How do you set up Wi-Fi for a small business, including guest Wi-Fi?
Change the router's default username and password, make sure WPA2 or WPA3 encryption is turned on, keep the business network for business-owned devices with a strong password for staff, and give guests and personal devices a separate network. Those are the wireless basics on the FTC's small business cybersecurity page. Keep the internet account and router login in the business's name, and check every few months what is connected.
The FTC's wireless basics
The FTC's cybersecurity page for small businesses has a section headed "Protect your wireless network". Its steps include:
- Secure your router: change the default username and password and turn off remote management. Elsewhere on the page it also advises changing the router's default name.
- Use encryption: make sure the router offers WPA2 or WPA3 and that it is turned on.
- Limit the devices that can connect: keep your primary business network to business-owned, operated or managed devices.
- Password-protect the network: create a strong password for staff to use on business devices.
Guest Wi-Fi
For guests, employee personal devices or the public, the FTC says you can follow the prompts in your network's admin portal to set up a separate "public" network. Elsewhere on the page it says guest and customer Wi-Fi should be separate from, and not connected to, your business network.
As general advice, the reason is simple: a visitor's phone or laptop is a device you cannot vouch for, and it should not sit on the same network as your computers, printer and card reader.
A setup order
This order is general advice. If your internet provider owns the router, ask what you may change.
- Open the router's admin page, using the provider's instructions or the label on the router.
- Change the default login first, then the router's default name.
- Turn on WPA2 or WPA3.
- Set up the staff network with its own strong password.
- Set up the guest network with a different password, and give that one to visitors.
- Test it: join the guest network from a phone and try to reach a business computer or printer. If you can, ask your provider how to separate them.
- Write down the settings and where the logins are kept.
Who holds the accounts
As general advice, the internet account should be in the business's name, and the owner should hold the router login, not the installer or one employee. A password manager is a good place to keep it; the related answer on password managers covers who should hold the master login. When someone who knew the staff Wi-Fi password leaves, change it; the related answer on removing an employee's access has the same-day list.
Check what is connected
Many routers, or the provider's app, list the devices on each network. Every few months, match each one to a device you know. If you see one you do not recognize, change the Wi-Fi password and the router login, and ask your provider for help. The router also needs updates; the related answer on keeping computers and phones updated includes it in the monthly check.
Sources
Related answers
- Does a small business need a password manager?
- How do you remove an employee's access to accounts when they leave?
- How do you keep business computers and phones updated, and when should you replace them?
Ongoing technical support
The site goes down, email stops arriving, a domain is about to lapse, nobody knows the password. Many owners do not have a technical person. We are that person, for everything we build and the things you already have.