Direct answer
Create a separate guest SSID with modern encryption, a unique password and client/local-network isolation where available. Test that guests can reach the internet but not router administration, shared storage, printers or private clients unless intentionally allowed.
What this covers
- A home router with a documented guest-network feature
- The exact condition described in the direct answer
- Customer-accessible observations and controls
What it does not cover
- ×A different model, region or software interface that contradicts the cited source
- ×A displayed code with a separate manufacturer meaning
- ×Live electrical, gas, sealed-system or battery-cell repair
Establish the exact starting state
ReversibleUpdate router firmware and sign in through the official local app/page.
Separate the fault or decision boundary
ReversibleDecide whether guests need only internet, peer-to-peer access or selected local services.
Apply the narrowest correction
ReversibleEnable the guest network, use WPA2/WPA3 as supported, set a unique credential and block local access.
Verify before escalating
ReversibleJoin with a test phone and attempt internet, router-admin and private-device access.
Evidence ledger
Sources behind this answer
Visible sources support the visible claims. Home Product Support records the publisher, the fact used and the review date; community reports can suggest an issue but do not become a published fact on their own.
Exact questions
Common follow-ups
What is the short answer to “Set up guest Wi-Fi without exposing home devices”?+
Create a separate guest SSID with modern encryption, a unique password and client/local-network isolation where available. Test that guests can reach the internet but not router administration, shared storage, printers or private clients unless intentionally allowed.
What should I check before changing anything?+
Update router firmware and sign in through the official local app/page.
How do I know the action worked?+
Join with a test phone and attempt internet, router-admin and private-device access.
When should I stop?+
Do not reuse the administrator password or create an open guest network.
Answer for the exact device and software version shown above.