worth a look if you have kids at home.

Step 7: Use the router's VPN server for safer public Wi-Fi

Some routers, including many ASUS models with recent firmware, can run their own VPN server using WireGuard or OpenVPN. You install the matching VPN app on your phone or laptop, and when you are on café or hotel Wi-Fi, your traffic travels through an encrypted tunnel back to your home network before it reaches the internet. That gives you two practical benefits for free:

Your traffic is encrypted on untrusted public networks.
You can reach devices at home, such as a network drive or home automation server, without exposing them directly to the internet.

Be clear about what this does not do. Your home internet provider can still see your traffic, it won't make you anonymous, and your speed is limited by your home upload speed. Because a VPN server is an internet-facing service, keep the router's firmware current and remove access for any device you lose. Use it only on networks and for purposes the network owner allows; a home VPN is a privacy tool for your own connections, not a way around rules on someone else's network.

Step 8: Reboot regularly

The NSA suggests rebooting your router at least weekly, because a restart can clear some kinds of malware that live only in memory. Many routers have a scheduled reboot option; set it for a time like 4 a.m.

Turn an old phone or tablet into a smart home control panel

An old phone or tablet in a drawer can become a useful, free wall-mounted controller for lights, plugs and thermostats. It's worth being precise about what it can and can't do, though, because the term "hub" gets used loosely.

Control panel or hub? The important difference

A hub is the always-on device that runs your automations and lets you control things when you are away. A control panel is just a screen with buttons. An old phone makes an excellent control panel but, in most systems, not a hub:

Apple Home: Apple's home hub page lists HomePod, HomePod mini and Apple TV as home hubs. An iPhone can't be a home hub, and under Apple's current Home architecture an iPad can't be either. A hub is also required for automations and to add Matter accessories, and Thread-based Matter accessories need a Thread-capable hub such as HomePod mini or a supported Apple TV 4K.
Google Home: automations run through Google's service, and devices such as Nest speakers, displays and Wi-Fi points help. A spare Android phone or tablet works as a controller with the Google Home app.
Home Assistant: this free, open-source platform does run on hardware you own, but the supported installs are a Raspberry Pi, the company's own Home Assistant Green box, a mini PC or another computer, not an Android phone. The old phone then becomes the dashboard, using the free Home Assistant Companion app.

Our earlier post suggested installing Home Assistant on an old Android phone. That isn't an officially supported option, so we've removed it.

Prepare the device

Check it still gets updates. A device that no longer receives security updates shouldn't be used for email, banking or anything sensitive. Used only as a controller on your guest or IoT network (see the router section), the risk is much lower.
Erase it and set it up fresh. Remove old accounts, photos and apps. Sign in with an account that is a member of your home, not necessarily the owner.
Install only the home app you need: Apple Home is built into iPhone and iPad; install Google Home or the Home Assistant Companion app on Android.
Connect it to the right network. Some control apps need to be on the same network as the devices they control, so check before moving it to a separate IoT network.

Make it behave like a wall panel

iPhone: turn on StandBy in Settings, then stand the phone on its side on a charger. StandBy can show widgets full screen, including the Home widget, which lets you tap to control accessories. You can also add Home widgets to the Home Screen and Lock Screen.
iPad: add Home widgets to the Home Screen, and use Guided Access (in Accessibility settings) if you want to keep the iPad in a single app.
Android: add the Google Home or Home Assistant widgets to the home screen. Turn on App pinning (in Settings, usually under Security or Security & location > Advanced) to keep the device locked to one app until someone enters the PIN.
Screen timeout: look in the display settings for the screen timeout or auto-lock setting and pick the longest value you are comfortable with, or rely on StandBy on iPhone.

Power and battery safety

A device that stays plugged in all the time keeps its battery near full for months. If your phone offers an optimized charging or charge-limit setting, turn it on. Mount it somewhere with airflow, not in direct sun or above a radiator, and check the case now and then. If the battery swells, the case bulges or the screen lifts, unplug it and recycle the device properly; don't keep using it.

Mounting ideas

A tablet stand on a kitchen counter, plugged into a nearby outlet.
An adhesive or screw-on wall mount by the front door, with a short cable to an outlet below.
A bedside stand for an old iPhone in StandBy, which doubles as a clock.

Set up geofencing so lights turn off when you leave

Geofencing uses your phone's location to tell the home app when you've left or arrived. A presence automation can then switch off lights and plugs when the last person leaves, lower the thermostat, or turn on a porch light when someone arrives after dark. It saves energy and removes the "did I leave the lights on?" worry.

What you need

Smart lights, plugs or switches already added to your home app.
For Apple Home, a home hub (HomePod, HomePod mini or Apple TV). Apple says location-based automations require one.
Location access set to Always for the home app on each person's phone, and each household member opted in.

Apple Home

Everyone who should count needs Share My Location on for their main iPhone or iPad: go to Settings > [your name] > Find My, turn on Share My Location, and make sure "This Device" is selected.
In the Home app, tap the Add button and choose Add Automation.
Choose People Leave (or People Arrive).
Choose whether it applies to a specific person or to everyone, and optionally a time window. Then tap Next.
Select the lights, plugs or scenes to control, set them to off, and tap Test This Automation if available. Tap Done.

Google Home

Set up presence sensing first: in the Google Home app, open your home settings, turn on phone location for presence, and set the Home app's location permission to Allow all the time on your phone. Each household member does the same on their own phone.
Optionally add your home Wi-Fi network for Wi-Fi presence, which helps the app tell when you are home.
Tap Add Automation, name it, and add a presence starter: everyone's away or someone is home.
Add actions such as turning off lights and plugs, then tap Save.

Google explains that the Away automation starts when the last person's phone leaves, and Home starts when the first person returns. Device sensors such as Nest thermostats and speakers can also contribute, which may delay "Away" if they notice someone is still inside. Google says the app doesn't continuously record your exact location; it only needs to know whether you have left or come back.

Home Assistant

Install the Home Assistant Companion app on each phone and grant location permission. The app reports when you enter or leave a zone defined in Home Assistant (a "Home" zone is created automatically), and each phone appears as a person or device tracker. Create an automation with the trigger "person leaves Home zone" or "everyone away" and add actions for your lights. Home Assistant says location data goes from your phone directly to your own Home Assistant server, or through its optional cloud service, depending on how you've connected.

Samsung SmartThings and others

SmartThings and most other smart home apps offer similar presence routines based on members' phone locations. Look for a routine that starts when a member arrives at or leaves your home location, and check the app's location permission is set to always allow.

Make geofencing reliable

Use "everyone leaves", not "I leave", if other people live with you, so you don't plunge someone into darkness.
Don't over-tighten the radius. A geofence that is too small can trigger while you are still in the driveway, or miss you entirely. GPS accuracy varies, so allow some margin.
Low Power or battery saver modes can delay location updates. If automations are late, check battery optimization settings for the home app.
Keep safety-critical things manual. Google warns that automations are for convenience, not safety; they depend on the internet and on services working. Don't rely on geofencing alone to unlock doors, turn off a stove, or arm security systems.
Get consent. Presence automations are for members of your own household who have chosen to share their location. Don't use them to track another adult.

Settings at a glance

Router menus differ by brand, so the left column names the feature to look for. The recommendations come from the NSA and Apple guidance cited at the end.

Router feature	Recommended setting	Why
Admin password	Long, unique, saved in a password manager	Stops anyone on your network changing settings
Firmware updates	Automatic, or check monthly	Fixes security holes
Wi-Fi security	WPA3 Personal, or WPA2/WPA3 Transitional	Strongest widely supported encryption
Wi-Fi passphrase	20+ characters	Hard to guess or crack
Network name	Unique, same name on all bands, not hidden	Reliable connections; hiding adds no security
MAC address filtering	Off	Easily spoofed; gives false confidence
Remote administration	Off	Keeps the settings page off the internet
UPnP	Off	Stops devices opening ports automatically
Guest / IoT network	On, separate from main network	Keeps visitors and smart devices away from your computers
DNS	A filtering resolver such as Quad9	Blocks known malicious domains for every device
Scheduled reboot	Weekly	Clears some memory-resident malware

And for smart home presence, here is where each platform keeps it:

Platform	Where to create it	Needs
Apple Home	Home app: Add > Add Automation > People Leave / People Arrive	Home hub (HomePod or Apple TV), Share My Location on
Google Home	Google Home app: Add Automation > presence starter	Presence sensing on, location "Allow all the time"
Home Assistant	Automation editor: zone or person trigger	Companion app with location permission
SmartThings	Routines: member arrives or leaves	SmartThings app location permission

Quick-start checklist

Work through this list in order over a weekend. The router steps come first because everything else sits on top of them.

Sign in to your router, back up its settings and change the admin password (15 minutes).
Update the firmware and turn on automatic updates. If the router no longer gets updates, plan to replace it (10 minutes).
Switch Wi-Fi to WPA3 or WPA2/WPA3 and set a 20-character passphrase. Reconnect your devices (20 minutes).
Turn off remote administration and UPnP (5 minutes).
Create a guest or IoT network and move smart plugs, bulbs and TVs onto it if your apps allow (30 minutes).
Set a filtering DNS service and a weekly reboot (10 minutes).
Reset an old phone or tablet, install your home app and mount it as a control panel (30 minutes).
Create one "everyone leaves, lights off" automation and test it on your next trip out (10 minutes).

FAQ

Is a router's built-in VPN server the same as a paid VPN service?

No. A home VPN server encrypts your traffic on public Wi-Fi and sends it through your own home connection, so it is useful for privacy on the road and for reaching devices at home. A commercial VPN sends traffic through the provider's servers instead. Neither makes you anonymous, and both should be used within the rules of the network you're on.

Can I use my old iPad as an Apple Home hub?

Not with Apple's current Home architecture. Apple's home hub page lists HomePod, HomePod mini and Apple TV, and reports from PCWorld and TechRadar note the upgraded architecture dropped iPad hub support. An old iPad still works well as a control panel.

Will geofencing drain my phone's battery?

Modern phones handle geofences efficiently, because the system watches for boundary crossings rather than tracking you continuously. Google says the Home app doesn't constantly record your exact location. If you notice heavy drain, check that the home app isn't also refreshing in the background for other reasons.

Should my smart devices be on a separate network?

If your router supports it, yes. The NSA recommends separating your primary, guest and IoT devices. Some smart home apps need your phone to be on the same network during setup, so add devices first, then move them if your system allows it.

Do I need to replace my internet provider's router?

Not necessarily. If it receives firmware updates, supports WPA3 or WPA2/WPA3, and lets you create a guest network and turn off remote administration, it can be perfectly adequate. Replace it when the provider or manufacturer stops supporting it.

Sources

Top image: "ELECOM WRC-300FEBK WPS WiFi router" by Syced, CC0 1.0, via Wikimedia Commons (resized). Charts by Thank You Robot.