Step 1: Prove where the slowdown is

Plug a laptop directly into the router with an Ethernet cable and run a speed test. Then run the same test over Wi-Fi standing next to the router, and again in the room where things feel slow.

If the wired test is slow, call your provider. If only the problem room is slow, keep reading — it's a Wi-Fi coverage issue.

Step 2: Get the router out of the closet

Routers broadcast in roughly a sphere. Every wall, floor, mirror, fish tank and metal cabinet takes a bite out of that signal. The worst places for a router are exactly where they usually end up: inside a media cabinet, behind the TV, or in a corner of the basement.

• Put it central and high — a shelf in the middle of the home beats a floor in the corner.
• Keep it in the open, not in a cabinet.
• Keep it away from microwaves, cordless phone bases and large metal objects.

Step 3: Check for channel congestion

In apartments and townhomes, your neighbours' networks compete for the same airtime. On the 2.4 GHz band only channels 1, 6 and 11 don't overlap, so pick whichever is least crowded. Most phones have free Wi-Fi analyzer apps that show this at a glance.

Better still, connect devices that support it to 5 GHz (or 6 GHz on Wi-Fi 6E/7 gear). It's faster and less crowded, but it doesn't travel through walls as well — which is why placement matters even more.

Step 4: Update the firmware

Router firmware updates fix bugs, improve performance and close security holes. Log in to the router's admin page or app and check for updates. If the router hasn't had an update in years, that's a sign it's time to replace it.

Step 5: Decide whether you actually need mesh

Only after the steps above should you consider more hardware:

• Still dead zones in a large or multi-storey home? A mesh system or wired access points will help.
• Can you run cable? Wired access points (or mesh nodes with a wired backhaul) beat wireless mesh every time.
• Small apartment? You probably don't need mesh — a well-placed modern router is enough.

The short version

1. Test wired vs. wireless to find where the problem actually is.
2. Move the router somewhere central, high and open.
3. Use 5 GHz where you can and pick an uncrowded channel.
4. Update the firmware.
5. Buy hardware last, not first.

Most people agree it's a good idea and then never finish setting it up. The trick is to do it in the right order, so the most important accounts are protected first.

1. Your primary email

Your email is the master key. Almost every other account lets you reset its password by email, so whoever controls your inbox can take over everything else. Protect it first.

2. Your password manager

If you use one (and you should), it holds every other password. Turn on MFA and store its recovery codes somewhere safe and offline.

3. Banking and payments

Banks, credit cards, PayPal, and any app that can move money.

4. Your phone account

Your mobile carrier account is a target for "SIM swap" attacks, where someone convinces the carrier to move your number to their SIM card. Add a PIN or passcode to the account — most carriers support this.

5. Everything else

Social media, cloud storage, shopping sites, and work tools. Do a few a day until the list is done.

Which kind of MFA should you use?

The ten-minute plan

Pick the top three accounts on this list and turn on MFA tonight. That alone puts you ahead of most people — and most attackers move on to easier targets.

The rule

• 3 copies of your data — the original plus two backups.
• 2 different kinds of storage — for example your computer's drive and an external drive or NAS.
• 1 copy off-site — in the cloud or at another location, safe from fire, theft and floods.

A setup that works for most homes and small offices

1. Local backup: an external drive or NAS running automatic backups (Time Machine on a Mac, File History or a backup app on Windows).
2. Off-site backup: a cloud backup service that runs in the background.
3. Phones: turn on your phone's cloud backup and photo sync.

Protect backups from ransomware

Ransomware tries to encrypt or delete any backup it can reach. Defend against it by:

• Keeping at least one copy that isn't permanently connected — or uses versioning, so you can roll back to before the infection.
• Using a separate account for the backup system, with its own password and MFA.

Test your restores

Once a quarter, pick a random file and a random folder and restore them to a different location. Check that they open. Once a year, practise a full recovery of one machine. It's far better to find a broken backup on a quiet afternoon than during an emergency.

The fix is network segmentation: put those devices on their own network so they can reach the internet but not your computers.

Option 1: Use your router's guest network (easy)

Most routers have a guest network that's isolated from the main one.

1. Turn on the guest network and give it its own name and strong password.
2. Make sure "allow guests to access the local network" is off.
3. Reconnect your smart devices to the guest network.

This takes about 15 minutes and covers most homes.

Option 2: VLANs (more control)

If you have a business-grade or prosumer router and managed switch, you can create VLANs — separate virtual networks running over the same hardware. A common layout:

Firewall rules then decide what can talk to what. For example, allow your phone to reach the cameras' viewing app, but block the cameras from reaching anything on the trusted network.

A few gotchas

• Casting and AirPlay rely on devices discovering each other. If casting to the TV stops working after you split networks, your router may need mDNS or multicast forwarding enabled between the networks.
• Cameras that record to a local recorder need that recorder on the same network, or a firewall rule allowing it.
• Label everything. Write down which network each device is on — future you will be grateful.

Where to start

If you've never done this before, start with the guest network tonight. You can always graduate to VLANs later.