Your SSID contains a name, phone number or e-mail

What the audit found

The network name (SSID) of a WiFi network on your router appears to contain personal information — a surname, a phone number or an e-mail address. Names like "Novak Family", "+420 777 123 456" or "info@example.com" are common, especially on small business routers where the SSID doubles as an advert.

The audit reports this as low. The SSID is not a security control; the concern is privacy and targeting, not a way into the network.

Why it matters

An SSID is broadcast continuously, in the clear, to every device within range — and range is larger than most people think. It is also collected at scale: wardriving projects and the location services built into phones record SSIDs together with GPS coordinates, and some of those databases are publicly searchable. Searching for a surname or a phone number can return a map pin.

That connects three things that are safer kept apart: a person, a physical address, and a network. For an individual it means anyone with your name can find where you live and which network is yours. For a small business it means anyone planning a targeted attack — a phishing e-mail that references the office WiFi, a visit with a laptop, a call pretending to be the IT provider — has one more accurate detail to work with. Targeted attacks succeed on details.

There is a second, smaller point. A name-based SSID often goes together with a name-based passphrase, and attackers who crack WPA2 handshakes offline will build their word list from exactly the personal details the SSID hands them.

The fix costs nothing beyond reconnecting your devices. If the business genuinely wants its name visible to customers, that is a legitimate choice — the FAQ below covers how to do it with less exposure.

What it looks like in Winbox

Open Wireless → WiFi Interfaces and read the SSID column for each enabled access point. Virtual APs have their own SSIDs and appear as separate rows. Double-click an interface to edit the name on the Wireless tab. On RouterOS 7 with the newer WiFi driver the same is under WiFi → WiFi, where the SSID is part of the interface's configuration. The passphrase is not shown here — it lives in the security profile.

How to fix it

The fix is to give each affected interface a neutral network name that says nothing about who owns it — something like "home-5g" or "office-wifi". It is edited in the SSID field on the interface's Wireless tab under Wireless → WiFi Interfaces; on the RouterOS 7 WiFi driver the SSID sits in the interface's configuration under WiFi → WiFi. Virtual APs carry their own SSID and need changing separately. A neutral name does not have to be cryptic: avoid surnames, phone numbers, e-mail addresses, street names and company names that identify you, and anything else is fine.

Changing the SSID disconnects every client, and each device will need to be pointed at the new network. Plan the change for a quiet moment. It cannot lock you out of the router unless your only management path is over that WiFi; in that case have a cable ready, or use Safe Mode so a lost session reverts the change.

This is also the right moment to change the passphrase, particularly if it was derived from the same name or number. It lives in the security profile the interface uses, under Wireless → Security Profiles. Use a random passphrase of four or five unrelated words, or 16 or more random characters.

Afterwards, scan for WiFi networks from a phone: the old name should be gone and the new one visible, and every one of your devices should have reconnected. Then re-run the audit; the finding disappears once no enabled SSID contains personal details.

The full MKRouterKit report gives the exact commands for your configuration — with your interface names and subnets filled in, in the order that will not lock you out.

FAQ

My shop wants customers to see the business name. Can I keep it?

You can, as long as it is a deliberate choice. Keep the branded SSID on a separate guest network that is isolated from your internal devices and from router management, and give your staff and equipment a differently named, unbranded network. That way the public-facing name does not also label the network that matters.

Does hiding the SSID solve this?

No. Hiding the SSID only removes it from the beacon; clients still transmit it every time they connect or probe for it, and any WiFi scanning tool shows hidden networks within seconds. It also causes connection problems on some devices. Change the name instead.

Is a phone number in the SSID really a risk if it is public anyway?

The number itself may be public. What the SSID adds is the link to a specific location and a specific network, captured and indexed automatically. Having it in a mapping database is different from having it on a website, and it is easy to avoid.