How to Test Your Wi-Fi Security at Home: 3 Easy Tools Anyone Can Use (2026)

Key takeaways

• Spend ten minutes in the router admin page first: WPA3 or WPA2 with AES, strong password, WPS and UPnP off, and current firmware.
• Run Nmap against your own network to list every device and open port, which exposes forgotten smart plugs and unknown devices.
• Scanning a neighbour's, office or public network without permission can breach India's IT Act, 2000, so test only what you own.

You don't need hacking skills to find the most common home Wi-Fi weaknesses. Most problems are settings, not sophisticated attacks: an old router password, WPS left on, an unknown device, or a cheap smart plug with open ports. This guide shows what to check, which tool to use for each check, and what to fix.

Before you start: test only your own network

Scan and capture only on a network you own or have permission to test. Scanning a neighbour's, office or public network without permission can breach India's IT Act, 2000 and your ISP's terms. Everything below is meant for your own home router and devices.

Step 1: Check your router settings (10 minutes, no tools)

The router's admin page fixes more problems than any scanner. Log in through the address printed on the router label (often 192.168.0.1 or 192.168.1.1) or the ISP's app, and check each line:

WPA3 is now mandatory for Wi-Fi CERTIFIED devices, according to the Wi-Fi Alliance, and it gives WPA3-Personal users better protection against password guessing. If an older device can't join a WPA3 network, use WPA2/WPA3 mixed mode rather than dropping to WPA2 for everything. For background on the encryption types, see our explainer on Wi-Fi encryption standards.

The 3 tools at a glance

Tool 1: NetSpot, to check what your Wi-Fi looks like from outside

NetSpot is a Wi-Fi analyser that lists every network in range with its signal strength, channel and security type. Any similar analyser app works for the security checks below.

1. Install NetSpot (or a Wi-Fi analyser app) on a laptop or Android phone.
2. Open the list of nearby networks and find yours.
3. Check the security column. It should say WPA3 or WPA2 with AES (sometimes shown as CCMP). If it shows WEP, WPA or "Open", fix it on the router now.
4. Look for networks with your name that you didn't create. A look-alike network (an "evil twin") near your home is unusual but worth noticing.
5. Walk around your home to see where the signal is weak or crowded. If several neighbours share your 2.4 GHz channel, choose a less busy one or use 5 GHz.

Weak signal isn't a security hole on its own, but it explains many "the Wi-Fi keeps dropping" complaints.

Tool 2: Nmap, to find every device and its open ports

Nmap shows which devices are on your network and which network services each one exposes. Start by finding your network range. On Windows run ipconfig, on macOS or Linux run ip a or ifconfig; if your address is 192.168.1.23, your range is usually 192.168.1.0/24.

# 1. List every device that answers on your home network
nmap -sn 192.168.1.0/24

# 2. Check the common open ports on one device, e.g. a smart TV
nmap 192.168.1.40

# 3. See which services and versions are running on those ports
nmap -sV 192.168.1.40

What to look for:

• Devices you don't recognise. Match each one against your router's "connected devices" list. If you can't identify it, change the Wi-Fi password, which disconnects everyone, and reconnect only your own devices.
• Remote access ports on ordinary devices, such as 23 (Telnet), 22 (SSH) or 3389 (RDP) on something that shouldn't need them.
• Admin web pages on ports like 80, 443 or 8080 on cameras, NAS boxes and printers. Make sure each has a changed password.

If the command line feels unfamiliar, Zenmap is Nmap's graphical front end, and phone apps such as Fing give a simpler device list. Our beginner's guide to Nmap explains each scan type.

To check what the internet can see, use an outside test such as GRC's ShieldsUP from a browser on your home connection. If you're behind carrier-grade NAT, which is common on Indian broadband, the result reflects your ISP's shared address rather than your router.

Tool 3: Wireshark, to spot unencrypted traffic

Wireshark captures network packets so you can read what devices send. On a normal Wi-Fi laptop, it mainly shows your own computer's traffic plus broadcast and multicast messages from other devices. The Wireshark wiki explains that other devices' encrypted traffic is not captured unless the adapter is in monitor mode, so set realistic expectations.

Useful checks at home:

1. Start a capture on your Wi-Fi adapter for five to ten minutes while you use the internet normally.
2. Apply the filter http to find unencrypted web traffic from your own machine. Logins should never appear in plain HTTP.
3. Apply ssdp || mdns to see devices announcing themselves on your network, such as TVs, Chromecasts and printers. This is a good way to discover forgotten gadgets.
4. Apply dns to see which domains your computer looks up. Unfamiliar domains from a browser extension or app are worth investigating.

Wireshark has a learning curve, and Nmap gives you more security value for less effort, so treat it as the third step. For a guided walk-through of what normal traffic looks like, read what Wireshark shows about your own internet traffic.

What to fix after testing

• Move smart devices to the guest network or a separate IoT network if your router supports it.
• Turn off services you don't use on TVs, cameras and NAS boxes, and change every default password.
• Update firmware on the router and on each device that offers updates. Replace gadgets that no longer get updates.
• Don't rely on MAC filtering. MAC addresses are easy to copy, so it only stops casual users. A strong WPA2/WPA3 password does the real work.
• Don't rely on hiding your network name. Hidden SSIDs are still easy to find with the right tools.

For more on why cheap smart devices are the weak link, see how to secure smart home and IoT devices.

How often should you test?

Check your router settings and run an Nmap device scan every three to six months, and again whenever you add a new smart device, change ISP or replace the router. It takes about 20 minutes once you know the steps.

Next step: log in to your router today and work through the Step 1 table. It fixes most home Wi-Fi risks before you open any tool. If this kind of checking interests you as a career, our cyber security course teaches network defence in supervised labs.

Related reading

• Top 10 Linux Security Tools for Ethical Hackers | Best Tools for Penetration Testing and Network Security
• What are the most common wireless network issues and how can you fix them?