wifi-router (Home Systems)

Wi-Fi Router & Home Network

• What this is: how your home network works — the modem, router or gateway, and Wi-Fi coverage — including the security steps every owner must complete, when to replace the router, and what ISP-rented vs own equipment means for your wallet.
• Not: the smart devices that connect to your network (see smart-devices (Home Systems)); internet plan contracts or ISP billing (see utilities-accounts (Home Systems)); wired ethernet infrastructure inside walls.
• Figures: 2025–26 Canadian estimates — hardware prices fluctuate. Get current quotes from a retailer.

Bottom line

The rule (tripwire)

• If your router has never had its default admin password changed → do it today. Default credentials (typically “admin / admin” or “admin / password”) are publicly documented and scanned by bots continuously. This is the single most common path into a home network and takes two minutes to fix.¹²
• If a smart device (camera, plug, thermostat, lock) is on your main Wi-Fi network alongside your laptop and phone → move it to a guest or IoT network. A hacked smart plug should never be able to reach your banking session. If your router does not support a guest network, it’s time to replace it.³⁴
• If your router is more than 5 years old or the manufacturer no longer issues firmware updates → replace it. End-of-life routers accumulate unpatched security vulnerabilities that cannot be fixed.⁵⁶
• If your router’s Wi-Fi security is set to WEP, WPA (original), or WPA2-TKIP → change it to WPA3 or at minimum WPA2-AES. WEP and the original WPA are completely broken; WPA2-TKIP is vulnerable.¹⁷

Recurring upkeep

• Check for firmware updates every 3 months — or enable automatic firmware updates if your router supports it. Router firmware patches actively exploited vulnerabilities; routers running 24/7 are a persistent target.⁶
• Test your guest / IoT network annually — confirm smart devices still land on the isolated network and cannot reach your main devices.
• Reboot the router monthly if you experience slowdowns — routers can develop memory leaks under sustained load.

One-time setup

• Complete the security checklist on first setup:
  • Change the default admin username and password (16+ characters; store in a password manager).
  • Set Wi-Fi encryption to WPA3 (or WPA2-AES if WPA3 is unavailable).
  • Create a separate guest or IoT network; move all smart home devices onto it.
  • Disable WPS (the 8-digit PIN can be brute-forced in 4–10 hours).¹
  • Disable remote management — your router’s admin panel should only be reachable from inside your home, not the open internet.²
  • Enable automatic firmware updates.
• Calculate the ISP rental math — if your ISP charges a monthly equipment fee, add up 24–36 months of rental cost and compare it to buying a mid-range router outright. Most renters break even and start saving within 1–2 years.⁸
• Photograph or document your network setup — note which devices are on which network, the router’s model and admin URL, and where the modem connects to the wall. This saves time when troubleshooting or calling support.

Standing facts

• The in-unit router and cabling is the owner’s responsibility in a strata. The ISP’s network point-of-entry (demarc) is the boundary; everything on your side is yours to manage and replace.
• Fibre internet (TELUS PureFibre in Metro Vancouver) uses an ONT (Optical Network Terminal), not a traditional cable modem. You usually cannot replace the ONT with a store-bought device — the ISP owns and maintains it. You can, however, put your own router behind it.⁹
• WPA3 is the current security standard (2026). Routers sold since 2020 typically support it. Older routers may be limited to WPA2-AES, which is acceptable but weaker.⁷

How it works — the one thing that matters

Your home network is a chain of three jobs:

1. The modem (or ONT) converts your ISP’s signal (cable, fibre, DSL) into a standard Ethernet connection. It is the border between your ISP’s network and yours. On TELUS PureFibre, this is the ONT — a small box the ISP installs, owns, and maintains. On cable internet (Rogers/Xfinity in Metro Vancouver), it is a cable modem.

2. The router takes that Ethernet connection and distributes it — assigning addresses (DHCP), separating traffic between networks (your main network, a guest network, an IoT network), and acting as the first firewall between the internet and your devices. The router is where all the security settings live.

3. The Wi-Fi radio (built into the router) broadcasts the wireless signal your devices connect to. Modern routers broadcast on two or three frequency bands simultaneously (2.4 GHz, 5 GHz, and on newer hardware 6 GHz), and devices pick the best one.

Many ISPs bundle all three functions into a single device called a gateway — it handles modem, routing, Wi-Fi, and provider management in one box.

The load-bearing security mechanism: the router is the one device every packet in and out of your home passes through. An unsecured router is not just one compromised device — it is a compromised chokepoint that can redirect, inspect, or block every device on your network. This is why the five setup steps above (admin password, WPA3, guest network, WPS off, remote management off) matter: they close the entry points at the chokepoint before anything else is connected. A smart camera with weak security matters far less if it’s isolated on its own network where it cannot reach your laptop.

Band basics:

Band	Range	Speed	Best for
2.4 GHz	Long (penetrates walls well)	Slower	IoT devices, far-from-router devices
5 GHz	Medium	Fast	Phones, laptops near the router
6 GHz	Short	Fastest, least congested	High-throughput devices close to router (Wi-Fi 6E/7 only)

Most modern devices automatically pick the best band. The 2.4 GHz band is shared with microwaves and Bluetooth, making it noisier — this is why many IoT devices use 2.4 GHz and can be slower than expected.¹⁰

What goes wrong, and the warning signs

Watch for	What it means
Dramatic slowdown or disconnects on specific devices	Wi-Fi congestion, interference, or a device hogging bandwidth
All devices slow but speed test at the modem is normal	Router overloaded or firmware issue — try a reboot first
Speed test at the modem is also slow	ISP-side problem; call your ISP
Dead zones in certain rooms	Router placement or building materials blocking signal — consider a mesh node or extender
Router runs hot to the touch and drops connections	Thermal throttling from poor ventilation — relocate it
Any device on the network acts strangely (settings change, unknown traffic)	Possible compromise — check for unknown devices in the router’s connected-device list
Router admin page unreachable or password changed without your action	Strong indicator of compromise — factory-reset immediately
Firmware update nag that never resolves	Router may be end-of-life; manufacturer has stopped issuing updates
Router is 5+ years old	Past its useful support window even if it “seems fine”

What actually fails (the load-bearing failures):

• Security compromise via unchanged default credentials — bots scan for routers with factory passwords continuously; this is the most common attack vector.
• End-of-life firmware — unpatched routers are incorporated into botnets (thousands of home routers were compromised in documented 2024–2025 campaigns targeting Asus, Zyxel, TP-Link, and Cisco/Linksys end-of-life models).⁶
• IoT-pivot attack — a compromised smart device pivots to reach other devices on the same network. Isolation (guest network) is the structural fix.
• WPS PIN brute-force — the 8-digit WPS PIN can be cracked in 4–10 hours with widely available tools; disable it.¹
• Hardware failure — routers run continuously; flash memory and capacitors degrade. Signs include random reboots and inability to hold settings.

When to replace vs repair

What you see	Do this
Router is end-of-life (manufacturer stopped updates)	Replace — unpatched vulnerabilities cannot be fixed
Router is 5+ years old and firmware is current	Monitor + plan — start evaluating replacements; hardware degradation is coming
Router does not support WPA3 or guest networks	Replace — missing security features that matter
Known-compromised router (unknown admin access)	Factory-reset immediately; change all credentials; then assess if it’s still receiving updates
Dead zones in specific rooms	Add a mesh node or extender — not necessarily a full replacement
Single slow device	Troubleshoot the device — not the router
Router is <5 years old, firmware is current, no symptoms	Keep it — there is nothing to fix

Verdict: a router replacement runs $55–$750 CAD depending on tier (see Typical cost below). It is reversible (the old router can be kept as a spare) and crosses the >$500thresholdonlyforhigh-endmeshsystems.Standardrouterreplacement($80–$200)islow-costandreversible—justdoitwhentheconditionsabovearemet;nocomplexdecisionprocessneeded.Apremiumwhole-homemeshdeployment($400–$750) merits a brief comparison of options but does not require the full The Decision Lifecycle process since it is reversible. → ISP-Gateway-vs-Own-Router — When-to-Switch-and-When-to-Stay (Home Systems)

Typical cost (BC / Metro Vancouver)

Tier	What’s included	Range (CAD)	Sources
DIY / self-install	Owner installs the router themselves — no professional labour needed. This is the normal path for home routers; no permit or licensed trade is required.	—	—
Router hardware — basic	Wi-Fi 5 or entry Wi-Fi 6 single-unit router; covers ~1,200–1,500 sq ft; suitable for apartments and small units	$55–$110	1112 — indicative (limited sources)
Router hardware — standard	Mid-range Wi-Fi 6 single-unit router; covers ~2,000 sq ft; adequate for most homes	$100–$150	1112 — indicative (limited sources)
Router hardware — mesh system (budget)	Wi-Fi 5 or Wi-Fi 6 2-pack mesh; covers ~4,000–5,500 sq ft; for multi-floor or large units	$200–$300	1112 — indicative (limited sources)
Router hardware — mesh system (mid-range Wi-Fi 6E)	Wi-Fi 6E 3-pack mesh; covers ~6,000–7,800 sq ft; handles 100+ devices	$480–$650	1113 — indicative (limited sources)
Router hardware — mesh system (premium Wi-Fi 7)	Wi-Fi 7 3-pack mesh; lowest latency; future-proof for 5–7 years	$620–$750+	1113 — indicative (limited sources)
ISP gateway rental (ongoing)	ISP-provided modem/router/Wi-Fi combo; included in plan or separate $10–$15/mo fee; no upfront cost; limited configuration	$0upfront/$120–$180/yr if separate fee	814 — indicative (limited sources)

Router hardware is a self-install item — no trades or permits involved. Prices are from Canadian retailers (celmin.ca, Best Buy Canada) and reflect 2025–26 market prices; they fluctuate seasonally. Professional network setup is available from IT consultants ($80–$150/hr) for complex multi-device configurations, but is not required for a standard home install.

ISP rental math: if your ISP charges a separate equipment fee (~$10–$15/month in Canada), buying a compatible modem and mid-range router ($150–$300 total) typically pays for itself in 12–24 months. Note that fibre ISPs (TELUS PureFibre) often include their gateway/WiFi hub in the plan price and own the ONT — the rental-vs-buy calculation applies mainly to the cable/DOCSIS side. One Canadian trade source and multiple US ISP analyses confirm the general break-even range, though BC-specific ISP rental fee data is thin — check your bill directly.⁸¹⁴

How to maintain it — the procedures

Home router maintenance is owner-doable at every step. No licensed trade or permit is ever required for in-unit router and Wi-Fi configuration.

Procedure: Initial security setup — one-time on new router

Why: a factory-fresh router has public default credentials, WPS enabled, and no network isolation. This setup locks it down before any devices connect.

You’ll need: a laptop or phone connected to the router (by cable or using the temporary Wi-Fi printed on the router label), the router’s admin URL (usually 192.168.0.1 or 192.168.1.1, or printed on the router), and a password manager.

1. Connect to the router directly (cable preferred for initial setup).
2. Open a browser and navigate to the admin URL.
3. Log in with the default credentials (printed on the router label).
4. MUST change the admin username and password immediately. Use 16+ characters; store it in a password manager. Do not reuse your Wi-Fi password.
5. Navigate to the Wireless or Wi-Fi settings. Set security mode to WPA3 (or WPA2-AES if WPA3 is unavailable). Never choose WEP, WPA, or WPA2-TKIP.
6. Set a strong Wi-Fi password (16+ characters, different from the admin password).
7. Navigate to Guest Network or Multi-Network settings. MUST create a second network (name it something like “IoT” or “Guest”). Enable client isolation if the option exists (this prevents guest devices from reaching each other).
8. Navigate to WPS settings. MUST disable WPS entirely.
9. Navigate to Remote Management or Remote Access. MUST confirm it is disabled or set to “LAN only.”
10. Enable automatic firmware updates if available; note the setting for manual checks if not.
11. Save settings and reboot the router.
12. Connect your laptop and phone to the main Wi-Fi. Connect all smart home devices (cameras, plugs, thermostats, TVs) to the guest/IoT network.

Done when: main network uses WPA3 or WPA2-AES; guest/IoT network exists and smart devices are on it; WPS is disabled; admin password is changed and saved.

Stop and call a pro if: you lose all access to the router after changing settings (you may need a factory reset via the physical button on the router — not a licensed trade issue, just a reset).

---

Procedure: Quarterly firmware check

Why: router firmware patches actively exploited vulnerabilities. End-of-life routers with no available updates are the primary source of botnet compromises.⁶

You’ll need: access to your router’s admin panel; 5 minutes.

1. Log in to the router admin panel.
2. Navigate to the Firmware or Software Update section (location varies by brand — check the manual or search “[your router model] firmware update”).
3. Check the current firmware version against the manufacturer’s latest. If an update is available, install it.
4. MAY set automatic updates here if you have not already — most modern routers support this.
5. While in the admin panel, check the Connected Devices list for any unfamiliar devices.

Done when: firmware is current; no unknown devices on the network.

Stop and call a pro if: you find the manufacturer has discontinued firmware updates for your model — this means replacing the router, not repairing it.

---

Procedure: Optimize placement for coverage

Why: a router in the wrong position causes dead zones, slower speeds, and more devices defaulting to the slower 2.4 GHz band.

You’ll need: nothing — just the router and its power cable; 15 minutes to trial different spots.

1. Move the router to a central location in the home — not tucked in a closet, behind a TV, or in a corner.
2. Elevate it off the floor: a shelf or desktop position is better than the floor (signal radiates outward and slightly downward from antennas).
3. Keep it away from microwaves, cordless phone bases, and other electronics that can interfere with 2.4 GHz.
4. Avoid placement near thick concrete, brick, or stone walls where possible — these heavily attenuate the signal.
5. For a two-story home: consider placing the router near the ceiling of floor 1 or floor of floor 2 to cover both floors roughly equally.
6. Run a speed test (speedtest.net) near the router, then at the problem area. If the gap is large (>50%), a mesh node or extender in the midpoint is the fix.

Done when: devices in previously weak areas show acceptable signal and speed.

Stop and call a pro if: you need in-wall ethernet cabling run to place a wired mesh node — this is cabling work that may need a licensed electrician in BC if it involves penetrating fire separations or strata common areas.

Maintenance calendar:

• One-time on setup: complete the security checklist (admin password, WPA3, guest/IoT network, WPS off, remote management off).
• Monthly: reboot the router if experiencing slowdowns; log any new unknown devices.
• Every 3 months: check firmware version; apply any available update.
• Annually: verify all smart devices are still on the guest/IoT network; test that the guest network cannot reach main-network devices; review the connected-devices list for unknowns.
• At 5 years: assess whether the router is still receiving firmware updates. If not, plan replacement.

Strata reality

In-unit network is owner responsibility; building internet is common property (if bundled).

In a BC strata, your Wi-Fi router and in-unit network equipment are part of your strata lot — you buy, configure, maintain, and replace them. This is not shifted to the strata corporation under Standard Bylaw 2 unless your registered bylaws say otherwise.¹⁵

Building-bundled internet (some stratas provide this): some strata corporations include internet service as part of the monthly strata fees — the building has a bulk service agreement with an ISP and provides a connection to each unit. In this case:

• The ISP’s demarcation point (where the building’s service ends and yours begins) is typically at a data port in your unit.
• You still plug your own router into that port.
• The building’s wiring, switches, and the building-side of the ISP contract are common property — contact the strata corporation if the building-side has issues.
• You are responsible for your own router, its security configuration, and your in-unit Wi-Fi.

Relevant SPA provisions:

• Standard Bylaw 2 — owner’s duty to maintain and repair their strata lot
• SPA s. 72 — strata corporation’s duty to maintain common property (building backbone cabling is common property)

Strata notes on security:

• Your unsecured router is not only a risk to you — if compromised, it can be used to attack other devices on shared infrastructure. Some strata corporations include network security expectations in their rules.
• If your strata uses a shared Wi-Fi network (less common in newer stratas), you have no control over who else is on that network — securing your own devices becomes even more important.

DIY-vs-pro line: all router configuration and in-unit Wi-Fi is owner-doable — no permit, no licensed trade, no strata approval needed. The only exception is if you want to run ethernet cabling through walls or ceilings shared with other strata lots (common walls / fire separations) — that requires strata approval under Standard Bylaw 8 and may need a licensed electrician for the wiring work.

When you hire someone

Most home network work is owner-doable, but an IT professional or network consultant is appropriate when setting up a complex multi-device environment, troubleshooting persistent issues, or running in-wall ethernet.

Ask:

• Are you familiar with residential network setup (not just corporate IT)?
• Can you configure a guest/IoT VLAN in my specific router brand?
• Will you document the network configuration (network names, device assignments) so I have a record?
• Is in-wall cabling in scope, and are you a licensed electrician for that portion?

Verify the work:

• All smart devices land on the guest/IoT network, not the main network
• The guest network is isolated (client isolation enabled — test by trying to ping a main-network device from a guest-network device)
• Firmware is current at the time of setup
• Admin password is changed (you set it, not the technician)
• Speed test results near the router and in problem areas match expectations for your ISP plan

Who to call

• Internet service provider (ISP) — for modem/ONT issues, speed problems at the modem level, or ISP gateway configuration questions → utilities-accounts (Home Systems). Fill: ISP name, account number, tech support line, and equipment model provided.
• IT consultant / home network specialist — for complex setup, persistent troubleshooting, or in-unit ethernet runs → vendor-roster (Home Systems). Fill: company name, phone, notes on residential vs commercial experience.
• Strata manager — if building-bundled internet or building-side wiring is involved, or if cabling through common walls is needed → Strata MOC. Fill: manager name, after-hours line, procedure for requesting approval for in-wall work.

---

Sources

Idea Compass

North: Where this comes from

• Smart Home & Network (Home Systems) — parent system
• Default-Router-Credentials-Are-an-Open-Door — Change-Them-First (Home Systems) — the security mechanism this note’s bottom line rests on
• TCP/IP networking fundamentals — the routing and addressing model that makes the modem/router/device chain work

East: Tensions / failure

• IoT-Devices-Belong-on-a-Separate-Network — Not-Your-Main-One (Home Systems) — the compromise path when IoT and personal devices share a network
• ISP-Gateway-vs-Own-Router — When-to-Switch-and-When-to-Stay (Home Systems) — the cost-vs-control tradeoff
• End-of-life firmware as the persistent background threat — router manufacturers stop patching on a timeline that does not match the hardware’s lifespan

South: Where this leads

• smart-devices (Home Systems) — every IoT and smart-home device depends on the network isolation this note establishes
• utilities-accounts (Home Systems) — the ISP relationship and plan that connects to the modem
• vendor-roster (Home Systems) — the ISP tech support and IT consultant cards to fill

West: What’s similar

• electrical-panel (Home Systems) — same pattern: a central chokepoint (panel / router) where a single failure or misconfiguration affects every downstream load; the security setup here mirrors the “one correct procedure” discipline of panel work
• smoke-co-detectors (Home Systems) — sibling safety-critical setup that also lives at the “do this once at move-in, then maintain on a calendar” cadence
• doorbell (Home Systems) — smart doorbell relies on the network isolation established in this note; a compromised doorbell camera on the main network is an IoT-pivot risk

Footnotes

1. Vecosys, home network security guide (2026) — 15 essential router security settings including admin password, WPA3, WPS disable — https://www.vecosys.com/home-network-security-settings-2026/ ↩ ↩² ↩³ ↩⁴

2. Bellator Cyber, home network security guide — admin credential change, remote management disable, WPA3 vs WPA2 guidance — https://bellatorcyber.com/blog/home-network-security ↩ ↩²

3. Silent Security, home network security — IoT device segregation via guest network; “83% of IoT devices carry known security vulnerabilities”; AP isolation requirement — https://silentsecurity.net/resources/home-network-security/ ↩

4. HP Tech Takes, secure home network guide — guest network creation for IoT device isolation best practice — https://www.hp.com/us-en/shop/tech-takes/secure-home-network-remote-work-guide ↩

5. NETGEAR, router replacement checklist — most routers need replacing every 4–5 years; manufacturers stop security updates for older models — https://www.netgear.com/hub/wifi/routers/replace-router-checklist/ ↩

6. The Hacker News / CISA — CISA flags TP-Link router flaws CVE-2023-50224 and CVE-2025-9377 as actively exploited; FBI warnings on end-of-life Linksys and Cisco models recruited into botnets (May 2025) — https://thehackernews.com/2025/09/cisa-flags-tp-link-router-flaws-cve.html ↩ ↩² ↩³ ↩⁴

7. Whatismylocation.org, WiFi security 2026 — WPA3 current gold standard; WEP/WPA completely broken; WPA2-TKIP vulnerable; WPA2-AES acceptable minimum — https://whatismylocation.org/blog/wifi-security-wpa3 ↩ ↩²

8. HighSpeedInternet.com, rent or buy modem/router — ISP rental fees $10–$15/month (US providers; Canadian ISPs similar range); purchase cost $60–$300; break-even 4–24 months — https://www.highspeedinternet.com/resources/rent-or-buy-modem-router ↩ ↩² ↩³

9. internetadvice.ca, modem vs router vs gateway Canada — fibre ISPs use ONT that owner cannot replace; gateway combo vs separate modem+router; Canadian ISP keep-vs-buy guidance — https://internetadvice.ca/modem-vs-router-vs-gateway-canada/ ↩

10. NETGEAR, 2.4 GHz vs 5 GHz vs 6 GHz frequency comparison — band characteristics, speed, range, congestion; IoT devices typically use 2.4 GHz — https://www.netgear.com/hub/wifi/routers/difference-2-4-ghz-5-ghz-and-6-ghz/ ↩

11. Celmin.ca, best budget WiFi routers in Canada (2026) — TP-Link Archer A7 ~$55;TP-LinkAX21$80; TP-Link AX55 ~$110;ASUSRT-AX58U$130; Netgear RAX30 ~$100 (Canadian prices) — https://celmin.ca/best-budget-wifi-router/ ↩ ↩² ↩³ ↩⁴ ↩⁵

12. Celmin.ca, best WiFi mesh routers in Canada (2026) — TP-Link Deco XE75 3-pack ~$480;GoogleNestWiFiPro3-pack$550; TP-Link Deco BE65 3-pack ~$620;ASUSZenWiFiET82-pack$650; Eero Pro 6E 3-pack ~$750 (Canadian prices) — https://celmin.ca/best-wifi-mesh-router/ ↩ ↩² ↩³

13. shoppingtrends.ca, best mesh Wi-Fi systems Canada (2026) — TP-Link Deco M4 3-pack (budget), TP-Link Deco AXE5400 2-pack (mid), Amazon Eero Max 7 (premium); Wi-Fi 7 availability noted — https://www.shoppingtrends.ca/tech/best-mesh-wi-fi-systems-canada.html ↩ ↩²

14. BroadbandNow, renting vs buying modem/router — rental fees $10–$15/month typical; purchase costs $60–$300; break-even varies by provider — https://broadbandnow.com/guides/renting-vs-buying-modem-whats-best-budget ↩ ↩²

15. Province of BC, division of repair duties in a strata — owner responsible for strata lot; Standard Bylaw 2; common property is strata corporation’s responsibility — https://www2.gov.bc.ca/gov/content/housing-tenancy/strata-housing/operating-a-strata/repairs-and-maintenance/division-of-repair-duties ↩