UniFi hardware is capable out of the box, but a lot of its security value depends on configuration choices that are easy to skip during a quick setup. This checklist covers the ones worth doing first.

Checklist

1. Use a strong, unique password for the UniFi account, and enable multi-factor authentication on the Ubiquiti account managing your consoles.
2. Create separate local admin accounts for each technician who needs access, rather than sharing one login — this makes it possible to revoke one person's access without changing everyone's password.
3. Keep firmware up to date on the console and all adopted devices — check Settings > System > Updates regularly, or enable automatic updates during a maintenance window.
4. Segment your network with VLANs so guest devices, IoT/cameras, and staff computers can't reach each other by default (see our VLAN guide).
5. Change default SSIDs and Wi-Fi passwords, and use WPA3 (or WPA2/WPA3 mixed mode) rather than an open or WEP network.
6. Disable remote management features you don't use, such as port forwarding rules or UPnP left on from initial setup.
7. Review firewall rules periodically, especially any broad "allow" rules created for quick troubleshooting that were never removed afterward.

Common Questions

Is the default configuration insecure?

Not unsafe outright, but it's tuned for ease of setup rather than a hardened business network — the gap is mostly about the extra steps above (VLANs, account hygiene, firmware discipline) that a default setup doesn't force you to take.

How often should firmware actually be updated?

Checking monthly is a reasonable baseline for a small business network, with security-labeled releases applied sooner — schedule updates for off-hours since some device updates require a brief reboot.