What Is a Firewall and Do You Actually Need One at Home?

Leave a laptop connected to the internet for an hour with no protection at all, and it will get probed. Not by a person sitting somewhere typing furiously, but by automated scripts that spend all day knocking on random addresses, checking which doors are unlocked. Most of us never see this happening because something is already standing at the door turning those attempts away. That something is usually a firewall, and most people have never once opened its settings.

So what does a firewall actually do?

Think of your device or your home network as a building, and every connection to the internet as a door someone could walk through. A firewall is the guard at that door. It looks at each incoming and outgoing connection — a bundle of data called a packet — and decides, based on a set of rules, whether to let it through or block it. It doesn't read the contents of your messages or scan your files; it just checks where traffic is coming from, where it's going, and which "port" (think of it as a numbered doorway for a specific kind of service, like port 80 for regular web browsing) it's trying to use.

There are two flavors you'll run into. A network firewall sits at the edge of your whole network — it's usually built directly into your Wi-Fi router, and it protects every device connected to that router at once. A host-based firewall runs on a single device, like the one built into Windows (Windows Defender Firewall) or macOS. Both are typically switched on by default, which is a big part of why most people have never had to think about them.

A firewall isn't there to stop a determined attacker who's already targeting you specifically — it's there to make sure the thousands of untargeted, automated attempts hitting the internet every second don't get in for free.

Do you actually need to do anything about yours?

For most home users in India, the honest answer is: probably not much, but a little attention goes a long way. Routers handed out by Jio, Airtel, ACT, and other ISPs generally ship with a basic firewall enabled, and Windows and macOS have theirs on by default too. The risk isn't usually that the firewall is missing — it's that people accidentally weaken it without realizing what they've done.

This matters more now than it used to, because so many Indian households run a mix of work laptops, smart TVs, IP cameras, and IoT gadgets on the same home Wi-Fi that once only had a phone and a laptop on it. CERT-In (the Indian government's Computer Emergency Response Team, which tracks and issues advisories on active threats) has repeatedly flagged poorly configured home routers as an easy entry point, especially ones still running factory-default admin passwords. If you're working from home and connecting to office systems over that same router, a weak point on your home network can end up being a weak point for your employer too — which is exactly the kind of scenario the DPDP Act (India's data protection law) is meant to make companies take more seriously when it comes to securing personal data.

If you want a companion piece on the other major layer of home network protection, we've also covered how a VPN actually works — a firewall decides what gets in and out, while a VPN focuses on hiding and encrypting what you send once it's already out.

The mistakes that actually cause problems

Almost every real-world firewall issue traces back to a handful of habits, not some sophisticated attack. Worth checking against your own setup:

• Turning the firewall off to "fix" something. A game or app can't connect, and the quickest fix online says to disable the firewall entirely. It works, but it also removes protection for everything else running on that device — the right fix is usually to allow that one specific app or port, not switch the whole guard off duty.
• Never changing the router's default admin password. Plenty of home routers can still be reached with "admin/admin" or whatever came printed on the box. Someone doesn't need to break your firewall if they can just log in and reconfigure it.
• Opening ports for convenience and forgetting about it. Setting up a security camera or a game server sometimes involves "port forwarding" — deliberately opening a specific doorway from the internet straight into a device on your network. Useful when you need it, risky when it's left open indefinitely after you've stopped using it.
• Assuming public Wi-Fi has the same protection. The firewall on the café or airport router isn't configured with your safety in mind — it's configured for theirs.

None of this requires becoming a network administrator. It just means treating your router's admin panel the way you'd treat any other account: change the default password, keep the firmware updated when your ISP or the router maker pushes an update, and close any port forwarding rule you set up for something you're no longer using. The firewall was already doing its job quietly in the background — the least it deserves is a login that isn't still set to factory default.