As of 13 August 2026, AI can only partly secure your business Wi-Fi network.

What to actually do

1. Hand it to a person

   The route this page recommends

   Someone with a licence or accountable authority has to sign this before it counts.

2. Use a tool built for this

   Second choice

3. Do it yourself

   The distant third

   A chat interface, chat-fluent skill, and roughly 1 hour until you can act on the result.

   How to actually do it

   1. Open the administration manuals and current support pages for the router, firewall and wireless access points, and record their exact models, firmware versions and supported security modes.
   2. Draw a simple list of every networked device and mark which ones need staff access, guest-only access, printer access, server access or no network access.
   3. Gather the current network details without pasting passwords or private keys into the chatbot, including network names, address ranges, remote administration status, authentication method and backup options.
   4. Paste those details into the prompt and ask the chatbot to produce the target design, vendor-specific steps, change plan and test checklist.
   5. Compare every proposed setting and interface path with the equipment manuals, then remove any step that the manuals do not support or that the model has labelled as uncertain.
   6. Export or photograph the existing configuration using the manufacturer’s supported backup method, arrange a maintenance window and keep a wired or local recovery route available before changing settings.
   7. Apply the changes in the proposed order, then run each test in the checklist from a staff device, a guest device and any required printer or server, recording the result.
   8. Ask a qualified IT or cyber-security professional to inspect the final design and test evidence, especially guest isolation, management exposure and access to business systems.

   Prompt

   Help me plan the secure configuration of a small UK business Wi-Fi network. Do not claim to have accessed or tested anything, do not invent settings or vendor interface paths, and label anything that depends on the equipment model.
   
   My equipment and requirements are:
   - Router or firewall make and model: [make and model]
   - Wireless access point make and model: [make and model]
   - Number of access points: [number]
   - Current firmware versions, if known: [versions]
   - Internet provider and connection type: [details]
   - Staff devices and operating systems: [details]
   - Guest Wi-Fi needed: [yes or no]
   - Business-critical wired or wireless devices: [details]
   - Cloud services, servers, printers or other systems that must remain reachable: [details]
   - Remote administration currently enabled: [yes or no or unknown]
   - Any compliance or Cyber Essentials requirements: [details]
   
   First, list the missing facts that could change the plan. Then produce:
   1. A safe target design covering separate staff and guest networks, device isolation, management access, authentication, encryption, firmware, administrator accounts, logging and backups.
   2. Vendor-specific steps only where they are supported by the manuals or settings I provide. Otherwise give a clearly labelled generic step and tell me what to confirm in the manual.
   3. A change plan that starts with a backup and a maintenance window, includes a way to avoid losing access, and separates low-risk changes from changes that could interrupt service.
   4. A test checklist for staff access, guest isolation, printer and server access, roaming, remote administration, DNS, internet access and recovery from the backup.
   5. A list of findings that must be checked by a qualified IT or cyber-security professional before implementation.
   
   Do not recommend weakening encryption, reusing administrator passwords, exposing management interfaces to the internet, or turning off security controls merely to make a device work. Do not provide a confident answer where the equipment or network details are missing.

   Open it prefilled in ChatGPT or Claude, or copy it into Gemini, which takes no prefill link.