Question My own router via sky isp router works great but security?

[pcflyer]

Hi I am using a tp-link router via lan through my sky router and it has improved coverage around the house considerably and also improved the bandwidth etc to our devices. I have changed the wifi password for the tp-link router however the access password to change settings is still admin admin. Is this a security risk? Even though the settings page for the router can't be accessed via its ip?

 

[bill001g]

Not the best option but generally if you who have full access to the network can not access the router then someone from outside can not either.
To some extent you have to look at the actual threat. Most home user "attacks" are the neighbor kid whose parents have blocked their porn surfing so they try to use the neighbors wifi. They really don't care about attacking your machines they just want to use your internet. The wifi passwords generally prevent that.

They would have to first get past the wifi passwords. If they did that then your network is already unsafe even if you used good passwords. Its not like they can take the admin password and somehow get more access they already have full access.

This would more be a worry if you had someone you trust on the network that then used it to give themselves more access. BUT if you can not even use the ip because for example it is in the wrong subnet then it makes it even more unlikely.

 

[pcflyer]

Not the best option but generally if you who have full access to the network can not access the router then someone from outside can not either.
To some extent you have to look at the actual threat. Most home user "attacks" are the neighbor kid whose parents have blocked their porn surfing so they try to use the neighbors wifi. They really don't care about attacking your machines they just want to use your internet. The wifi passwords generally prevent that.

They would have to first get past the wifi passwords. If they did that then your network is already unsafe even if you used good passwords. Its not like they can take the admin password and somehow get more access they already have full access.

This would more be a worry if you had someone you trust on the network that then used it to give themselves more access. BUT if you can not even use the ip because for example it is in the wrong subnet then it makes it even more unlikely.

Thanks for the great reply, it was what I assumed but just wanted to ask someone who knows the subject well, thanks very much for your help.