Showing posts with label security. Show all posts

The FBI wants you to factory reset your router. Here's how to do it

The VPNFilter malware problem is getting worse. Here's how to safeguard your home network, and a list of the affected models.

d-link-dir-867-6 — The list of routers affected by VPNFilter has grown considerably.
Chris Monroe/CNET

Good news, everyone! Remember that FBI reboot-your-router warning in response to Russian malware VPNFilter? Turns out it's worse than originally thought, and a lot more people are going to need to do a lot more than just reboot their routers.

According to a new report from security firm Cisco Talos, the VPNFilter malware is "targeting more makes and models of devices than initially thought, and has additional capabilities, including the ability to deliver exploits to endpoints."

That means if you own one of the affected routers -- and that list has expanded to include models from Asus, D-Link, Huawei, Ubiquiti, Upvel and ZTE -- it's strongly recommended that you perform two key steps: upgrade the firmware and then factory-reset the router.

Ugh. This is going to suck. But we can get through it.

Step 1: Upgrade your router's firmware

In some ways this is the easier step, as it can often be done within the confines of your router's dashboard. Firmware is just the core software that operates the router, and updating it usually involves little more than a download and a few automated router restarts.

Of course, if you've never so much as looked at that dashboard, well, it may be time for a trip to the owner's manual -- or the router manufacturer's online help pages.

Because the firmware-update process varies from one make and model to another, here's a quick, generalized overview -- one that's based on upgrading an Asus WRT router.

Step i: Visit the Asus support site and download the most current firmware for your specific model.

Step ii: Open a browser window, type in 192.168.1.1 and press Enter. This will take you to the router's dashboard page -- but you may need a username and password to gain access. If you never changed the defaults, you should be able to find them in the instruction manual. (Often, the defaults are "admin" and "password," respectively.)

asus-firmware-upgrade-dialog — Updating your router's firmware may involve a screen like this.
Asus

Step iii: Click the Administration button (again, this is just for Asus routers; on other models it might be Configuration or Firmware or the like), then the Firmware Upgrade tab.

Step iv: Click Choose File and locate the firmware file you downloaded in Step 1. Then click Upload to perform the update.

This may take a few minutes, and your router will likely restart at least once during the process. Needless to say, you'll lose all internet connectivity while this is happening.

And, again, this is just one example of the firmware-update process. It's a common one, but the steps may be different for your model.

Watch this: Russian hackers targeting your router: Here's what to...

1:23

Step 2: Factory-reset your router

Now for the big hassle. You probably know that you can reboot or reset your router by pulling the power cord for a few seconds and then plugging it back in. But a factory reset is a little different. True to its name, it restores all the settings to their original, factory state, so once it's done, you get to have the fun of setting up your home network again.

Before you get started, make sure to write down the name and password of each Wi-Fi network currently configured on your router. You might have just one; I've seen houses that had five. You'll want to note these so you can recreate them verbatim after the factory reset.

Why is that important? Because if your current "SmithLAN" network becomes "Smith LAN" after the reset (just because you forgot and added a space this time), now you'll have to manually reconnect every device in your house to that "new" network. Hassle city.

The actual reset should be pretty easy. On some Linksys routers, for example, there's a small reset button on the unit itself. You press and hold it for 10 seconds and that's it. Alternately, you may be able to sign into the dashboard and execute the reset from there. In the aforementioned Asus example, in Step 3, you'd click the Restore/Save/Upload tab and then the Restore button.

Again, consult your router manual (or router's website) for the correct factory-reset steps for your model.

Here are links to the support directories for some of the affected routers (the complete list is in the next section):

When it's done, you'll have to venture into the dashboard and recreate your networks. Thankfully, with your firmware upgraded and any trace of VPNFilter eradicated, you should be safeguarded from future attacks -- of this particular malware, anyway.

Which routers are affected?

Courtesy of Cisco Talos, here's a current list of the models that can be affected by VPNFilter. Those identified as new weren't included in the original report.

Asus

RT-AC66U (new)
RT-N10 (new)
RT-N10E (new)
RT-N10U (new)
RT-N56U (new)
RT-N66U (new)

D-Link

DES-1210-08P (new)
DIR-300 (new)
DIR-300A (new)
DSR-250N (new)
DSR-500N (new)
DSR-1000 (new)
DSR-1000N (new)

Huawei

HG8245 (new)

Linksys

E1200
E2500
E3000 (new)
E3200 (new)
E4200 (new)
RV082 (new)
WRVS4400N

Mikrotik

CCR1009 (new)
CCR1016
CCR1036
CCR1072
CRS109 (new)
CRS112 (new)
CRS125 (new)
RB411 (new)
RB450 (new)
RB750 (new)
RB911 (new)
RB921 (new)
RB941 (new)
RB951 (new)
RB952 (new)
RB960 (new)
RB962 (new)
RB1100 (new)
RB1200 (new)
RB2011 (new)
RB3011 (new)
RB Groove (new)
RB Omnitik (new)
STX5 (new)

Netgear

DG834 (new)
DGN1000 (new)
DGN2200
DGN3500 (new)
FVS318N (new)
MBRN3000 (new)
R6400
R7000
R8000
WNR1000
WNR2000
WNR2200 (new)
WNR4000 (new)
WNDR3700 (new)
WNDR4000 (new)
WNDR4300 (new)
WNDR4300-TN (new)
UTM50 (new)

Qnap

TS251
TS439 Pro
Other QNAP NAS devices running QTS software

TP-Link

R600VPN
TL-WR741ND (new)
TL-WR841N (new)

Ubiquiti

NSM2 (new)

PBE M5 (new)
Upvel
- Unknown models (new)
ZTE

ZXHN H108N (new)

via cnet

7 Tips on How to Use a VPN Like a Boss

Everyone should be using a VPN these days. It doesn’t matter whether you’re concerned about the longevity of the technology or don’t understand how to use a VPN (here’s the answer to that).

Basically, you NEED a VPN as a basic privacy precaution for any online activity on wireless networks. MakeUseOf provides a list of top VPN providers that you should check out if you’re considering signing up to a VPN service.

Once you’ve subscribed, and you’re set up with your virtual private network, you probably think “that’s it, all sorted.” But you’d be wrong. You’ve only just made your first baby steps into the world of VPNs.

Here are seven ways you can enhance your use of a VPN, and use it like a boss.

1. Set Up Your VPN on a Router

One of the most important things you can do with a VPN account is to set it up on your home router. The reason for this is simple: once set up, no other devices on your network need VPN software installing (unless you use public Wi-Fi).

However, there is a problem: not all routers support VPN accounts. As such, you may need to purchase a new router specifically for this task. While this may seem an unnecessary expense, the privacy benefits are considerable. Specific VPN routers are now available online, such as at Amazon.

If this isn’t practical, there are other solutions. For instance, it’s possible to set up a computer as a dedicated VPN between your modem and your router (or, if they’re the same device, between your router and your devices). Probably the best solution for this is a Raspberry Pi — if you don’t already own one, however, buying a VPN router isn’t much more expensive.

There’s also DD-WRT. This is an open source firmware for routers that can be installed on several popular models. If you own a DD-WRT compatible device, installing this will enable support for your VPN subscription via the OpenVPN protocol.

2. Avoid Free VPNs

Free VPNs are great, right? Well, actually, no, they’re not. Free VPNs may seem like an excellent alternative to paid solutions, but in truth, you’re still paying.

While there are some good free VPNs for all platforms (including macOS and mobile devices), overall, they should be avoided.

In every single way, a paid VPN is better than a free one. Functionally, a free VPN does not cut italongside a subscription. They’re slower, less versatile (for instance, free VPNs don’t support torrenting), and more often than not display adverts based on the information you’ve used to sign up.

Avoid!

3. Pay Annually for Better Value

You can subscribe to a decent VPN service with almost any budget. Almost all services let you pay monthly, but if you really want to keep your costs down, pay annually!

This may need a bit of fiddling around with your account settings, but if annual payment is available, you’ll find your VPN offers at least a 10-percent saving. It’s definitely worth paying that fee in advance to make the saving.

While we’re on the matter of paying for your VPN, several options are usually available. For instance, major credit cards and debit cards can all be used to subscribe. Similarly, you might pay by PayPal, or one of its many alternatives.

ome VPNs, meanwhile, accept Bitcoin as a payment option. If you own a sizable amount of Bitcoin, this represents a minor fraction of the cryptocurrency’s value.

4. Use the Mobile VPN Client

Sadly, not every VPN service offers a mobile client. But if you’re subscribing to one that does, you should take advantage of it. It’s all very well extolling the dangers of using public Wi-Fi without a VPN, but people tend to view this purely as a laptop problem.

Laptop computer displaying a lock — Image Credit: Mike MacKenzie via Flickr

The issue here is that many shopping malls are mobile internet blackspots either intentionally, or by design. Your only option, therefore, is to access the public Wi-Fi on offer in these places. Stores are increasingly offering free Wi-Fi to potential customers in order to learn more about them. Remember that advert on your phone when you signed into public Wi-Fi in your favorite fashion store?

As you should know by now, public Wi-Fi presents many security issues, as it can be easily hacked. Man-in-the-Middle attacks are particularly common. Simply activating your VPN’s mobile client and connecting to Wi-Fi will protect you from these threats.

5. Don’t Let VPN Encryption Drain Your Laptop Battery

You probably know that a virtual private network uses encryption. And that the encrypted data travels from your device (or router) to the VPN server, then onto the destination website unencrypted (unless you’re using a HTTPS service).

Encryption can be heavy going on your computer. It can certainly impact the performance of your laptop battery, and if you run a VPN client on your mobile device, the battery of your smartphone or tablet. You don’t want your device battery to empty faster than usual, do you?

Child removing laptop battery — Image Credit: Intel Free Press via Flickr

The solution to this is rather basic. You’ll need to employ a portable battery solution to recharge your device during or after VPN use. Regular charging is not ideal for batteries, but it’s a tradeoff between privacy and convenience. We’ve looked at several rechargeable battery packs at MakeUseOf over the years. My own favorite is the RAVPower 27000mAh Portable Charger, which will recharge a laptop, and is available from Amazon.

However, smaller alternatives are available, ideal for smartphones and tablets.

6. Learn How to Use Your VPN Software

There’s little point subscribing to a VPN service, installing the client software, and then leaving it to run. Accessing your virtual private network delivers so many advantages, from beating government censorship to keeping your torrent activity private. VPNs can even deliver benefits to online gaming.

In many cases, these advantages are gained by switching to a particular server. For instance, to watch region-blocked streaming media, you would need to use a server based in the appropriate country.

While some VPN clients make it easy to perform particular private tasks (such as CyberGhost), others offer less explicit features. The result is that you will need to gain familiarity with your VPN client; doing so will enable you to appreciate the full range of features on offer.

7. Book Cheaper Air Travel

We’ve briefly touched on the costs of subscribing to a VPN service. But do you know how to use a VPN to save money? With a VPN enabled, you’ll be able to deal a blow against tracking cookies. Unfortunately, online marketing services have developed other ways to identify you. Going forward, this particular advantage may die out, but for now, switching servers to different locations around the globe to book holidays can yield notable savings.

For instance, agencies selling air travel will offer prices based on your location (if not your previous buying patterns). Many people using VPNs have reported making savings by switching to an overseas server to purchase air tickets. Others still have made similar savings from arranging hotels, day trips, theme parks and other excursions.

Could your VPN pay for itself? There’s only one way to find out!

Be the Boss of Your VPN!

These seven tips should illustrate the importance of fully getting to grips with how to use your VPN. Here’s a reminder:

Set up your router with your VPN account
Avoid “free” VPN services
Save money by paying annually
Use a mobile VPN client wherever possible
Don’t let your VPN drain your mobile device
Understand how to use the VPN client and service
Save money when booking air travel and hotels

In short: a VPN isn’t simply a privacy tool. It can save you money, and generally improve your life. Don’t just subscribe, install, and click “Connect”. Get the full benefit, understand what your VPN can and cannot do, and be the boss!

Are you getting the most out of your VPN? Feel like switching to a different VPN provider? Tell us below.

via makeuseof

Image Credit: Wavebreakmedia/Depositphotos

Password Hacking and You

There are 2 primary methods to hack passwords: Brute Force and Password Guessing. Of the 2, believe it or not, it is easier to guess someone’s password than to try every combination of letters, numbers and symbols. In a brute force attack, password attempts would progress from: a, b, c; to aa, ab, ac; to aaa, aab, aac; and so on.

The core question is not, “Can my password be hacked?”, but rather “How long would it take?”. That’s where password entropy comes into play for our (the user’s) benefit. Loosely defined, entropy is disorder. Since a brute force attack is a very orderly attack, the more disorder you have in your password = better.

Numbers Game
With 5 lower case characters, an online attack would get your password right in an average of 1 hour, 21 minutes. However, by introducing say a capital letter, a number, and a special character, that time rises to around 1.5 months.

With 7 lower case characters, a brute force attack would consume ~3.2 months, but if you introduce those other random characters, it rockets up to an average of 11 centuries! Taking it even further, at 8 characters the online crack time goes to 1,000 centuries which is effectively long enough to be considered near impossible under current computing capabilities.

That said, if the hacker is able to do an offline, or massive cracking array scenario, the password can again be deduced in a matter of hours. As such, even though the typical minimum / safe password length is 8 characters, what you use as your password matters even more.

Simplicity Opens the Door
Every attempt to get your password will begin with guessing. According to a released “hack file” of 5 million passwords, we know what the most common passwords are, so hackers will start there.

Top passwords for 2016:

123456, password, 12345, 12345678, football, qwerty, 1234567890, 1234567, princess, 1234, login, welcome, solo, abc123, admin, 121212, flower, passw0rd, dragon, sunshine, master, hottie, loveme, zaq1zaq1, password1

4% of the passwords were “123456”! That’s 200,000 people in the sample set with that password!

7 Tips to Stay Safe on Public WiFi

The Best Wi-Fi Mesh Router Systems

The Best Wi-Fi Mesh Router Systems

posted by Ted Kritsonis on October 01, 2017 in Internet & Networking, Computers and Software, Guides & Reviews, Top Picks :: 0 comments

Sometimes a single router simply won’t do. While manufacturers have made them more powerful, and Wi-Fi technology has advanced to better cover wider spaces with better range, throughput can still be an issue. Enter Wi-Fi mesh routers, networking systems that use multiple routers that “talk” to each other to cast a net that serves to improve signal strength throughout the home.

They serve a useful purpose if you have weak areas or dead zones in your living space. Wi-Fi range extenders can be decent accessories, except they don’t work seamlessly the way mesh Wi-Fi systems do. It’s hard to pinpoint one mesh system that is the “best” above all others, but there are advantages between them worth taking into account. For example, you may want more stringent parental controls, or prefer a design that can blend in with your décor.

Before you take the next step in home networking, here are some pointers to think about:

Does your home Internet Wi-Fi connection have weak or dead signals anywhere in your home? If so, you may want the range multiple routers can provide. They may also use what are called “back channels” to communicate with each other on a separate frequency for uninterrupted operation.

Do you want a Wi-Fi network that is easy to setup, manage and administer? Well, who doesn’t, really? The simple step-by-step setups inherent in mesh Wi-Fi systems extend to the app-based management tools that could include parental controls, security, media prioritization and more. You don’t need to be mechanically-inclined to run one of these like a pro. Plus, you can even access your router’s features away from home.

Do you like the idea of a Wi-Fi network that is scalable and expansive? Mesh Wi-Fi networks usually come in packs of two or three, but you can always add more single units to expand the mesh further.

Are you concerned about compatibility? No need to be. Mesh Wi-Fi routers work just like any other router does, and would be fully compatible with whatever hardware your Internet Service Provider (ISP) delivers through the modem. Your devices would also connect to them like any other Wi-Fi router.

Wondering about speed and range? The whole premise here is that you get better throughput around your home, which will improve the connection speed in areas that struggled before. Mesh Wi-Fi won’t get you faster Internet on its own — overall speed depends on what you’re paying for from your ISP.

Speaking of speed, you will see manufacturers marketing numbers like AC1900, AC2200 and AC2600. These indicate the theoretical total bandwidth the router can produce on both the 2.4GHz and 5.0GHz bands. They are more an indicator of throughput than they are of speed, though the two can go hand-in-hand. A larger number is better able to handle a greater number of devices connected to it. MU-MIMO (multi-user, multi-input, multi-output) is a newer protocol that allows compatible devices to receive bandwidth without having to queue for it. Normally, routers distribute bandwidth in sequence based on which device needs it first, whereas MU-MIMO just does it to compatible devices simultaneously.

Here’s a look at some of the top mesh Wi-Fi systems to help you out.

Best All-Around Wi-Fi Mesh Router: Linksys Velop

A play on the word, “envelop”, the Velop is a powerful starter pack trio of routers that can deliver the best combination of range, throughput and administrative features. It also blends in well no matter where you want to place the three units within your home. All three units are identical, so it doesn’t matter which one is used to plug into the modem, thereby simplifying the setup process.

The simplicity extends to the connections underneath each unit, too. There are two Gigabit LAN (local area network) Ethernet ports, plus the plug for the power adapter. None of the units have USB ports, unfortunately. LEDs at the top provide a visual indicator of connection status. Each unit has a maximum range of 2,000 square feet, so you can get 6,000 sq. ft. of coverage with a three-pack. That’s higher than competing mesh systems

Since each unit is effectively an AC2200 router with tri-band networking, each is capable of 400Mbps of bandwidth throughput on the 2.4GHz network, and 867Mbps plus 867Mbps on the 5.0GHz network. These are theoretical limits, as real-world performance won’t hit that high, but the Velop funnels bandwidth very well.

Using the iOS and Android app to setup and manage the Velop is easy, and its assortment of controls is fairly broad. Parental controls, guest network, device prioritization, MU-MIMO for supported devices, Amazon Alexa integration, and other more advanced options make this system a standout.

Size: 3.1 x 3.1 x 7.3 in. per node

Speed: AC2200 with MU-MIMO

Ethernet jacks: 2 per node

Parental controls: Yes

Price: 1-Pack is $198 on Amazon, 2-Pack is $329 on Amazon, 3-Pack is $450 on Amazon

Best for setting up a smart home: Samsung Connect Home

Samsung has taken the mesh Wi-Fi system setup others have gone with and added its own twist by throwing in a SmartThings Hub into the mix. It mirrors much of what others do in the sense that you can use the Connect Home app on Android and iOS to set up and manage the mesh system, but is also clearly aimed at users who want both a Wi-Fi mesh and smart home setup.

Doubling as a SmartThings hub, it’s possible to program and control compatible smart home devices www.smartthings.com/products from other manufacturers. It supports the Zigbee and Z-Wave protocols that are common in smart home products, and thus, can “talk” to popular devices like Philips Hue lights, Nest Thermostat, Netgear Arlo Pro and iRobot Roomba vacuums, among others. That negates having to buy a separate hub to automate and control these types of products.

As a router, the Connect Home comes in a three-pack, though a two-pack or single unit could be purchased as well, if you live in a smaller space. Each unit covers up to 1,500 sq. ft., and five is the max number for one system. Throughput is more moderate at AC1300 equivalents, so while it says 400Mbps on the 2.4GHz band and 866Mbps on the 5.0GHz band, this trio won’t be quite as potent as others, like the Linksys Velop, for instance. Alternatively, the Samsung Connect Home Pro bumps up speed and throughput to AC2600.

Still, for the ease-of-use and smart home compatibility, the Connect Home is worthy of consideration.

Size: 4.72 x 4.72 x 1.16 in. per node

Speed: AC1300 (or AC2600 for Connect Home Pro)

Ethernet jacks: 2 per unit

Parental controls: Yes

Price: Connect Home 3-Pack is $325 on Amazon, Connect Home 1-Pack is $150 on Amazon, Connect Home Pro 1-Pack is $200 on Amazon

Best for included security: TP-Link Deco M5

The only way to set up and manage TP-Link’s Deco M5 mesh system is via the iOS and Android app, since there is no web-based interface for computers. It presents a clear and concise menu to get around, aiming to keep it simple wherever it can. The built-in security software, courtesy of Trend Micro, is pre-installed and does not incur any additional fees. The antivirus screens for malicious content, infected devices and outside intrusions. It does this automatically, so you don’t have to give it much thought unless something significant happens.

Bearing in mind it’s not a super extensive security suite, the fact it’s there and working constantly is good to have. It does extend out to every device connected to the network for added peace of mind. Infected devices logging onto the network will be blocked from infecting other healthy devices too. A history section in the app lists what was caught and quarantined, including the date and time it happened. Parental controls are fairly robust as well.

As a mesh system, the Deco M5 is quite capable, offering solid range and throughput with a good feature set. The small size of each unit makes it easier to nestle into different parts of the home, and the small LED always indicates the network’s overall health and performance.

Size: 4.72 x 4.72 x 1.50 in. per node

Speed: AC1300

Ethernet jacks: 2 per unit

Parental controls: Yes

Price: 3-Pack is $240 on Amazon, 1-Pack is $100 on Amazon

Best for parental controls: Asus Lyra

Like TP-Link’s Deco M5, Asus has equipped the Lyra to offer anti-virus and anti-malware security software it calls AiProtection to help protect the Wi-Fi mesh system from outside intruders. Beyond that, however, is an impressive set of parental controls that digs deep enough to moderate and protect children’s usage.

Parental controls are available in just about every Wi-Fi mesh system, except the Lyra makes it very easy to automate how restrictions apply, so that you don’t need to always go back and change things manually. It would be possible to set a time each day that blocks Internet access entirely, or only for specific apps and websites. That would make it possible to block social media sites when it’s time to get homework done, for example. The Family Overview dashboard is the hub for all things parental control, and it’s always accessible, either at home or away.

Unfortunately, there is limited effect on mobile devices. While it’s easy to block Wi-Fi access to a smartphone or tablet, for instance, it wouldn’t be possible to allow access, yet block specific apps running on iOS or Android, for example. The true depth of the parental controls features is only found on laptop and desktop computers. To achieve something similar with mobile devices, a VPN (virtual private network) product like the Disney Circle would help.

As a mesh network, the Lyra performs very well, and is most similar to TP-Link’s system, based on performance, setup and management.

Size: 5.90 x 5.90 x 1.95 in. per node

Speed: AC2200

Ethernet jacks: 2 per unit

Parental controls: Yes

Price: 3-Pack is $400 on Amazon

Best for easiest setup: Google Wifi

When Google entered the Wi-Fi mesh category, it wanted to create something that was extremely easy to setup, and it managed to do so. The Google Wifi Android and iOS app can expedite setup by scanning the QR code at the bottom of any of the units, which then goes through a clear-cut step-by-step process.

Much of that process will feel automated because most of the work is being done in the background. To have everything up and running in as little as five minutes wouldn’t be a stretch. The hand-holding carries over to the features within the app, where navigating most of the settings and options is spelled out.

A big oversight in Google’s system is the lack of parental controls, so there is no way to filter out inappropriate content or block websites. While it is possible to block Wi-Fi access to a device for even one hour with a quick tap, it’s not as intricate as others.

Range and throughput is superb, especially when three units are working together in unison.

Size: 3.79 x 3.79 x 5.42

Speed: AC1200

Ethernet jacks: 1 on base, 2 per node

Parental controls: No

Price: 3-Pack is $270 on Amazon, 1-Pack is $119 on Amazon

Best for discreet installation: eero

The beauty of mesh Wi-Fi is that each node extends the reach of your network. But what if there isn’t a good place to seat a node? eero, which launched the mesh Wi-Fi product category, has you covered with new tiny nodes, called eero Beacon, which plug directly into outlets, making installation possible and discreet in places like hallways. The Beacons also have nightlights built-in with automatic dimming during the daytime.

While the flexibility of installation is a big selling point for the eero, it also excels in other areas. The 2nd generation eero is one of the fastest systems on the market, rated at AC2200 with MU-MIMO. And, if you’re willing to pay for the Eero Plus service ($9.99 per month or $99 for the year), you’ll get anti-malware protection for all devices and parental controls, including content blocking.

Size: 4.76 x 4.76 x 1.24 inches for the hub, 4.76 x 2.91 by 1.18 inches for the eero Beacon

Speed: AC2200 with MU-MIMO

Ethernet jacks: 1 on eero hub, 0 on eero Beacon

Parental controls: Yes, with subscription to Eero Plus ($9.99 per month or $99 per year)

Price: One eero and 1 eero Beacon: $299 on Amazon, One eero and 2 eero Beacons: $399 on Amazon

Best for range expansion: Ubiquiti AmpliFi HD

The AmpliFi system is unique in that it uses nodes that look like antennas, rather than identical units that look the same. The base unit that plugs into the modem is distinct by its design, including a small LCD to visualize network speed, among other things.

The other mesh points plug directly into power outlets with flexible antennas to angle them any which way. They are a little unseemly if in plain sight, and they need to be unencumbered by outlets above. The advantage is that they pack a real punch in achieving a wider range. Six high-density antennas in the base system (the main unit, plus two mesh point antennas) are capable of covering a theoretical max of 20,000 sq. ft. Expanding it with another mesh point would only drive that number up higher.

Blue LEDs on the mesh points illustrate the signal strength, and the AmpliFi app for iOS and Android is fairly straightforward in managing the network.

Being unique mesh points that plug in and stick out from outlets, there are no Ethernet ports onboard to use as wired ports for devices to connect via Ethernet. The AmpliFi HD might also be overkill for smaller homes, whereas the less expensive AmpliFi LR (Long Range) can cover the same ground, albeit with four high-density antennas inside the main unit.

Size: 3.91 x 3.85 x 3.92 for the base, 1.81 x 7.05 x 1.06 for the mesh points

Speed: AC1750

Ethernet jacks: 4 outputs, 1 input on the base

Parental controls: No

Price: High Density system is $312 on Amazon, Long Range system is $306 on Amazon, Mesh Point HD is $109 on Amazon

[Image credit: Linksys, Samsung, TP-Link, Asus, Google, eero, Ubiquiti]