Recover from a Hacked Wi-Fi Network
If someone gains unauthorised access to your home Wi-Fi network, they may do more than use your internet connection. They could attempt to access devices connected to the network, steal personal information, or use your connection to carry out cybercrime.
If you suspect someone has accessed your home Wi-Fi without permission, act quickly to secure your network.
In South Africa, unauthorised access to a computer system, device, account or network may constitute an offence under the Cybercrimes Act 19 of 2020.
We want to better understand the impact of you experiencing this issue, can you share your experience by filling in this online form? This will help us better protect future victims.
How do I know if my Wi-Fi has been hacked?
Common warning signs include:
Unknown devices connected to your Wi-Fi network.
Your internet connection is unexpectedly slow.
Router settings have changed without your knowledge.
Your Wi-Fi password no longer works.
Websites redirect to unexpected pages.
Devices on your network behave unusually.
You receive notifications that your router settings have changed.
To check connected devices:
Log in to your router's administration page - details on how to do this will often be on the back of your router.
Review the list of connected devices.
If you do not recognise a device, investigate further.
If you cannot access the administration page or are unsure whether a connected device belongs to you, contact your Internet Service Provider (ISP) for assistance.
Hacked wifi - Do this first!
Change router administration password - Log in to your router's administration page and change the administrator password immediately.
This helps prevent an attacker from continuing to control your router.
Choose a strong, unique password that you have never used before.
Change wireless network password - After securing the administrator account:
Change your Wi-Fi password.
Use a strong, unique passphrase.
Reconnect only trusted devices using the new password.
This disconnects devices that previously had unauthorised access.
Securing Your Home Wi-Fi Network
Update router firmware - Cybercriminals sometimes exploit known security vulnerabilities in outdated router software. Check whether firmware updates are available and install them promptly. Enable automatic updates if your router supports them.
Contact your internet service provider(ISP) - Inform your ISP if you believe your router or home network has been compromised.
Ask them to help you:
Review connected devices.
Verify router settings.
Reset the router if necessary.
Update the router firmware.
Secure your internet connection.
Scan your all connected devices for malware - If your Wi-Fi password was stolen, one of your devices may already be infected with malware.
Run a full antivirus or anti-malware scan on every device connected to your home network, including:
Computers.
Mobile phones.
Tablets.
Smart TVs.
Other internet-connected devices where appropriate.
Remove any threats that are detected.
If you cannot access your router - If you cannot log in to the router or believe its settings have been changed:
Contact your ISP.
Ask them to assist with a factory reset.
Reconfigure the router securely after the reset.
Immediately change both the administrator password and the Wi-Fi password.
Preserve evidence
If it is safe to do so, collect evidence before changing router settings or resetting the router.
This may include:
Screenshots of connected devices.
Router logs, if available.
Router configuration settings.
Messages from your ISP.
Records of suspicious network activity.
This information may assist your ISP, SAPS, your insurer or your bank if an investigation becomes necessary.
Do not delay urgent security actions solely to preserve evidence. If the network remains compromised, securing it should take priority.
Secure your online accounts
If you believe your Wi-Fi network was compromised, passwords used on devices connected to the network may also be at risk, particularly if malware or another form of compromise is involved.
Change the passwords for important accounts, including:
Email.
Banking.
Online shopping.
Social media.
Cloud storage.
Use a different password for every account and enable Multi-Factor Authentication (MFA) wherever available.
If you notice unauthorised banking transactions:
Contact your bank immediately using the contact details in your banking app, on the back of your bank card or on the bank's official website.
Do not use telephone numbers provided in unsolicited SMS messages, emails or instant messages.
Report the crime
If you believe someone accessed your home network without permission, report the incident to the South African Police Service (SAPS) by visiting your nearest police station.
Take any available evidence, including:
Screenshots.
Router logs.
Lists of unknown connected devices.
Correspondence with your ISP.
Records of suspicious activity.
Ask for:
A case number.
A copy of your statement, if available.
Keep the case number for your records. It may be useful when dealing with your bank, insurer or other service providers.
How can I reduce the risk of my Wi-Fi being hacked again?
Use a strong Wi-Fi password- Use a long, unique Wi-Fi password, change it whenever you believe it may have been compromised and avoid sharing it unnecessarily.
Change the default admin password - Most routers are supplied with default administrator credentials. Change these immediately when setting up a new router.
Change your Wi-Fi network name (SSID) - Avoid using the default Wi-Fi network name.
Choose a name that does not reveal:
Your router model.
Your ISP.
Your surname or address.
Disable wi-fi protected setup (WPS) - If your router supports WPS and you do not require it, disable it. WPS can introduce security risks and may make unauthorised access easier.
Regularly review connected devices - Periodically check your router's administration page for unfamiliar devices. Investigate and remove any devices you do not recognise.
Keep your router firmware updated - Enable automatic firmware updates if available. Otherwise, regularly check for updates from your router manufacturer or ISP.
Use a guest wi-fi network - If your router supports a guest network:
Enable it for visitors.
Keep your personal devices on your primary network.
This helps isolate guest devices from your home network.
Review important router security settings - Ask your ISP to help you confirm that:
DNS settings have not been changed to unknown servers.
Remote administration is disabled unless specifically required.
WPS is disabled if not needed.
Your Wi-Fi security uses WPA2 or WPA3 encryption.
Older security methods such as WEP or open (unencrypted) Wi-Fi are not enabled.
Additional support
If you continue experiencing problems after following these steps:
Contact The Cyber Helpline for further assistance.
Seek help from your ISP or a trusted IT professional if you are unable to secure your router yourself.
Donate
Your generosity makes our free support possible. Please consider giving today.
Without donations, we cannot keep our service free or provide help to the most vulnerable victims of cybercrime when they need it most. As a not-for-profit organisation, every donation goes directly towards keeping The Cyber Helpline up and running. Donate now and help us support victims of cybercrime.