The password on the box isn't meant to last forever
When your router got installed, it came with a default password — either printed on a sticker on the unit itself or set to something generic like "admin" for the router's own settings page. That's not a security feature. It's a starting point, meant to get you online on day one, and it's the same default across thousands of identical routers sold in this country. If you've never changed it, anyone who knows the pattern — and there are lists of these defaults floating around online — has a shot at getting into your network without needing to guess anything.
There's actually two passwords worth thinking about here, and people usually only know about one. There's the Wi-Fi password, the one you type into your phone to join the network. And then there's the router's admin password, the one that logs you into the router's own control panel where all the settings live. That second one is the more important of the two, and it's the one almost nobody ever touches. If someone gets into your router's admin panel, they don't just get your Wi-Fi — they can see every device connected, redirect your traffic, or quietly open up access for themselves later.
Changing both takes ten minutes. It's not complicated. It's just something that falls into the pile of things we assume are "already sorted" because the internet works fine without doing it.
The bigger risk isn't a stranger parked outside your house
The Hollywood version of Wi-Fi hacking is someone sitting outside with a laptop, cracking your password letter by letter. That does happen, but it's not the realistic threat for most homes and small businesses in South Africa. The more common problem is far less dramatic: it's your own devices.
Think about how many things in your house or office talk to the internet that aren't a phone or a laptop. Smart plugs, security cameras, a smart TV, a fibre-connected doorbell, maybe a coffee machine with an app. Each one of those is a small computer that connects to your network, and a lot of them are built cheaply, updated rarely, and secured barely. A weak point in a R400 smart plug can be a way into the rest of your network — including the laptop where you do your banking — if everything's sitting on the same flat network with no separation.
This is where a guest network earns its keep. Most routers let you create a separate Wi-Fi network — same physical box, different name and password — that keeps visitor devices and smart gadgets away from your main devices. It's one setting, and it means a compromised smart bulb can't see your work laptop even if it wanted to. Very few people ever turn it on, mostly because nobody ever explained why it matters.
What proper mesh Wi-Fi does differently here
This is one of the reasons we lean on Plume rather than a standard ISP router. It's not just about coverage — it actively watches what's happening on your network. It flags unusual device behaviour, keeps IoT devices in their own segment automatically, and pushes security patches to the mesh itself rather than leaving you to remember to update firmware you've never opened a settings page for. Most people don't want to become their own IT department, and with a managed setup, they don't have to.
That's really the difference between a router you set once and forget, and a network that's actually being looked after. Load shedding alone means routers reboot constantly in South African homes, which is exactly the kind of moment where settings quietly reset or firmware falls behind if nobody's watching.
Three things worth doing this week
You don't need to overhaul anything to close most of the gap. Change your router's admin password if you've never touched it — check the label on the unit for how to log in. Turn on a guest network and put your smart home devices on it instead of your main Wi-Fi. And if your router is more than four or five years old, check whether it's still receiving security updates from the manufacturer at all — a lot of older hardware simply stops getting patched, no matter how good your password is.
None of this requires you to become technical. It just requires ten minutes and knowing where to look, or someone who's already looking on your behalf.
Want us to take a look at your setup? Get in touch and we'll walk through it with you.