Loading page
About this tool
Weighted ASUSWRT hardening audit covering admin login, AiCloud, SSH keys, DDNS, WAN access and firmware, with a live internet-exposure index.
This Asus hardening checklist runs a weighted 25-point pass over an ASUSWRT router — admin login and Two-Step Verification, WPA2/WPA3 mode, WPS, Web Access from WAN, AiCloud, SSH authorised keys, DDNS, UPnP and firmware — and scores what is still open instead of just counting ticks. A separate exposure index adds up the services you have published to the internet, weighting an interactive session on the router itself above a file share and a file share above a DDNS name. Every step gives the exact ASUSWRT menu path, and a CGNAT option adjusts the index for connections with no public IPv4.
Open Asus Router Hardening Checklist on AltFTool — it loads instantly in your browser.
Add your input to the workspace.
Adjust the options until the result looks right.
Copy or download the output and put it to work.
Every step scores by exposure removed, and any open critical step holds the total at 60%.
See how much of the maximum footprint your enabled services and port forwards add up to.
Each item names its page, from Administration > System to WAN > DDNS and AiCloud 2.0.
Open router.asus.com or 192.168.1.1 from a device on the network — newer models use 192.168.50.1. Older units shipped with admin as both username and password, while the current setup wizard forces you to choose one, and ASUSWRT also lets you rename the admin account under Administration > System.
Only if you actually use it and keep firmware current. AiCloud publishes the router's USB storage to the internet through your ASUS DDNS name, and ASUS has issued authentication-bypass advisories affecting multiple firmware branches, including one across several series in 2025. If you have never used it to reach a file, switch all three AiCloud services off.
Because a compromise can hide there. A 2025 campaign added an attacker's SSH public key through the router's own settings, which meant the access survived firmware updates and reboots because it was a legitimate stored value. Look under Administration > System, clear any key you did not add, and factory reset if you find one.
No. The app reaches the router over your local Wi-Fi, and remote features go through ASUS's own cloud service rather than an open admin port. For genuine remote administration, run the built-in OpenVPN or WireGuard server and connect to the tunnel instead of exposing the login page.