Your front door lock means little if the router still runs a 2019 firmware image with known remote bugs.

Home networks in Canada increasingly host work laptops, cameras and kids' tablets. Attackers scan for outdated gateways as eagerly as they phish SMS. Firmware updates are unglamorous and occasionally disruptive — and they remain one of the highest-leverage security habits available to a household.

Find out what you actually own

Many homes use an ISP-supplied modem-router. Others bought an ASUS, TP-Link, Ubiquiti or eero kit and left the ISP device in bridge mode. Log into the admin page (often on a sticker) and note model and firmware version. Photograph the sticker for your records before it fades.

If you cannot log in because someone changed the password years ago, a controlled reset may be required — schedule it for an evening when video calls can wait.

Update paths by device type

  • ISP gateways: Some push updates automatically; still check the admin UI or ISP app monthly for pending reboots.
  • Consumer mesh: Updates often arrive in-app — enable auto-update where reputable.
  • Enthusiast routers: Download only from the vendor's official site over HTTPS; avoid third-party « sped up » firmware dumps.

Never install random firmware from forum mirrors. Bricking is real; so is malware-laced images.

When to replace instead of patch

If the vendor ended support, no amount of careful settings will fix unpatched remote code bugs. Devices older than about five to seven years without a current security advisory trail belong at an electronics recycler. Canadian retailers regularly discount Wi-Fi 6 kits — treat replacement as a security purchase, not a luxury upgrade.

Safe update procedure

  1. Export settings if the router supports backups.
  2. Use Ethernet for the admin session when possible.
  3. Apply the update; do not power-cycle mid-flash.
  4. Re-check Wi-Fi names, guest network and port forwards after reboot — some updates reset options.
  5. Change the admin password if it was still default or shared.

Aftercare: settings that matter

Disable remote administration from the WAN. Turn off WPS. Prefer WPA3/WPA2 mixed mode only as needed for old devices. Separate guest Wi-Fi for visitors and IoT. Document port forwards you actually need — delete the Minecraft experiment from 2018.

Household schedule

Put a recurring calendar event every 60 days: « check router firmware. » Pair it with smoke-alarm battery changes in spring and fall so the habit sticks. After major ISP outages, re-verify that auto-updated gateways did not silently re-enable Wi-Fi if you run your own mesh.

Patching the router is boring until the day it prevents a camera botnet from living in your basement. Make the calendar reminder now.