How to Secure Your Windows Wi-Fi Connection

Step by step

1. 1 min

   Disable automatic connection to open networks

   Open the Settings app by pressing Win + I. Navigate to Network & internet > Wi-Fi. Select Known networks and toggle off 'Connect automatically when in range' for any public or untrusted hotspots.

   Note: Preventing automatic connection stops your device from joining 'Evil Twin' access points.
2. 1 min

   Enable random hardware addresses

   Within the Wi-Fi settings menu, toggle 'Random hardware addresses' to 'On'. This feature rotates your MAC address, preventing network observers from tracking your device's activity across different networks.

   Note: Hardware randomization is supported on most modern Wi-Fi adapters.
3. 2 min

   Configure network profile as Private

   Go to Settings > Network & internet > Wi-Fi. Click on the properties of your active network. Set the Network profile type to 'Private' to ensure your PC is hidden from other devices on the same network.

   Note: Public mode blocks discovery and file sharing by default, which is the safest setting for untrusted environments.
4. 1 min

   Verify Wi-Fi network security protocol

   View the properties of your connected Wi-Fi network in Settings. Ensure the 'Security type' is listed as WPA3-Personal or WPA2-AES (CCMP). If your router uses WPA or WEP, access your router's administration portal to upgrade the encryption standard.

   Note: WPA3 is the current gold standard for wireless encryption.
5. 1 min

   Enable Windows Firewall for public networks

   Search for 'Windows Defender Firewall' in the Start menu. Click 'Turn Windows Defender Firewall on or off'. Ensure both Private and Public network settings are set to 'Turn on Windows Defender Firewall'.

   Note: Always verify that inbound connections are blocked for public profiles.