0

I have WiFi router at my home, and I have set the WPA2-PSK security on it. I set it with a strong password. My neighbour has repeatedly hacked my wifi, and I don't know how he breaks my security measures to retrieve my password.

He uses my WiFi on an android phone. Are there any android apps that he could use to break my router security and steal my WiFi password? could anyone tell me how the heck he always hacks my password whenever I change it?

Could someone please provide advise to secure my home WiFi router?

22
  • 2
    Make sure you are using a 16+ character password, with all 4 character types, and WPA2 AES encryption. Also, change the admin password on your router to something more secure than the default. Does he have physical access to the router?
    – acejavelin
    Apr 17, 2018 at 18:23
  • 1
    There are lots of security options, depending on your router model, eg you can use MAC addresses to control WiFi access.
    – AFH
    Apr 17, 2018 at 18:26
  • 2
    Also, hiding your SSID + new password is a great way to protect your network against hackers.
    – LPChip
    Apr 17, 2018 at 18:30
  • 2
    @acejavelin, no one mentioned WPS, it doesn't matter the complexity of the WPA-2 PSK passwords if this is enabled. Wps-pixie can crack the WPS pin on vunerable routers in seconds, in turn giving you a 16-24 character password in mili-seconds. Disable WPS! It's totally broken. Apr 17, 2018 at 18:35
  • 3
    @TaimoorKhan - From your description, when a device leaves a wireless network, it usually sends a disassociate packet to the Access Point (AP) so that the AP clears out its station table. In some instances, some mobile devices leave without saying goodbye (meaning they don't send a disassociation packet to the AP). In this case, the AP will keep the device in its station table for the duration of the inactivity timer and then the AP will clear it's own table. Could it be that the Mac Address of your mobile device is actually not your neighbor, but instead residue of your own mobile device?
    – pythonian
    Apr 18, 2018 at 17:39

1 Answer 1

1

If you suspect your router is compromised

There are a couple things to consider,

If someone cracks your Pre-Shared key (WPA2-PSK), most peoples response when they suspect someone has gained access to their network is to immediately log into the web gui or telnet in to see whats going on.

This isn't a good response, as telnet sends credentials in plain text across the network, as does HTTP. The Attacker may be able to sniff your administrative password, then create a remote backdoor through the internet. if you changed your password after you suspected foul play on your network, the attacker could easily log in through a cell phone data connection to your administrative gui and see what you changed your WPA2 password to.

The proper response.

  1. Unplug the power from the router.
  2. Remove the Antennas temporarily if you can.
    (if you cant, wrapping them in aluminum foil will dampen the signal significantly)
  3. Plug into the router VIA Ethernet.
  4. Factory Reset the router per your devices instructions.
  5. after device boot, immediately log into the router.
  6. Change the Administrative password.
    (16 digit Alpha-numerical with uppercase lowercase and special characters) avoid using words that are found in dictionary's.
  7. Disable WPS!
  8. Change the WPA2-PSK & use AES only.
    (no less than 16 digit Alpha-numerical with uppercase lowercase and special characters) Avoid using words that are found in dictionary's. Example: "L1nksTr1-F0rc3$@v3sZe|da~!"
  9. Disable telnet, use ssh if possible.
  10. Disable HTTP login, use HTTPS.
  11. Update the firmware on your router.
  12. Install antennas again, or remove aluminum foil.

That's pretty much it. The problem has become pretty serious. It used to be if you wanted to try and crack a password, you would have to setup your own distributed processing network using "pyrit" or similar hashing programs to test password hashes.

There are now websites available to crack simple to very complex passwords. you pay a couple fractions of a bitcoin, and they use massive networks of GPU Hashers to retrieve a password for you.

This has put hacking back in the realm of Kiddie Scripters, and people who would not have previously had this kind of processing power available to them. A simple google search should find plenty like this.

You have been warned!

Not the answer you're looking for? Browse other questions tagged .