Your home network is the digital front door to your life, and leaving it unlocked is an invitation for trouble. Securing it isn't about becoming a cybersecurity guru; it's about taking a few critical steps that start with your router and branch out to every device you connect. Think of it as a layered defense—changing your router's default login, using strong WPA3 or WPA2 encryption, and keeping firmware updated are the absolute basics. These simple actions build a solid perimeter against the most common attacks.

Why Your Home Network Is a Bigger Target Than You Think

It's easy to think, "I'm not important, why would hackers target me?" But that's a dangerous misconception. Cybercriminals aren't necessarily after you personally; they're after your network. It's the central hub for your entire digital life, connecting your laptop with its financial records to your smart TV, your security cameras, and your voice assistant.

Breaching that network gives an attacker a foothold into everything. They don't just get to use your internet for free—they get a direct line of sight to your most sensitive data.

Every single smart device you add to your network is another potential unlocked window. That smart speaker, those connected light bulbs, even the new "smart" coffee maker are all tiny, internet-connected computers. If just one of them has a security flaw—and many do—it can become a digital backdoor for an intruder to waltz right past your main defenses.

The Constant Barrage of Attacks

This isn't a hypothetical threat; it's a constant, automated reality. Bots are relentlessly scanning the internet 24/7, hunting for vulnerable networks with weak default passwords or outdated software. Your home network is under a low-grade, constant siege, facing an average of 10 attacks every 24 hours.

Research consistently shows that our smart home gadgets are the weakest link. Smart TVs lead the pack, accounting for 34% of smart home vulnerabilities, with smart plugs (18%) and DVRs (13%) not far behind. What’s truly shocking is that, according to this breakdown of cybersecurity statistics from Cobalt.io, a staggering 99.3% of these attacks exploit known vulnerabilities that manufacturers simply haven't bothered to patch. This puts the responsibility squarely on our shoulders.

Your home network isn't just for convenience anymore; it's a critical piece of your personal infrastructure. You wouldn't leave your front door unlocked, so why leave your digital door wide open? Securing it is essential for protecting your privacy, your finances, and your peace of mind.

To give you a clearer picture, let's break down the most common threats and how your initial security layers defend against them.

Core Threats and Your First Line of Defense

Here’s a quick look at what you’re up against and the foundational security measures that stop these threats in their tracks.

Common Threat Primary Risk Essential Defense Strategy
Unauthorized Access Data theft, malware infection, spying Change default router password; use strong WPA3/WPA2 encryption.
IoT Device Hijacking Devices used in botnets, entry point to the main network Segment IoT devices on a Guest Network; disable UPnP.
Firmware Exploits Full router takeover by exploiting known bugs Keep router firmware updated regularly.
Man-in-the-Middle (MITM) Interception of sensitive data like passwords Use strong Wi-Fi encryption and a trusted VPN.

This table isn't meant to scare you—it's meant to empower you. By understanding the threats, the simple, effective defenses become crystal clear.

Understanding the Stakes

A compromised home network is more than just an inconvenience. Attackers can deploy ransomware that locks up your family photos and important documents, steal your banking credentials, or quietly install spyware to monitor everything you do. Worse, they can add your devices to a "botnet," using your network's power to launch large-scale attacks on businesses and governments, making you an unwitting accomplice in their crimes.

This guide is all about action. We're moving past the theory to give you the practical, step-by-step instructions you need to lock things down. We'll cover:

  • Router Hardening: Securing the digital front door to your home.
  • Network Segmentation: How to isolate your less-secure gadgets to contain threats.
  • Advanced Protection: Using tools like firewalls, DNS filtering, and VPNs to build a stronger defense.
  • Device Security: Making sure every single thing connected to your network is locked down tight.

Securing Your Router: The Digital Front Door

Think of your router as the central nervous system for your entire home network. Every bit of data—from what you're streaming late at night to your banking logins—passes right through it. Leaving it with factory-default settings is the digital equivalent of leaving your front door wide open with the keys still in the lock. It’s the single biggest mistake people make, but thankfully, it's also the easiest to fix.

Securing your router isn't just about setting a strong Wi-Fi password. It means rolling up your sleeves and diving into the settings, a place most people never venture. A few strategic tweaks here can dramatically shrink your digital footprint and lock down your network. This is where real security begins.

Your First Mission: Change Default Credentials

Every router ships with a default administrator username and password, usually something laughably simple like "admin" and "password." These aren't secrets; they're public knowledge, and they're the first thing automated attack bots look for. Changing them is absolutely non-negotiable.

First, you'll need to get into your router's admin panel. You can usually do this by typing an address like 192.168.1.1 or 192.168.0.1 into your web browser while you're on your home network. If neither of those works, check the sticker on the router itself—the address and the default login details you're about to change are typically printed there.

Once you're in, hunt for a section labeled "Administration," "System," or "Security." This is where you'll find the option to change the administrator password. Make it long, make it complex, and make sure it's completely different from your Wi-Fi password. This is the master key to your entire network kingdom.

The Power of Firmware Updates

Router firmware is the software that makes your hardware tick. Just like your phone or computer, it needs regular updates to patch security holes that researchers (and hackers) are constantly finding. Manufacturers release these updates to fix vulnerabilities that could otherwise give an attacker a wide-open door.

Many modern routers offer an automatic update feature. If yours has one, turn it on. Now. It’s the simplest "set it and forget it" security win you can get. If you have to do it manually, set a reminder to log in and check for new firmware at least once a quarter. This simple chore is one of your strongest defenses.

Don't underestimate this. A shocking 99.3% of smart home attacks exploit known vulnerabilities that have already been patched. With 36% of attacks in Europe targeting public-facing applications, keeping your router's firmware current is critical to closing those entry points before they get exploited. You can dive deeper into these numbers with the threat intelligence index from IBM.

This process flow shows exactly how this works in the real world: constant automated attacks are always probing for a weak link. They often find it in an insecure device, which then puts all of your personal data at risk.

Infographic illustrating the home network threat process: constant attacks, insecure smart devices as the weakest link, and personal data risk.

As you can see, a single weak point can compromise everything. Patching your router is how you break that chain.

Choosing the Right Wi-Fi Encryption

The encryption protocol you choose is what scrambles your data, making it unreadable to anyone trying to snoop on your Wi-Fi signal. Your router will give you a few options, but only a couple of them are worth using.

Here’s a quick rundown of your choices:

  • WPA3 (Wi-Fi Protected Access 3): This is the current gold standard. It offers the strongest protection against password-guessing attacks and ensures that even if someone does crack your password, they can't decrypt your past traffic. If your router and devices support it, use WPA3.
  • WPA2-AES (Wi-Fi Protected Access 2): If WPA3 isn't an option, WPA2 with AES encryption is your next best bet. It’s been the standard for years and is still plenty secure for home use, as long as you pair it with a very strong password. Just make sure to avoid the older TKIP encryption option if you see it.
  • WEP and WPA: These are ancient history in security terms. Both can be cracked in minutes with free tools you can find online. If these are your only choices, it’s a giant red flag that you need to replace your router immediately.

A strong, unique Wi-Fi password combined with WPA3 creates a formidable barrier. Legacy protocols like WPA2 can fall to brute-force attacks within hours, but WPA3's advanced features make such attempts much more difficult and time-consuming.

Disable Risky "Convenience" Features

Many routers come with features that are designed to make your life easier but end up creating massive security holes. Turning them off is a quick win for hardening your network.

Universal Plug and Play (UPnP)

UPnP is meant to let devices like game consoles automatically open ports on your router so they can connect to the internet. While convenient, it's notoriously insecure. Malware on a compromised device can hijack UPnP to open ports for its own malicious purposes, effectively punching a hole straight through your firewall. Go find this setting and disable it.

Wi-Fi Protected Setup (WPS)

WPS lets you connect a new device by pushing a button or entering a short PIN. That PIN is frighteningly easy for an attacker to crack, which would give them your Wi-Fi password and full access to your network. The tiny bit of convenience isn't worth the huge risk. Always turn WPS off in your router settings.

By tackling these foundational steps—changing credentials, keeping firmware updated, using strong encryption, and disabling risky features—you'll transform your router from a security liability into a solid digital gatekeeper.

Creating a Guest Network for Your Smart Devices

Think of your home network as one big room. Your personal laptop, the network drive with your family photos, your phone—everything important is in that same room. Now, what happens when you start bringing in dozens of smart speakers, connected light bulbs, and even a Wi-Fi-enabled coffee maker? You're placing them right next to your most sensitive digital possessions.

This is exactly how most home networks are set up, and frankly, it's a huge security risk.

This is where network segmentation comes in. It’s the digital equivalent of building a separate, locked room just for your smart devices. The easiest way to pull this off is by using the guest network feature that’s built into pretty much every modern router. By creating a separate network for your Internet of Things (IoT) devices, you're essentially building a digital moat around your core data.

Comparison of a locked main Wi-Fi network for personal devices and an isolated guest network for smart home devices.

Why This Digital Moat Is So Important

Let's be blunt: most IoT devices are not built with security as a top priority. They often ship with unpatched vulnerabilities, laughably weak default passwords, and questionable privacy practices from the manufacturer. A single compromised smart plug could give an attacker a foothold on your entire network, letting them see and attack your more valuable devices.

By shoving these gadgets onto an isolated guest network, you contain that threat.

If a hacker compromises your smart TV, they're trapped inside that digital moat. They can't see or access the main network where your personal computer and sensitive files live. This one simple step can turn a potential disaster into a minor headache.

Setting Up Your IoT Guest Network

Flipping on a guest network is a straightforward job you can knock out in less than ten minutes. The exact menu options vary a bit between router brands, but the overall process is the same.

  1. Log Into Your Router: Pop open a web browser and access your router's admin panel. This is usually at an address like 192.168.1.1.
  2. Find the Guest Network Setting: Poke around for a tab labeled "Guest Network," "Guest Wi-Fi," or something similar. It's often tucked under the main Wireless or Wi-Fi settings.
  3. Enable the Network: You'll see an option to turn on the guest network. Most routers let you create one for both the 2.4 GHz and 5 GHz bands. For most IoT gadgets, the 2.4 GHz band is all you need—and often, it's the only one they support.
  4. Configure the Settings: This is the most crucial part. You'll need to give the network a name (SSID) and set up its security.

Pro Tip: Name your guest network something obvious like "SmartDeviceNet" or "HomeIoT." This stops you or your family from accidentally connecting your main computer to the isolated network.

When you're setting up the security, treat it with the same seriousness as your primary network.

  • Set a Strong Password: Use a long, complex, and unique password. Whatever you do, don't reuse your main Wi-Fi password.
  • Use WPA2 or WPA3 Encryption: Always select the strongest encryption option available. No excuses.
  • Disable Access to Local Network: This is the magic switch. Look for a checkbox like "Allow guests to see each other and access my local network" or "Client Isolation" and make sure it's disabled or unchecked. This is what actually builds the wall between your two networks.

A Real-World Scenario

Imagine a new vulnerability is discovered in a popular brand of smart security cameras, allowing attackers to take them over completely. If your camera is on your main network, that attacker now has a direct line to your laptop, your network storage drive, and every other device connected. They could deploy ransomware or just silently steal your files.

Now, picture the same attack, but your camera is on a properly configured guest network. The attacker gets control of the camera... and that's it. They're stuck. They're on an isolated island, completely unable to see or interact with your valuable devices on the main network.

The threat is effectively neutralized. That's the practical power of segmenting your network—you dramatically shrink your attack surface and protect what actually matters.

Okay, you've locked down your router and wrangled your smart devices onto their own network. That's a huge step. You've basically built the digital equivalent of a strong fence and good locks on your doors.

Now, let's add the high-tech security system—the silent guardians that watch over your network 24/7, filtering out threats before they even get a chance to knock. These next steps are about adding sophisticated layers of defense that run in the background, keeping your data private and your devices safe from the nasty stuff lurking online.

Flip the Switch on Your Router’s Firewall

You might not even know it's there, but your router has a built-in security guard: its firewall. Think of it as a digital bouncer at the front door of your network. Its one job is to inspect all incoming traffic from the internet and slam the door on anything that looks sketchy or wasn't explicitly requested by one of your devices.

For most homes, the default firewall settings are exactly what you need. They typically use a technology called Stateful Packet Inspection (SPI). In simple terms, the firewall keeps a running list of all the outgoing connections from your devices. When your laptop asks for data from a website, the firewall notes it and allows the response back in. But if some random server on the internet tries to start a conversation with your network out of the blue? Denied.

It's a simple but incredibly effective first line of defense. Here's how to double-check it's on:

  • Log in to your router's admin page.
  • Find the "Security" or "Advanced" section.
  • Look for a setting like "Firewall," "SPI Firewall," or sometimes "NAT Filtering."
  • Just make sure it's enabled. Most are on by default, but it never hurts to verify.

Ditch Your ISP's DNS and Filter Out the Bad Stuff

Every single time you type a website address into your browser, your computer uses the Domain Name System (DNS) to look up the site's IP address. By default, you're using the DNS servers provided by your Internet Service Provider (ISP), which do absolutely nothing to protect you.

Switching to a secure DNS provider is one of the easiest, most powerful security upgrades you can make. It's like giving every device on your network an automatically updated blacklist for dangerous websites. If you or someone in your family accidentally clicks a phishing link, the secure DNS service simply refuses to connect, stopping the attack dead in its tracks before the malicious page can even load.

Some of the best free options out there include:

  • Quad9: Purely focused on security, blocking known malicious domains without any frills.
  • OpenDNS FamilyShield: A fantastic choice for families. It blocks malware and phishing, plus it filters out adult content.
  • Cloudflare DNS: Built for speed and privacy, with an optional version (1.1.1.2) that blocks malware.

You can change this setting right in your router's admin panel, usually under "WAN" or "Internet" settings. Once you set it there, every device on your Wi-Fi is instantly covered.

Encrypt Your Entire Connection with a VPN

So, your firewall is blocking unwanted intruders, and your DNS is filtering out malicious sites. The final piece of the puzzle is protecting all the data leaving your network. That's where a Virtual Private Network (VPN) comes in.

A VPN creates a secure, encrypted tunnel from your device (or your whole network, if you set it up on the router) to a server run by the VPN provider. This process scrambles your data, making it completely unreadable to your ISP or anyone else trying to snoop on your connection.

Without a VPN, your ISP sees every single website you visit. With one, all they see is encrypted nonsense flowing to a single server. For a deeper dive, this guide covers essential home network security best practices that reinforce this principle.

This screenshot from Tegant VPN shows exactly what's happening—your connection is shielded, and your real IP address is hidden.

The interface clearly shows your traffic being rerouted through a secure server, which is the core of how a VPN protects your privacy. This encryption is also your best defense against data thieves on public Wi-Fi, and it's a key tactic when you need to prevent man-in-the-middle attacks.

The game has changed. Ransomware isn't just a corporate problem anymore; it's a home network nightmare. A shocking 44% of breaches now involve ransomware, often sneaking in through unpatched routers or phishing emails opened on a family computer. A VPN is a critical layer in that fight.

Services like Tegant VPN take this a step further with advanced obfuscation, which disguises your VPN traffic to get around strict firewalls in regions with heavy censorship. This ensures your connection stays private and open, no matter where you are.

Comparing Advanced Security Layers

It can be tricky to see how these different tools fit together. Think of them as specialized guards, each with a specific job. This table breaks down what each layer does and why you need all three for a truly hardened network.

Security Layer Primary Function Best For Protecting Against Example Implementation
Firewall (SPI) Blocks unsolicited incoming traffic Network scans, port probes, and direct connection attempts from attackers. Enabling the built-in SPI Firewall on your home router (e.g., ASUS, Netgear, TP-Link).
DNS Filtering Blocks access to known malicious domains Phishing sites, malware distribution networks, and botnet command centers. Changing your router's DNS settings to Quad9 (9.9.9.9) or Cloudflare (1.1.1.2).
VPN Encrypts all outgoing internet traffic ISP tracking, data interception on public Wi-Fi, and bypassing censorship. Using a service like Tegant VPN on your devices or configuring it on your router.

By layering a firewall, secure DNS, and a VPN, you're not just relying on a single point of failure. You're building a defense-in-depth strategy that makes your home network a much, much harder target for the bad guys.

Hardening Every Device Connected to Your Network

Locking down your router is a huge step, but it’s only half the battle. A truly secure home network means looking at every single device that connects to it—laptops, phones, smart speakers, even that Wi-Fi security camera you set up years ago and forgot about. Each one is a potential backdoor, making device-level security just as vital as your network’s perimeter defense.

Think of it this way: if one device gets compromised, it can become a launchpad for attacks against everything else inside your digital home.

Illustration showing steps to secure various electronic devices like laptops, phones, smart speakers, and cameras.

Securing Your Computers and Laptops

Our computers are where we keep our most sensitive data, from tax documents to personal photos. Hardening them comes down to a few powerful, simple habits. The single most effective thing you can do is stop using an administrator account for everyday tasks like browsing the web.

Seriously, create a standard user account for daily use. This one change dramatically limits what malware can do. If you accidentally click a malicious link while on a standard account, the malware simply won't have the permissions it needs to install itself or make critical system changes.

Of course, keeping your operating system and all installed software updated is non-negotiable, as these updates patch newly discovered security flaws. And even with a hardened network, it pays to know how to effectively remove viruses from your computer if something slips through.

Locking Down Mobile Devices

Our phones are always with us, making them prime targets. The first step is to ditch the simple four-digit PIN. Use a strong, alphanumeric passcode or a long, complex pattern. Better yet, enable Face ID or a fingerprint scanner as your primary way to unlock it.

App permissions are another gaping hole. Be ruthless here.

  • Does a calculator app really need access to your contacts and location? Deny it.
  • Does a game need permission to use your microphone? Question it.
  • Every few months, audit the permissions on your existing apps and revoke anything that seems excessive.

A personal story comes to mind. While doing a network scan, I found an old, forgotten smart plug I’d set up years ago. It was still using its default password, "12345678." It was a humbling reminder that our security is only as strong as our most neglected device.

Taming the Internet of Things (IoT)

IoT devices are notoriously insecure. They're often rushed to market with little thought given to digital safety, so your vigilance is critical. The absolute first thing you must do with any new smart device—be it a camera, speaker, or light bulb—is change the default administrator password. These defaults are often publicly listed online, basically leaving the door wide open.

Next, remember that many IoT gadgets come packed with features you'll never use, like remote access from outside your home. If you don't need a feature, disable it. Every active feature is another potential attack surface. A minimalist approach is a secure one.

Here’s a quick checklist to run through for any new device you bring home.

Device Hardening Checklist

Device Type Action 1 Action 2 Action 3
Computers Use a Standard User Account for daily activities. Keep the operating system and all software updated. Install reputable antivirus and anti-malware software.
Mobile Phones Set a strong alphanumeric passcode and enable biometrics. Scrutinize and limit app permissions. Only install apps from official app stores.
IoT Gadgets Change the default password immediately upon setup. Disable unused features like UPnP and remote access. Place the device on your isolated guest network.

By applying these principles to every phone, computer, and smart gadget you own, you build the final layer of your home security strategy. This diligent, device-by-device approach ensures that even if one endpoint gets hit, the damage is contained, and your most important digital assets stay safe.

You've done the hard part and built a secure home network. That's a huge win, but don't hang up your hat just yet. The digital world doesn't stand still, and neither do the threats.

Keeping your network secure isn't a one-and-done project. Think of it more like basic car maintenance—a quick, regular check-up to make sure everything is running smoothly and safely. A few simple habits are all it takes to keep your digital fortress strong for the long haul.

The 15-Minute Quarterly Security Check-Up

I recommend setting a reminder to do a quick security audit once every three months. This isn't some deep, technical dive. It's just a quick look under the hood to catch small issues before they become big problems.

Here’s your simple, quarterly checklist:

  • Review Connected Devices: Log into your router’s admin page and pull up the list of everything connected to your network. Do you recognize all the device names? If something looks fishy, it's time to investigate. This is also the perfect time to kick off old, unpatched devices you no longer use.
  • Check for Firmware Updates: Most modern routers handle this automatically, but it never hurts to double-check. A quick manual check confirms you're patched against the latest vulnerabilities that have been discovered.
  • Test Your Guest Network: This is my favorite quick test. Connect your phone to the guest Wi-Fi and then try to access a shared drive or another computer on your main network. Can't get in? Perfect. Your network segmentation is working exactly as it should.

This whole process takes maybe 15 minutes, but the peace of mind it delivers is immense. It’s a low-effort way to make sure your network stays a tough target.

Managing Passwords and Staying in the Loop

Password fatigue is a real thing, I get it. But not all passwords are created equal. You don't need to change everything all the time, but a couple of key ones deserve an occasional refresh.

Plan on changing these once or twice a year:

  • Your router’s administrator password.
  • Your primary Wi-Fi network password.

Bonus: changing the Wi-Fi password forces every single device to reconnect. This is a fantastic opportunity to find and remove any old gadgets you forgot were even on your network.

Staying informed doesn't mean you need to become a cybersecurity expert overnight. Just find one reputable security blog or news source and check in occasionally. The idea isn't to panic at every headline, but to be aware of major trends, like a new widespread vulnerability affecting your brand of router.

This background knowledge is incredibly helpful when things go wrong. For example, if you start having weird connection issues after a router update, knowing a little bit about your network's DNS can be a lifesaver. You can even read up on how to fix common DNS issues so you're ready to troubleshoot.

The Human Firewall: Your Strongest Defense

At the end of the day, the most sophisticated firewall can be bypassed by one simple human error. The most critical long-term strategy for your home network security is making sure everyone who uses it is on the same page.

Have a chat with your family about the basics. Explain why they shouldn't click on strange links in emails or download programs from sketchy websites. Show them how to spot a secure website (look for the little padlock in the address bar) and why the Wi-Fi password shouldn't be handed out to just anyone.

These aren't lectures; they're conversations that build a culture of security at home. When everyone understands they have a role to play, you create a powerful, collective defense that no piece of tech can replicate on its own. This shared responsibility is the final, and most important, layer of your digital security.

Answering Your Home Network Security Questions

Once you've locked down your network, a few questions always seem to surface. It's totally normal. Getting these details right is what separates a temporarily secure network from one that stays hardened for the long haul. Let's tackle some of the most common ones I hear.

Think of this as the ongoing maintenance that keeps your digital fortress strong. These aren't just chores; they're smart habits that keep you ahead of the curve.

How Often Should I Check for Router Firmware Updates?

The best-case scenario? You don't. A modern router should have an automatic update feature. If yours does, turn it on and let it handle its own security patching. This is the single best set-it-and-forget-it thing you can do for your network's primary defense.

If your router is a bit older and needs a manual touch, get in the habit of checking for new firmware at least once every quarter. Seriously, put a reminder on your calendar right now. Those updates aren't for new features; they're plugging security holes that hackers are actively trying to crawl through.

Is WPA2 Security Still Safe to Use?

Look, WPA2 (with AES encryption) isn't a wide-open door, but the lock is definitely getting rusty. It's still a decent baseline for most homes, if you're using an incredibly long and complex password. It's a stopgap, not a long-term solution.

The real answer is WPA3. It's the current industry standard for a reason, offering much tougher protection against the brute-force attacks that are common today. If your router and your devices support WPA3, making the switch is a no-brainer. If not, WPA2-AES will have to do until your next hardware upgrade.

Let's cut to the chase: Always use the strongest encryption your gear can handle. WPA3 is the goal. WPA2-AES is the bare minimum. Anything older like WEP or the original WPA is dangerously obsolete and basically an open invitation for trouble.

My Internet Speed Slowed Down After Enabling My VPN. Is This Normal?

Yes, a slight dip in speed is completely normal and expected when you're using a VPN. Your data is being encrypted and sent on a little detour through another server—that process adds a tiny bit of overhead. The best VPNs are built to make this speed hit as small as possible.

However, if your speed has taken a nosedive, that's not normal, and you can probably fix it.

  • Pick a closer server: Physics is a thing. Connecting to a VPN server geographically closer to you will almost always speed things up.
  • Try a different protocol: Many VPNs let you switch protocols (like WireGuard vs. OpenVPN). One might perform significantly better on your specific network.

This is a classic trade-off. Understanding if a VPN can protect you from hackers means recognizing that its powerful encryption is what causes that minor speed change.

What Is the Easiest Way to See All Devices on My Network?

The most direct way is to log into your router's admin page. Buried in the settings, you'll find a page called something like "Connected Devices," "Device List," or "DHCP Clients." This is the definitive list of every single thing connected to your network, wired or wireless.

For a slicker, more user-friendly view, grab a network scanner app for your phone. An app like Fing will scan your Wi-Fi and give you a clean list of devices, often identifying them by name and manufacturer. It makes spotting a weird, unauthorized device a whole lot easier.

Ready to add that critical layer of privacy that encrypts your entire connection? Tegant VPN locks down your data, hides your real IP address, and uses advanced tech to get you around censorship. Protect your digital life everywhere by downloading Tegant today. https://tegant.com