How to secure a network in a shared apartment

This guide will help you protect your personal devices and data on a shared Wi-Fi network. You'll learn how to segment traffic, set strong passwords, manage connected devices, and configure essential router settings for better privacy and security.

By the end, you'll have a practical plan to shield your online activity from roommates and potential intruders, even without direct control of the main router.

Note: Steps may vary by device and router model. This guide focuses on safe, general methods.

Quick Answer

Change the main router's admin and Wi-Fi passwords immediately.
Enable WPA2 or WPA3 encryption on the Wi-Fi network.
Create a separate Guest Network for visitors and IoT devices.
Use a VPN on your personal devices for encrypted traffic.
Enable your computer's firewall and disable network sharing.
Regularly check the router's connected devices list for intruders.

If these basic steps don't work or you lack router access, the diagnostic flow and advanced steps below offer solutions like creating your own private network.

What you need

Before you start

Access to the main Wi-Fi router (or a cooperative roommate who does).
The router's admin login credentials (often on a sticker on the device).
A computer to access router settings (wired connection is best).
Knowledge of all devices that should be allowed on the network.
Agreement from roommates on basic security changes.

Good to know

How to find your device's IP and MAC address.
The difference between WPA2 and WPA3 security.
What a VPN is and how to choose a reputable provider.
That a Guest Network isolates devices from the main network.
That you can create a separate network with a travel router.

Diagnose the issue in 2 minutes

Start by asking these questions to pinpoint your security needs:

Do you have admin access to the main router?
- Yes: Proceed with full router configuration steps.
- No: Focus on device-level security and creating a private subnet.
Is the current Wi-Fi password weak or known to many people?
- Yes: Changing it is the highest priority.
- No: Ensure encryption is still strong (WPA2/WPA3).
Are you concerned about roommates snooping on your traffic?
- Yes: A VPN is essential. Also check for HTTPS on websites.
- No: Basic network segmentation may be sufficient.
Do you have smart home/IoT devices?
- Yes: They belong on a separate Guest or IoT network.
- No: Your main device security is the focus.

Quick Checks:

Log into your router admin page. Can you see all connected devices?
Check your Wi-Fi security setting. Is it WPA2-Personal or better?
On your computer, is network discovery or file sharing turned on?

Step-by-step guide

Step 1 — Secure router access

The router's admin panel controls everything. Protect it first.

Connect a computer to the router via Ethernet cable for stability.
Open a browser and enter the router's IP address (e.g., 192.168.1.1).
Log in with the default credentials (on the router's sticker).
Immediately change the admin password to a strong, unique one.
If possible, change the admin username as well.

What you should see: A confirmation that settings were saved. Write down the new password in a secure place.

Step 2 — Fortify the main Wi-Fi network

Make the wireless network itself resilient to intrusion.

Navigate to the Wireless or Wi-Fi settings in the admin panel.
Change the network name (SSID) to something generic that doesn't identify the apartment.
Set the security mode to WPA2-Personal (AES) or, if available, WPA3-Personal.
Create a new, strong Wi-Fi password (at least 12 characters, mix of letters, numbers, symbols).
Disable WPS (Wi-Fi Protected Setup) as it can be a security vulnerability.

What you should see: All devices will be disconnected and will need to reconnect with the new password.

Step 3 — Set up a Guest Network

This isolates visitor and untrusted device traffic from your main devices.

In the router admin, find the Guest Network or Access Control section.
Enable the Guest Network. Give it a distinct name (e.g., Apartment-Guest).
Set a strong password for it, different from the main network.
Enable the "Client Isolation" or "AP Isolation" option if available. This prevents guest devices from seeing each other.
Place all roommate's personal devices, visitor phones, and smart home gadgets on this network.

What you should see: Two separate Wi-Fi networks broadcast from your router. Your personal devices stay on the main, more trusted one.

Step 4 — Harden your personal devices

Protect your laptop and phone from local network threats.

Windows: Go to Settings > Network & Internet > Ethernet/Wi-Fi. Turn OFF "Make this PC discoverable". Ensure Windows Firewall is ON.

macOS: Go to System Settings > Network. Click your connection > Details. Under "Sharing," ensure no sharing services are enabled. Use the built-in firewall.

Linux: Use ufw or your distro's firewall tool to block unsolicited incoming connections. Disable network discovery in your desktop environment settings.

On all devices, ensure your operating system firewall is enabled.
Disable file and printer sharing for the "Public" or "Guest" network profile.
Keep your device's software and antivirus updated.

Step 5 — Use a VPN for private browsing

Encrypts all internet traffic from your device, making it unreadable to anyone on the local network.

Subscribe to a reputable VPN service.
Install their app on your computer and smartphone.
Connect to a VPN server before doing sensitive activities (banking, work).
Consider setting up the VPN at the router level if your router supports it, to protect all devices automatically.

What you should see: Your public IP address changes when you visit a site like "whatismyip.com". Your router's connected devices list will show VPN traffic, but not its contents.

Step 6 — Audit and manage connected devices

Know what's on your network and remove unauthorized users.

In your router admin, find the "Attached Devices," "DHCP Client List," or similar section.
Review the list and identify every device. Rename known devices for clarity.
If you see an unknown device, you can often block it by MAC address.
For tighter control, enable MAC address filtering to only allow pre-approved devices, though this can be cumbersome to manage.

What you should see: A list of device names and MAC addresses you recognize. The list updates as devices connect and disconnect.

Step 7 — Create a private network (No router admin)

If you can't modify the main router, build your own secure segment.

Purchase a small travel router or a wireless router that supports "Client Mode."
Connect this router to the shared apartment Wi-Fi.
Configure your personal router to create its own, new Wi-Fi network with a unique name and strong password.
Connect all your personal devices to this new private network. Your traffic is now isolated behind your own router's firewall.

What you should see: Your own Wi-Fi network name appear. Your devices connect to it, not the main apartment network. The main network only sees your travel router.

Common fixes by symptom

Slow internet speed

Likely causes:

Too many devices on one network.
Roommate is torrenting or streaming 4K.
Wi-Fi interference from neighboring networks.

Safe fixes:

Use QoS (Quality of Service) in router to prioritize certain traffic.
Move bandwidth-heavy devices to the 5GHz band if available.
Use Ethernet for your primary computer.

Stop if: ISP data cap is reached or wiring is faulty.

Unknown device on network

Likely causes:

A roommate's new gadget.
A neighbor guessed the Wi-Fi password.
A smart device with a generic name.

Safe fixes:

Ask roommates first before blocking.
Change the Wi-Fi password and reconnect known devices.
Enable MAC address filtering after auditing.

Stop if: You suspect malicious intent; document and consider a full network reset.

Can't access network shares or printers

Likely causes:

Guest network isolation is enabled.
Windows network discovery is turned off.
Firewall is blocking local traffic.

Safe fixes:

Move devices that need to communicate to the main network.
Temporarily enable network discovery for a "Private" network profile only.
Create specific firewall rules for sharing.

Stop if: You are unsure; better to err on the side of security and use USB drives.

VPN connection is slow or drops

Likely causes:

Router or ISP is blocking VPN ports.
Overloaded VPN server.
Incompatibility with the router's NAT/firewall.

Safe fixes:

Try a different VPN server or protocol (e.g., switch from OpenVPN to WireGuard).
Connect the VPN on your device, not the router.
Restart the router and your device.

Stop if: The ISP terms forbid VPNs; contact them for clarification.

Quick reference

Network Metric	What it Means for Security
Latency (Ping)	Delay in data travel. High latency with a VPN is normal. Sudden spikes could indicate interference or snooping tools.
Jitter	Variation in latency. High jitter on a stable network is unusual and may suggest congestion or malicious traffic.
Packet Loss	Data packets failing to arrive. Consistent loss could be due to a weak signal, faulty hardware, or an attack like a flood.
Throughput	Actual speed you get. A significant, unexplained drop may mean an unauthorized device is leaching bandwidth.
Signal Strength	Measured in dBm. Weak signal forces devices to transmit more, potentially exposing data. Aim for -50 dBm or better.

Setting	Safe Baseline for Shared Apartment
Wi-Fi Security	WPA2-Personal (AES) minimum. WPA3-Personal if all devices support it. Never use WEP or open networks.
Router Admin Password	A unique, strong password, different from the Wi-Fi password. Change from default.
DNS	Use a reputable, privacy-focused DNS like Cloudflare (1.1.1.1) or Google (8.8.8.8) at the router or device level.
Guest Network	Always ON with a separate password. Enable "Client Isolation" if available.
Firmware Updates	Check for router updates quarterly. Enable auto-update if it's a trusted feature.

Mind map summary

Secure Shared Apartment Network
├── Router Hardening
│   ├── Change admin credentials
│   ├── Update firmware
│   └── Disable WPS/UPnP if not needed
├── Wi-Fi Protection
│   ├── Strong WPA2/WPA3 password
│   ├── Unique SSID
│   └── Hide SSID (optional, minimal benefit)
├── Network Segmentation
│   ├── MAIN NETWORK (Trusted personal devices)
│   └── GUEST NETWORK (Roommates, IoT, visitors)
│       └── Enable Client Isolation
├── Device-Level Security
│   ├── Enable Firewall (OS)
│   ├── Disable File Sharing
│   └── Use a Reputable VPN
├── Monitoring
│   ├── Review connected devices list
│   └── Check for unknown MAC addresses
└── Plan B (No Router Access)
    └── Create Private Subnet
        ├── Use a travel router
        ├── Connect it to shared Wi-Fi
        └── Create your own secure Wi-Fi bubble

Troubleshooting checklist

Device Checks

Firewall enabled on your computer/phone?
Network sharing disabled for public networks?
VPN connected and working?
OS and antivirus are up to date?

Router Checks

Admin password changed from default?
Wi-Fi uses WPA2/WPA3 encryption?
Guest network is enabled and isolated?
Firmware is updated?
No unknown devices in attached list?

ISP & External

Have you agreed on fair usage with roommates?
Is the modem/router supplied by ISP secured?
Are you using a privacy-focused DNS?
Is your VPN allowed by the ISP?

When to escalate

Escalate or seek professional help if you encounter the following triggers:

Persistent unknown devices reappear immediately after being blocked or password changes.
Evidence of a successful intrusion like changed settings you didn't make, or malware that re-infects after cleaning.
Complete loss of router admin access (password no longer works) and you suspect it was malicious.
Legal threats or notices from your ISP for activity you didn't perform.
Physical tampering with networking equipment in common areas.

What to collect before escalating:

Screenshots of the router's connected devices list.
Logs from your router (if available) showing suspicious activity.
Dates/times of suspicious events.
Make and model of your router and modem.
A list of all authorized devices and their MAC addresses.

FAQ

Is it safe to use the landlord's provided Wi-Fi?

Treat it as a public network. Use a VPN on all your devices and ensure your computer's firewall is on. Do not do sensitive activities like online banking without encryption.

Can my roommate see what websites I visit?

Potentially, yes. If they have technical skills and the network isn't segmented, they could use packet sniffing tools. Using HTTPS on websites helps, but a VPN completely hides your browsing activity from them.

What's the difference between changing the Wi-Fi password and the router admin password?

The Wi-Fi password lets devices connect to the internet. The router admin password lets someone change the network's settings, including kicking devices off or viewing logs. Both are critical but protect different things.

Does a Guest Network use a separate data limit?

No. All devices on both the main and guest networks share the total internet bandwidth and any data cap from your ISP. The guest network only provides logical separation for security.

Will a VPN slow down my internet?

Often, yes, slightly. Encryption adds overhead, and the distance to the VPN server adds latency. A good VPN provider with nearby servers often minimizes this impact. The trade-off for privacy is usually worth it.

What if my roommate refuses to let me change the router password?

You cannot secure a network you don't control. Your best option is Plan B: create your own secure network using a travel router connected to the shared Wi-Fi. This gives you a private, firewalled segment.

Is MAC address filtering a good security measure?

It's a weak layer of security. A determined person can spoof a MAC address. It's better used as a simple whitelist for known devices in a low-risk environment, not as the sole security method.

How often should I check for connected devices?

Once a month is reasonable for a stable household. Check more frequently (weekly) after moving in, changing the password, or if you notice performance issues.

Sources and references

National Institute of Standards and Technology (NIST) guidelines for securing home routers.
Internet Engineering Task Force (IETF) documentation on WPA3 security protocol.
Cybersecurity & Infrastructure Security Agency (CISA) tips for home network security.
Electronic Frontier Foundation (EFF) surveillance self-defense guides.
IEEE standards for local area network (LAN) security.
Consumer Reports guides on router settings and privacy.
Academic papers on network traffic analysis and local network attacks.
Vendor documentation from major router manufacturers on admin features.

Menu

How to secure a network in a shared apartment

AI Assistant

Was this tool helpful?