Today’s home network may include a wide range of wireless devices, from computers and phones to IP Cameras, smart TVs, and connected appliances. The router usually is the center of the home network. It’s a layer (even the only layer) that stays between your devices and the internet. A secure router will help protect your devices – and your information – from compromise. Therefore, the data privacy and security of the router is an extremely important aspect to determine if a router is good or bad. 

Consumer Reports has been publishing router ratings for years, but we've now made the tests tougher, screening for approximately 60 different indicators of good security and privacy practices, along with about 100 data points used to evaluate speed, ease of use, and other characteristics.

Consumer Reports Article:

Many Wireless Routers Lack Basic Security Protections, Consumer Reports' Testing Finds. This article highlights new testing which shows the important differences in how routers from popular brands handle digital security. It covers how CR tests routers on a long list of characteristics. For instance, we check whether a router protects against known security vulnerabilities and whether certain questionable networking protocols are turned off by default. We examine the routers’ privacy policies to see whether manufacturers explain how they handle consumer data. Of course, we also measure how quickly routers transmit data over a variety of distances. After all, a safe and secure router won’t do you much good if it’s too slow to reliably stream Netflix. 

Key security findings includes topics on: 

• Protection against multiple failed login attempts
• Weaknesses in passwords
• Networking protocols turned on by default 
• How routers handled firmware updates, which are vital for the home’s network security
• Router firmware updates

Key privacy findings include topics on: 

• Privacy policies and their mentions of what manufacturers might collect from users such as network speeds, the name of an internet service provider, and how much data people are transmitting to the web.
• Disabling features not inuse (e.g. Universal Plug and Play)