My cousin’s kids came to stay for a week last summer, three teenagers with about six devices between them, and within the first evening my main Wi Fi had turned into a crawling mess that made my own laptop feel like it was running on dial up. I remember sitting there refreshing a page that just wouldn’t load, genuinely annoyed, and thinking there has to be a better way than just handing my actual home network password to every teenager who walks through my door. That was the night I finally dug my old router out of the closet, the one my ISP replaced two years earlier and I never got around to throwing out because, well, guilt again, that same guilt that seems to follow every piece of tech I’ve ever owned.

I’d heard of guest networks before, obviously, most modern routers have some little toggle buried in the settings for it. But I’d never actually sat down and thought about why a genuinely separate router, an old physical box doing nothing but guest duty, might actually be the smarter move rather than just flipping that built in switch. Turns out there’s a real difference, and once I understood it I felt a bit silly for not doing this years ago.

Here’s the thing that clicked for me eventually, after a fair bit of confused Googling on my phone while the actual router sat on my desk staring at me. A guest network toggle on your main router is basically your router pretending to have two networks while still doing all the thinking itself, one processor handling everyone’s traffic, your stuff and your guests’ stuff, all funneled through the same brain. An old router repurposed purely as a guest access point is a genuinely separate device, its own little brain, connected to your main network only through a single cable, and it never touches your main router’s processing power or, more importantly, never gets a direct path back into your private devices. If someone’s phone shows up carrying who knows what kind of malware, and I say this as someone who’s definitely had a friend’s phone do something weird on my network before, it’s sitting in its own little box, not one setting away from my main files and cameras.

Setting it up wasn’t as scary as I’d built it up to be in my head, though I did have one moment of genuine panic about twenty minutes in that I’ll get to. First step, and I actually skipped this the first time and regretted it, reset the old router completely back to factory settings. Hold that little pinhole button in for the usual ten seconds or so, whatever your specific model asks for, because you do not want leftover settings from its previous life as your main router fighting with the new setup. I didn’t do this the first time, and the old router still remembered its old admin password from years ago, which I’d obviously forgotten, and I spent a genuinely embarrassing amount of time trying random combinations before just giving up and resetting it anyway. Lesson learned the annoying way, as usual.

Once it’s freshly reset, you plug an Ethernet cable from a regular LAN port on your main router into the WAN, or “Internet,” port on the old one, not LAN to LAN, that specific detail tripped me up conceptually at first because it feels backwards, like you’re plugging the old router’s internet input into your main router’s regular output, but that’s exactly the point, it makes the old router treat your home network as its upstream internet connection rather than trying to be part of the same local network as an equal.

Then you log into the old router’s admin page, usually by typing something like 192.168.1.1 into a browser, sometimes it’s a completely different address depending on the brand, so check the sticker on the bottom of the unit if you’re not sure, mine had faded almost illegibly from years of being handled and I had to squint at it under my phone’s flashlight like I was reading ancient text. Inside, the important part is turning off the old router’s own DHCP server, since you don’t want two devices on the network both trying to hand out IP addresses and confusing everything, and giving it a new SSID and password completely separate from your main network. I named mine something deliberately boring, nothing with my name or address in it, just a plain word that doesn’t tell a stranger anything about who lives here or what they might find valuable inside.

The setting that actually matters most, the one I almost missed entirely because it was buried three menus deep, is whatever your router calls network isolation or client isolation or “block access to LAN.” This is the thing that actually stops guest devices from seeing your other devices, your printer, your smart plugs, any shared folders you’ve got sitting around. Without it turned on, you’ve basically built a second entrance to the same house, just with a different doormat. With it on, guests can reach the internet and absolutely nothing else, which, again, felt slightly petty typing it out, deliberately locking my cousin’s kids out of my printer, but that’s exactly the point, isolation isn’t personal, it’s just good hygiene.

I’ll admit the whole process took me close to an hour the first time, mostly because of that forgotten password detour, whereas I think if you do it cleanly it’s genuinely a fifteen or twenty minute job. The second time I did this, for a friend who was hosting an Airbnb guest and wanted the same setup, it took about ten minutes flat because I actually knew what I was doing by then, and there’s something quietly satisfying about going from fumbling idiot to the guy who can set this up on autopilot in one sitting.

Now, do I think everyone strictly needs a whole separate physical router for this? Honestly, no, and I want to push back a little on the more dramatic corners of the internet that make it sound like the built in guest toggle is basically useless. For most people, most of the time, having one visiting friend connect their phone for a weekend, the built in guest network on a decent modern router is genuinely fine. Where the separate old router actually earns its keep is smart home devices, honestly, more than actual human guests. I’ve got a handful of cheap smart plugs and a video doorbell that I trust about as far as I could throw them, security wise, and rather than putting them on my main network or fiddling endlessly with settings, I just put them on the old router’s network permanently. If one of those devices ever gets compromised, and cheap IoT gear absolutely does get compromised sometimes, it’s sitting in its own isolated little box, nowhere near my laptop or my actual personal files.

What I keep coming back to, months later, with that old router still humming quietly on a shelf doing this one small job forever, is how little effort it takes to maintain compared to how much peace of mind it buys me. I don’t think about it anymore, it just sits there, isolating guests and gadgets from the stuff that actually matters, and every time someone new visits and asks for the Wi Fi password, I hand over the boring guest one without a second thought, no mental math about what they might see or touch, because the honest answer is nothing, and that’s exactly how I want it.