Your wi-fi network is at risk

Rachel Wait
by Lovemoney Staff Rachel Wait on 20 October 2010  |  Comments 23 comments

Hackers can access your home wi-fi network in seconds. Here's how to protect your network...

Your wi-fi network is at risk

Recent research from life assistance company, CPP, has revealed that nearly half of home wi-fi networks can be hacked in less than five seconds.

In an ‘ethical hacking’ experiment conducted across six UK cities, almost 40,000 networks were revealed as high-risk, opening up the personal data of thousands of people. Nearly a quarter of private wireless networks were found to have no password attached, making them easily accessible to criminals.

This is pretty scary stuff. After all, no one likes the thought of others being able to access your personal information. Not only can this help hackers to hide criminal activities, such as selling on stolen goods, they can also view any private transactions you might have carried out. This will give them access to passwords and user names, which, in turn, gives hackers access to emails, social networks, and online banking sites, allowing the criminal to commit identity fraud.

What’s more, many of us are now using publicly available networks – such as those in coffee shops, restaurants and airports – and are often unwittingly logging onto a fake wi-fi network. In fact, the CPP study showed that more than 200 people logged onto a fake wi-fi network without realising it over the course of an hour. Meanwhile, hackers were able to ‘harvest’ usernames and passwords from unsuspecting people at a rate of more than 350 an hour. Eek!

So just how can you protect yourself whether you’re using your network at home or away? Here are 11 tips for using your wireless network safely.

1. Use encryption on your wireless access points (WAP)

The first and most important way to protect your wireless network is by encryption. This scrambles data on your wireless network so that only computers with the encryption key can read your communications.

There are two encryption Wi-Fi standards – Wireless Equivalent Protection (WEP) and Wi-Fi Protected Access (WPA). However, the problem with WEP is that it’s easily cracked. WPA is much more secure.

If your wireless router and all of your wireless computers and devices support it, WPA2 encryption should be your first choice as it provides the highest level of encryption available.

Use a strong password for your encryption key – for example, a combination of letters and numbers of 14 characters or more.

2. Install a firewall

A firewall helps to protect your PC by preventing unauthorised users from accessing your computer through the internet or a network. It acts as a barrier that either blocks information coming through or lets it through. So makes sure you have a firewall installed and that it’s switched on.

You can view a list of popular firewalls here.

John Fitzsimons looks at some of the worst computer rip offs, and how to avoid them

3. Be obscure!

All wireless routers should have obscure identities. Don’t make it obvious who owns the connection or put in any real information that will reveal your location or business name. Be vague and use something like ‘wireless’ or ‘router 1’ that doesn’t give anything away.

4. Position access points correctly

Access points transfer data between your devices, so try to position them away from the outside wall of your building to reduce leakage of radio signals. This will minimise the chance of interception from outside.

5. Monitor your employees!

If you run a business, make sure your employees don’t add access points without your authorisation.

6. Implement a VPN

If you’re using your laptop at a public hotspot, the best way to protect a public wireless link is to use a Virtual Private Network (VPN). This encrypts all of the data that passes over the ‘insecure’ network so it can’t be accessed by any snoopers!

7. Turn off file sharing

You can use file sharing on your home network, but if you’re using public hotspots, turn it off to prevent anyone close by being able to access files from your system.

8. Check the public hotspot is legitimate

Some hackers have been known to set up a hotspot themselves at a public location and then steal your personal details when you connect. So make sure you check with someone before you connect at a hotspot. For example, if you're at a cafe, ask the waiter for the name of the hotspot to ensure you’re using the right one.

Don’t be scammed! Emma Roberts reveals some dangerous scams that are circulating the web

9. Be careful about information

When using a public hotspot, avoid typing in any sensitive information such as username, passwords and credit card numbers.

If you really do need to enter financial details, check that there’s a locked padlock symbol in the bottom right hand corner of the browser window and check the web address starts with ‘https’ rather than ‘http’ as the ‘s’ signifies it’s secure.

10. Check your bank statements regularly

Always keep a close eye on your bank statements so that you’ll immediately be able to spot any suspicious transactions.

You can easily do this with the lovemoney.com online banking tool as this amalgamates information from all your different providers, allowing you to see all of your different statements at a single glance, with a single log-in. (You can also categorise all your transactions, so you'll know immediately if some of your spending seems out of place.)

11. Turn off your wireless network when you’re not using it

Finally, if you’re not browsing on the internet or checking your emails, but you’re still using your computer/laptop in a public hotspot, disable your wireless connection or remove your wireless card.

Tell us your tips

If you have any tips of your own on how to protect yourself from hackers and fraudsters, please share them using the comments box below.

More: Eight ways to spot a phishing scam | New computer scam that preys on your fears

Enjoyed this? Show it some love

Twitter
General

Comments (23)

  • alol
    Love rating 3
    alol said

    Advice Number 0. Don't use wireless, use wired access, its still faster and very secure in comparisson to wireless. Just plug in your network cable into your router. Sorted !

    Report on 20 October 2010  |  Love thisLove  1 love
  • Mike10613
    Love rating 599
    Mike10613 said

    Most routers have a firewall built in and it's better than a software firewall. They will also generate a password from a pass-phrase and this is a good idea and virtually uncrackable. Use wireless as well as many older laptops can't access that. Anyone determined enough will get past all these security methods, but passwording your router, using passphrase and using encryption keeps you fairly safe unless you use hotspots or live next door to a hacker. 

    Report on 20 October 2010  |  Love thisLove  0 loves
  • McLeodC
    Love rating 13
    McLeodC said

    I'd agree with Alol above - who needs wireless access in their own home or office? Use wires instead - cable is cheap and far more secure.

    The article omits to mention one of the scariest threats of all - hackers could use your ID to access illegal websites! So in addition to the risk of having your bank accounts emptied, you might only find out you've been hacked when the police raid your house and accuse you of terrorism or child porn offences!

    Report on 20 October 2010  |  Love thisLove  0 loves
  • fugazi
    Love rating 0
    fugazi said

    Lots of information passed over a wi-fi network will be encrypted using browser to server encryption - such as SSL - so the picture isn't quite as bleak as made out in the article

    Report on 20 October 2010  |  Love thisLove  0 loves
  • sjreynolds143
    Love rating 1
    sjreynolds143 said

    Two more options for home networks for the slightly more technically aware:

    1. Don't broadcast. Most routers allow you to turn off the sending out of the wireless network name, so you have to know what it is called before you can connect to it. That stops the casual man in the street from finding it and hooking onto it.

    2. Use MAC filtering. Every wireless device has a unique number, and most routers will allow you to specify which adapters are allowed to connect to your network. The only downside is that you have to find and allow all of the devices that you want to allow - and that includes all your iphones, ipods, wiis, etc.

    Report on 20 October 2010  |  Love thisLove  1 love
  • nosbort
    Love rating 125
    nosbort said

    Turn SSID broadcast off, if you know it you don't need it and if it is not broadcast a hacker can't even see the network to start hacking.

    Report on 20 October 2010  |  Love thisLove  0 loves
  • thanet04
    Love rating 13
    thanet04 said

    not quite right on the O2 offer. the connection charge only applies if you sign up for the 30 day rolling contract & your price is wrong for existing customers £8 for 8 months (4 free) = £64 = £5.33 a month (equivalent)

    Report on 20 October 2010  |  Love thisLove  0 loves
  • Donna Ferguson
    Love rating 130
    Donna Ferguson said

    @thanet04 - thanks! Well spotted.

    Report on 20 October 2010  |  Love thisLove  0 loves
  • zippy09
    Love rating 2
    zippy09 said

    Can recommend the MAC filtering and the "Don't Broadcast" as mentioned by sjreynolds143.

    I really like the MAC filtering as even when I give visitors the SSID and password they still can't access, only if they know how to provide the devices MAC address do they get to connect to my network :-)

    Just want to point out that it is the account holder that is responsible for securing the network, they can also be held to account for its usage, i.e. file sharing sites etc, saying you didn't know I wasn't allowed to do that is not acceptable these days.

    One small point about turning off you kit, whilst I would recommend this as well some ISP's advise you keep the kit on for 2 - 3 weeks when you take out the service. This enables them to check speeds and performance of your connection, afterwards you can of course turn on/off as required.

    Report on 20 October 2010  |  Love thisLove  0 loves
  • wally144
    Love rating 26
    wally144 said

    As well as having using a 26-character key, and both hardware and software firewalls, I also use a keystroke scrambler (http://www.qfxsoftware.com/) This scrambles every keystroke, so that hackers can only see gibberish when you type in usernames, passwords etc.

    Best of all, it's free!

    Report on 20 October 2010  |  Love thisLove  0 loves
  • MK22
    Love rating 142
    MK22 said

    http://www.grc.com/intro.htm has some interesting software for testing how vunerable your PC is. Interestingly my IP address usually translates to a location somewhere in Lincolnshire which, whilst not being a milllion miles from where I live, is far enough away to prevent anyonetracking me down my that route!

    Report on 20 October 2010  |  Love thisLove  0 loves
  • Chorlton1
    Love rating 61
    Chorlton1 said

    Another thing that may be worth checking if you are broadcasting the manufacturers standard router SSID and using the security WEP code printed on the router label. This information may be the same for every other router the manufacturer supplies so it would be a simple matter for a hacker to find out what the SSID and WEP code is likely to be to access your network. It would be sensible to change the details from the manufacturers default settings and turn off broadcasting your SSID many broadband providers do not tell you how to do this because they want to make it look simple to set up.

    Report on 20 October 2010  |  Love thisLove  0 loves
  • phil-emup
    Love rating 1
    phil-emup said

    The advice to set up a VPN is slightly misleading. It is not for the novice to try, and can be costly for the personal user. While free VPN services are available, there are a number of rogue sites which regularly come up in searches, which are likely to nick your data without providing any benefit to you.

    Be very cautious unless you know what you are doing. We clearly have a number of technically-savvy posters here - perhaps less well-informed readers would appreciate advice at to which services to use?

    Also regarding encryption - not all laptops and portable devices will be able to use all encryption methods. You may have to use less secure methods for the sake of your older toys.

    Finally, why was a Life Assurance company researching wi-fi security? 

    Report on 20 October 2010  |  Love thisLove  0 loves
  • toocats
    Love rating 0
    toocats said

    MAC filtering is only effective if you're online. Any hacker can note the "authorised" MAC address and wait until you aren't using it, or if their signal is stronger, can knock you off the network. SSID broadcast masking is ineffective. WEP is completely insecure. WPA-PSK2 is theoretically crackable, but practically not. SSL encryption IS effective (i.e. when you have a padlock in the bottom corner of your browser), but only when you are connected to a reliable wireless router. The tools to break wireless (WEP) networks are widely and freely available online.

    I only use wireless when either:

    I can be sure of the router I'm connected to (never!).

    I am not sending any personal data of any import; googling "stuff", train timetables etc.

    A good alternative to use at home is the type of electrical plugs which also carry network signal - you can plug your router direct into one, and a computer into another anywhere on your mains ring. Only susceptible to professional crackers ...

    My advice would be to use WPA at home for general browsing, only wired connections (either direct to the router, or via mains extenders) for confidential data. Or of course if you're using your internet connection for dodgy filesharing, drop your "security" to WEP, and potentially anybody coul be using it from your ISP's point of view ;) Interesting to see one of those come up in court!

    Toocats. CEH (Certified Ethical Hacker)

    Report on 20 October 2010  |  Love thisLove  0 loves
  • Iamcoldsteve
    Love rating 311
    Iamcoldsteve said

    I choose to not broadcast the SSID too. I have named the network carefully too. I would doubt someone could guess it quickly.

    The wireless is not used for sensitive info, in fact most of the time I use a wired solution.

    You can protect yourself to a level, but not completely. Someone, somewhere will always find a way to crack anything, f they think the effort is worth the rewards.

    Report on 22 October 2010  |  Love thisLove  0 loves
  • houstonstewart
    Love rating 24
    houstonstewart said

    Hi

    I am sure that there is a lot of good advice here, article itself and comments about do this and add that etc but for the less well informed I think I get the principles of what you're saying, what is far from clear is HOW you do these things!

    For instance 'HOW do I rename my router' ?

    HOW do I turn off SSID ?

    Use encryption on your wireless access points - uh - HOW? etc etc

    So make sure you check with someone before you connect at a hotspot. For

    example, if you're at a cafe, ask the waiter for the name of the

    hotspot to ensure you’re using the right one. -if I was in a Cafe, I would assume the Hotspot was the hob or the oven and why do I want to plug in my laptop there?

    check with someone before you connect at a hotspot ... could he not be the very hacker I'm trying to avoid?

    Slightly facetious comments but I think you get the gist of the problem?

    If you really do need to enter financial details, check that there’s a

    locked padlock symbol in the bottom right hand corner of the browser

    window and check the web address starts with ‘https’ rather than ‘http’

    as the ‘s’ signifies it’s secure. Better, it tells me HOW, sadly for me not new, already knew that one.

    No doubt to the many out there, the thoughts are 'What a plum!' but we're probably the very 'plums' that should be heeding these warnings. The 'informed' don't need the warnings they are evidently (as the song goes) 'doing it for themselves'.

    I would particular ask the authors to use plainspeak and not assume we all understand to the same level. Lovemoney have no problem in painfully applying this principle to types of mortgages etc so should not be a problem in other areas like this one.

    Thanks

    Report on 23 October 2010  |  Love thisLove  0 loves
  • LastChip
    Love rating 92
    LastChip said

    Perfectly valid comments houstonstewart, but can I say, this site is a money based site and the article is more biased to the dangers inherent in wireless networks and the effect they could have regarding loosing money, identity or both.

    There is nothing wrong in not knowing how to do something, but if it's a technically related subject, it would perhaps be better to go to a site that specialises in that area, rather than expect to be able to read it here.

    Simply doing a search for how do I secure a wireless network will no doubt provide many hundreds of sites that will help you through the process. If you add in the make and model of your router, you may even find a dedicated site for that particular model. Most have screen shots and it becomes a fairly easy task to follow.

    The danger is (as the article tried to suggest), is to ignore the problem and not do anything about it.

    Report on 24 October 2010  |  Love thisLove  0 loves
  • killick_becki
    Love rating 58
    killick_becki said

    HoustonStewart - The problem is that all equipment is different. If you want to know precisely how to do these things with your own routers, my advice would be to ring up the company and ask them how to do the things you have read about here.

    Either that or google "what you want to do" + "make of router".

    Report on 24 October 2010  |  Love thisLove  0 loves
  • waning
    Love rating 2
    waning said

    I understand that this is a financial site and not here to advise on technical it matters, but there seems to be a few posters who know a bit. Perhaps one of them could tell us if using a dongle is in any way safer than using a wireless router?

    Report on 25 October 2010  |  Love thisLove  0 loves
  • nosbort
    Love rating 125
    nosbort said

    Yes dongles are better than Wifi because the data is encrypted and going into a 'private' network. One comment about the 'padlock' security symbol though, if I need a secure connection it takes about 20 minutes and fifty quid and I have a website with a padlock. It is not a guarantee.

    Report on 25 October 2010  |  Love thisLove  0 loves
  • waning
    Love rating 2
    waning said

    Thank you nosbort, much appreciated

    Report on 25 October 2010  |  Love thisLove  0 loves
  • eLJay
    Love rating 76
    eLJay said

    I get the feeling everyone should get their heads together and add some more depth to this article?

    I've been in computing for years and a couple of useful bits posted here (I use a 3g dongle and would only otherwise use a non broadcasting WPA2 wireless connection or a wired network). The major problems are trying to connect in public, just don't access your bank.

    Report on 25 October 2010  |  Love thisLove  0 loves
  • JessenSqueak
    Love rating 0
    JessenSqueak said

    I have briefly scanned these posts as I have other things to do.

    I also recommend keeping your software up to date. For your PC / Laptop use something like Secunia PSI or File Hippo to help you. I liken it to a dam. When you first build the PC it is secure until it needs patching. When you build a dam it does not leak until you fail to do maintenance. Leave it long enough and water will flow through the cracks. Patching is that maintenance and not just the operating system you ned to do all programs on the PC. I see email after email IE8, Firefox, Chrome, Adobe Reader, Flash Player, FoxIt and more critical vulnerabilities almost weekly with most announced in waht is refered to a Zero day vulnerability / attacks. Get your PC patched and learn use the advanced features of the patching program.

    Your Router if you go to the manufacturers website there are update files for the firmware this updates your router and it firewall and there are usually lessons on how to set it up - look at Netgears website.

    A wired connection is always more secure than wireless. Be aware WEP is weak, WPA2 TKIP has been cracked but is more secure than WEP, WPA2 AES is the most secure option at present.

    Report on 26 October 2010  |  Love thisLove  0 loves

Post a comment

Sign in or register to post a reply.

Our top deals

Credit card
company
Balance transfers rate and period Representative
APR
Apply
now

Barclaycard 27Mth Platinum Visa

0% for 27 months (3.5% fee) Representative 18.9% APR (variable) Apply
Representative example: assumed borrowing of £1,200, representative 18.9% APR (variable). Purchase rate 18.9% PA (variable). BT fee is reduced from 3.9% to 3.5% (T&Cs apply).

Barclaycard 25Mth Platinum Visa

0% for 25 months (2.4% fee) Representative 18.9% APR (variable) Apply
Representative example: assumed borrowing of £1,200, representative 18.9% APR (variable). Purchase rate 18.9% PA (variable). BT fee is reduced from 3.5% to 2.4% (T&Cs apply)

Virgin Money Credit Card MasterCard

0% for 26 months (2.99% fee) Representative 17.9% APR (variable) Apply
Representative example: assumed borrowing of £1,200, representative 17.9% APR (variable). Purchase rate 17.9% PA (variable).
W3C  Thank you for using CGWEBLIV2