What a Network Security Key Is

The prompt appears when you connect a device, and the wording is unhelpfully generic. It means one of three things depending on where you saw it.

The three meanings

Your wifi password. The usual case. The passphrase for the wireless network, printed on a sticker on the router unless someone changed it.

Your router's administrator password. A different credential, for the configuration interface. Frequently also on the sticker, and frequently the same for every unit the manufacturer shipped.

A security key device, in a work context. A physical authentication device. Different subject entirely.

Distinguish by where you saw the prompt. Connecting a device to wifi means the first. Logging into the router's settings page means the second.

Finding the wifi password

On the router. A sticker with network name and password. Check the underside.

On a computer already connected. Both desktop systems can display a saved network password after you authenticate as an administrator. On Windows this is in the wireless properties security tab; on macOS the Keychain holds it.

On a phone already connected. Both platforms now show or share the password for a saved network, frequently as a QR code, which is the easiest way to add a new device.

From the router's settings page, if you can log in.

If none works: reset the router. Hold the reset button until it restarts, and it returns to the sticker credentials — along with everything else set to default, including any custom configuration your provider applied.

Settings worth changing while you are there

Use WPA3 if every device supports it, or WPA2 otherwise. If the router offers WEP or WPA, do not use them; both are broken.

Change the administrator password. Default administrator credentials are published for every model. This is the single most important router change and almost nobody makes it.

Turn off WPS. The push-button pairing feature has a known weakness in its PIN mode. The convenience is not worth it.

Turn off remote administration unless you specifically need it. Router management interfaces exposed to the internet are scanned constantly.

Update the firmware, and enable automatic updates if available. Router firmware is neglected and routers are a routine target.

Set up the guest network and use it for visitors and for smart-home devices. This keeps them off the network holding your computers.

About the password itself

Length matters more than complexity. A long passphrase of ordinary words is stronger and easier to type than a short string of symbols.

Do not use the default. Some manufacturers derive it from the network name, which means it is not a secret.

Changing it disconnects everything, which is tedious and worth doing once if the current one has been shared widely.

Hiding the network name

Frequently recommended and largely pointless. A hidden network still broadcasts its presence, the name is trivially recovered with common tools, and your devices then announce the name continuously as they look for it — which is slightly worse for privacy, not better.

Use a strong passphrase instead and leave the name visible.

MAC address filtering

Also frequently recommended and also weak. Addresses are visible in the air and easily copied. It stops nobody who is trying and it creates work for you every time you add a device.

What actually protects a home network

A current encryption standard with a long passphrase.

A changed administrator password.

Updated firmware.

A guest network for anything you do not control — smart devices, visitors, anything with a camera or microphone that you did not configure yourself.

Router support that has not ended. A router no longer receiving firmware updates should be replaced, and manufacturers frequently stop at five years or less without announcing it.

Those five things cover realistic home network risk. Everything else on the settings page is optional.

When to replace the router entirely

Configuration only goes so far, and some routers should be replaced rather than tuned.

Firmware support has ended. Manufacturers frequently stop issuing updates after a few years without announcing it. A router with a known unpatched flaw is a permanent hole, and routers are scanned continuously.

It does not support WPA3, and every device you own does.

It was supplied by an internet provider years ago and has never been updated. These are among the most consistently neglected devices on home networks.

It cannot create a guest network, which is the simplest way to isolate smart devices and visitors.

Check the manufacturer's support page for your model and look for the last firmware date. If it is more than two years old, treat the device as end of life.

A current router is inexpensive relative to what it protects, and replacing one is the least glamorous security improvement available.