Understanding Home Router Configuration Habits & Attitudes

Home routers serve as a gateway to the Internet and configuration issues such as weak passwords can simply be introduced by users that configured them, potentially leading to severe consequences. The most critical phase in the lifecycle of a home router is perhaps the initial setup intended for users to complete. Yet, the mindset and behavior of users during this process remain under-explored. In a comprehensive online survey of 392 participants across several regions, we find that router settings and user behavior vary significantly between China and English-speaking countries, influenced by factors like IT background, age, gender, and education. A majority of participants go through the configuration of their own routers, but many also admit keeping the default settings and are not actively maintaining their router firmware up-to-date, leaving security vulnerabilities unfixed. We estimate that 91% of participant routers run with default settings, which should push router manufacturers to focus on safe defaults. Moreover, while default passwords are often changed, some participants report coping strategies. With noteworthy differences that we have observed across user backgrounds, we believe that our takeaways can shed some light on advancing the area of home network security.