Security Note: Educational content: the examples describe risks, techniques, and defenses in the field of cybersecurity. Tools and procedures must be used exclusively on your own systems or with explicit authorization.

Have you ever wondered who, besides you, knows exactly which sites you visit or how many hours you spend connected to a specific service? We often focus all our attention on PC and smartphone security or the effectiveness of antivirus software, viewing the router as a simple 'box' that distributes Wi-Fi. In reality, the router is the true guardian of your home network and, for this reason, represents the most critical point for your privacy.

Every single data packet leaving your home passes through this hardware. This means the router has privileged visibility into everything happening on your network. But what exactly does it see, and who can access this information? In this article, we will analyze how a router can become a tracking tool and the technical solutions available to limit this monitoring.

What is Router Monitoring?

Router monitoring is not necessarily a malicious activity or a hacker attack. It is often a feature integrated into the device's firmware. To manage network traffic, the router must know where to send data. The key point is the DNS (Domain Name System), which acts like an internet phonebook: when you type an address like google.it, the router queries a DNS server to translate that name into a numerical IP address.

Since every DNS request passes through the router, the device can log the complete list of domains you visit. Although most sites today use the HTTPS protocol to encrypt page content (preventing the router from reading what you type into a form), the router still sees the 'name' of the site. It knows if you are on an e-commerce site, a news portal, or an electronics forum, and it can monitor how long you stay connected and how much data you download.

How Data Tracking Works

Tracking occurs at several levels. The first is local: many routers maintain internal logs accessible to the network administrator. The second level involves the provider (ISP): if you use your operator's default DNS, the ISP has a record of your browsing history, regardless of whether you use your browser's incognito mode.

The third level involves hardware manufacturers. Many routers, especially budget models or those provided by ISPs, include software that sends usage statistics and network data to the manufacturer's servers. This information may include firmware versions, connected device models, and traffic patterns, which are then aggregated for marketing or product analysis purposes.

Why Protect Your Router?

Protecting the router is not just about hiding your history, but about reducing the attack surface and limiting the collection of unnecessary data. In an era where data is a valuable resource, minimizing the information you leak is a matter of digital hygiene. Preventing a third-party company from knowing which services you use or when you are active reduces the risk of commercial profiling and increases resilience against potential firmware vulnerabilities.

Common Mistakes and Privacy Myths

One of the most frequent mistakes is thinking that 'incognito browsing' protects the user from the router. Incognito mode prevents the browser from saving history on the PC, but it has no effect on network traffic: the router continues to see every DNS request.

Another myth is that HTTPS makes browsing invisible. HTTPS encrypts the content (the 'what'), but not the endpoint (the 'where'). The router knows you are connected to a specific server, even if it cannot read the content of the conversation. Only the adoption of technologies such as DNS over HTTPS (DoH) can mitigate this.

In the Lab: How to Regain Control

Improving network privacy does not require expensive tools, but rather a few targeted configuration changes. Here is what you can concretely do to secure your connection.

1. Change Your DNS

The first step is to stop using the ISP's DNS. By accessing the administration panel, you can set more privacy-respecting public DNS, such as Cloudflare (1.1.1.1) or Quad9. This prevents the ISP from having immediate and easy control over every domain request you make.

2. Use a VPN

A Virtual Private Network (VPN) creates an encrypted tunnel between your device and a remote server. When active, all traffic is encrypted before it even reaches the router. In this scenario, the router only sees a stream of unreadable data directed toward a single IP address. It no longer knows which sites you visit or which apps you use; it only sees bandwidth consumption toward an encrypted tunnel.

3. Install Open Source Firmware (OpenWrt)

For those with more advanced skills, the solution is to replace the proprietary software. If the hardware supports it, installing OpenWrt allows you to use an open-source Linux distribution. This eliminates hidden telemetry functions and manufacturer backdoors, transforming a commercial router into a transparent network tool.

Warning: Installing third-party firmware carries risks. If performed incorrectly, it can render the device unusable (brick) and voids the manufacturer's warranty.

Hardening: Small Steps for Big Results

Beyond privacy, there is pure security. There are a few settings that are often overlooked but make a significant difference:

  • Administrative Credentials: Immediately change the router panel login password to a long, random string. Leaving the factory default is an open invitation for unauthorized access.
  • Remote Management: Disable the 'remote management' function. This prevents anyone on the internet from attempting to modify your router settings without being physically connected to your network.
  • Encryption Protocols: Ensure you are using WPA2 (AES) or WPA3. Obsolete protocols like WEP or TKIP are vulnerable and can be compromised in minutes.
  • UPnP (Universal Plug and Play): This feature, convenient for gaming, can be exploited to open ports without your consent, making it easier for malware to enter the network. Consider disabling it.

Frequently Asked Questions

If I change the DNS on my PC, can the router still see what I visit?

Yes, for the most part. If you change the DNS only on a single device, the requests still travel through the router. Although the ISP no longer receives the request via its own server, the router can still intercept unencrypted DNS traffic. For real protection, it is better to configure the DNS directly on the router or use protocols like DNS over HTTPS (DoH).

Does a VPN slow down the connection?

Yes, it is normal to experience a slight drop in speed due to encryption overhead and the physical distance from the VPN server. With modern fiber, the slowdown is often imperceptible during browsing or streaming, but it may increase latency (ping) in online gaming.

Is an ISP-provided router less secure than a purchased one?

It is not necessarily 'dangerous,' but it is less transparent. ISP routers are designed for remote management by the provider, meaning they have open access for technical support. Additionally, they rarely allow you to change DNS or install alternative firmware.

Can I tell if my router is sending data to the manufacturer?

Without advanced analysis tools, it is difficult. An experienced user can use software like Wireshark to monitor outgoing packets to unrecognized IP addresses. If you notice constant traffic to manufacturer servers even without updates in progress, telemetry is likely active.

Conclusion

The router is not a simple accessory, but the central element of our digital security. From managing DNS requests to sending telemetry, this device has the potential to map much of our online life. However, regaining control is possible: changing DNS, using a VPN, and applying hardening rules are concrete steps to reduce your digital footprint.

Privacy is not a switch you flip on or off, but a constant process of risk reduction. Starting by checking your hardware settings is the first step toward more conscious browsing. I invite you to explore other technical tips on the blog to learn more about electronics and cybersecurity.

Originally published on simonebusatto.it. This article was written with AI assistance, based on my own video content.