Safety first: before you change anything
This guide is for anyone living with, or who has left, a partner, ex-partner or family member who controls or watches them, and who wants to take back control of the home broadband and the accounts linked to it.
Start with the warning every specialist service gives. Refuge, which runs the National Domestic Abuse Helpline in England, says that some of the things you might do to improve your security or privacy could alert the person harming you, and they might escalate their abuse. Before you change a password or reset a router, Refuge says its helpline can help you create a safety plan tailored to your situation.
- Use a safer device to get help. Refuge suggests a phone belonging to a trusted friend, family member or neighbour, or a computer at a library, school or workplace.
- Save evidence first. Refuge says to save any evidence you want to keep before you delete messages, remove the other person's access to your phone or accounts, or report content to a tech company.
- Your situation changes the steps. Refuge says the right steps depend on whether you still live with the person, and that control and coercion can make some steps impossible or unsafe. Nothing in this guide is a rule you have to follow.
If you are in immediate danger, call 999 and ask for the police. GOV.UK says that if you can't speak and you're calling on a mobile, you can press 55 to have your call transferred to the police. Pressing 55 only works on mobiles, and it does not let the police track your location.
Free, confidential helplines, with their opening hours, are listed at the end of this guide.
How a home connection can be used to control or watch someone
GOV.UK lists a partner, ex-partner or someone you live with monitoring or limiting your use of technology among the signs of domestic abuse, and says domestic abuse includes coercive control, economic abuse and online abuse. Women's Aid says online abuse can include monitoring emails or social media and using GPS locators or spyware.
Three parts of a home connection matter:
- The router. The router (many providers call it a hub) has two passwords: the Wi-Fi password that lets a device join, and an admin password that opens its settings page. Refuge's wireless guide shows that this page lists the devices connected to your network, and BT, for example, says its Wi-Fi name and password can be changed there, in what it calls Hub Manager. Whoever controls it controls the network.
- The account. Ofcom notes that most telephone contracts are between the provider and one named individual, and that person gives the instructions. It also warns that if your mobile number is on an account in the abuser's name, they can see information such as itemised bills showing the numbers you've called. If a landline comes with your broadband, it's worth knowing whose account its bills go to.
- The accounts around it. The account's email address, shared app logins and location apps can give someone a view of your life without touching the router.
If you still live with the person
When you share a home, obvious changes are the riskiest. Virgin Media, EE and TalkTalk all say that after the Wi-Fi name or password changes, every device has to reconnect with the new details, including theirs. Plan changes like this with an adviser.
Less visible things to know:
- Look for help on a device they can't see. The National Domestic Abuse Helpline's website has a quick exit button. Women's Aid's guide to covering your tracks online warns that private browsing doesn't stop online services seeing what you do and that a search engine may keep its own record of your searches; it says a library, a friend's house or work is the safest place to look for information. GOV.UK says to download the Bright Sky support app only if it's safe and you're sure your phone isn't being monitored.
- What a bill can and can't show. Ofcom's rules for phone providers (General Condition C3.10) require phone providers to make sure that calls to numbers designated as free to the caller, including helplines on those numbers, aren't identified in itemised bills or any other call records they make available to the account holder. GOV.UK lists both 0800 and 0808 numbers as freephone, so every helpline in the table at the end of this guide is covered. Ofcom's guidance for customers makes the same point: a call to a helpline on an 0800 number won't appear on your bill.
- The gaps. Ofcom notes that some landline handsets keep their own list of recent calls, and the user manual may explain how to delete it. The freephone rule also doesn't cover ordinary numbers, such as a provider's 03 customer line, so a call like that could appear on a bill the other person sees.
Securing your router and Wi-Fi when it is safe to
These steps follow Refuge's wireless guide, which was written using a BT hub, so menus on other routers will differ. Our guide to securing your home router and Wi-Fi covers each setting in more depth; the points below focus on taking control back from someone who had access.
1. See what is connected, and record it
Refuge says to sign in to the router by typing its IP address (its network address) into a web browser on a connected device. It says the address is on the back of the router and suggests 192.168.0.1 or 192.168.1.1 as common defaults, but check your own router: on a BT Hub, BT says Hub Manager is at 192.168.1.254 (or http://bthomehub.home), and the admin password is on the Hub settings card on the back unless it has been changed. Refuge notes that some routers use "admin" and "password" as default logins; Virgin Media prints its Hub settings password on a label on the base of the Hub.
Find the list of connected devices and take a screenshot for evidence, as Refuge suggests. Before you remove anything, weigh up Refuge's warning on this exact step: the person harming you may notice they can no longer get on the Wi-Fi, and this could cause some abusers to escalate their abuse. If it's safe, remove the devices that aren't needed. Our guides to seeing what's using your broadband and to someone using your Wi-Fi without permission explain how to work out which entry is which.
2. Consider a factory reset
Refuge describes a factory reset as a way to take back control of a router that was set up by the person harming you, or one you suspect has been compromised. On a BT Hub, you press the reset button on the back for five seconds, and the reset can take up to five minutes. Other routers differ, so check your provider's help pages.
Refuge says that after a BT Hub reset the Wi-Fi name and password go back to the defaults on the hub, and the admin password resets too. Virgin Media says a reset of its Hubs returns the Wi-Fi name and Hub settings password to their defaults. So:
- Every device that used the old Wi-Fi details will have to reconnect, which others in a shared home will notice.
- Anyone who has seen the label or card on the router could use the defaults, so change both passwords straight after the reset.
3. Set new passwords and the right security
- Passwords. The National Cyber Security Centre (NCSC) says to change any default password a device comes with, for example by combining three random words. Make the Wi-Fi password one the other person couldn't guess.
- Security mode. Apple recommends WPA3 Personal, or WPA2/WPA3 Transitional for older devices, or WPA2 Personal (AES). Avoid WEP and TKIP, and never leave the network open. Hiding the network name and MAC address filtering (only letting listed devices join) aren't real protection.
- Updates. Keep router firmware (its built-in software) up to date, as both Apple and the NCSC advise.
4. Use a guest network for visitors
Refuge explains that a guest Wi-Fi network gives internet access but not access to your home network. Give it a strong, unique password different from the main one. Some routers let you limit how many guests can connect or for how long.
5. Switch off remote access you don't need
The NCSC advises switching off remote access on smart devices if you don't need to use them away from your home Wi-Fi, and turning on 2-step verification where it's offered. 2-step verification (2SV) is a second check that it's really you; the NCSC says it usually works by sending a PIN or code, often by text or email, so make sure that phone number or inbox is one only you can get into. Our guide to router remote management explains what these settings do.
Your broadband account, email and bills
Locking the router doesn't change who owns the account; that depends on whose name is on the contract.
Who the provider will talk to
Ofcom explains that unless a power of attorney or third-party bill management arrangement is in place, providers should take instructions only from the named account holder. Virgin Media, for example, needs the account holder to authorise someone else on the call before it will discuss or change the account. In practice:
- If the account is in your name, you can change its password, contact details and who else can manage it.
- If it's in the other person's name, Ofcom says an account someone else took out can't be transferred into your name without their permission, so you may need a new contract in your own name. Our guide to changing the account holder on your broadband explains the routes providers publish.
- If your mobile is on a family plan they control, Ofcom suggests asking your mobile provider for advice: it may be possible to move your number to pay-as-you-go or its own pay-monthly contract, though a credit check might be needed.
- If a contract was taken out in your name without your agreement, see our guide to a broadband contract opened in your name.
Secure the email address behind the account
Password resets usually go to an email address, so secure that first. The NCSC says to use a strong, separate password for your email, because it can unlock many of your other accounts, and to turn on 2-step verification. Its advice on recovering an account someone else has got into adds three checks:
- Look at the email account's filters and forwarding rules. A forwarding rule sends someone a copy of every email, which would let them reset your passwords.
- Change the password on that account and on any other account that used the same password.
- Log every device and app out of the account, usually from the Settings, Privacy or Account options.
If the broadband came with a provider email address, see our guide to a hacked provider email account.
Payments and direct debits
Refuge's joint account guide notes that if a joint bank account is frozen, any direct debits are stopped, so you may need to contact the companies you pay regularly, such as your broadband provider, to set up a new way to pay. If money is tight, our guide on struggling to pay your broadband bill explains what to ask for.
Location, smart devices and shared apps
Broadband is only one route in. Ofcom suggests logging out of messaging and social media accounts on all devices, and logging out of or turning off devices and apps that use your location: Bluetooth trackers, smart watches, fitness trackers, and location-sharing or "find my" apps. It notes apps such as Snapchat and Strava can share location.
Refuge's location guide adds:
- Anyone with access to your Apple or Google account can see where your phone is through its lost-phone features, and family sharing is another route.
- Emergency services and mobile providers can still access a phone's location whenever it's switched on, even if you turn off some sharing.
- Small trackers can be hidden in bags or in gifts given to children, and someone with access to your phone could install spyware.
- Removing tracking can cause escalation and remove evidence; Refuge suggests reporting it to the police and asking them to check the device.
If you've moved, Refuge warns that an ex-partner who can log in to your mobile account may see your new address there, and that shared delivery and shopping accounts keep a history of addresses, so remove addresses or secure or delete the account rather than just uninstalling the app. It also suggests redirecting your post with Royal Mail and asking your phone provider to make your number ex-directory; our guide to keeping your landline number private explains how directory listings work.
Contacting your provider safely
General Condition C5 of Ofcom's rules requires phone and broadband providers to publish and follow clear policies for treating customers whose circumstances may make them vulnerable, including how their needs are recorded and the different ways they can get in touch. Ofcom's guide for providers says you shouldn't have to repeat yourself, and that providers should offer to record your preferred way of being contacted and refer you to specialist trained staff.
Ofcom says it expects providers to treat victims of harassment or abuse fairly and sympathetically, and its guidance for customers (published in May 2025) lists things you can ask for:
- A different correspondence address or a new number, to help keep you safe.
- Closing the account or cancelling the contract if you were forced to take out an unsuitable contract or run up debt. Providers aren't obliged to agree, but you can ask.
- Closing an account without a penalty if the broadband or landline is in your name but you've left because of violence. Ofcom says the provider might be willing to do this.
Pick a safe way to get in touch. A provider's customer line isn't necessarily freephone: BT's extra-help line below, for example, starts 0330, and GOV.UK lists 03 numbers as charged UK-wide numbers, so the bill rule for helplines doesn't protect a call like that. If the phone you'd use is on an account the other person can see, call from a trusted person's phone, or use the provider's webchat on a safer device.
Decide what you want first. Work out which number, email or address the provider should use and which it must not, and whether you want your circumstances noted. Ask to be put through to specialist staff, which Ofcom's guide says providers should do as soon as possible.
What providers offer varies, so ask for your provider's policy. Two examples (checked October 2026):
- BT's vulnerability policy lists relationship breakdown among the life events that can make someone vulnerable. Its extra-help line is 0330 123 4150 (Monday to Friday 8am to 9pm, weekends 8am to 8pm), an 03 number, and with your consent an adviser notes your circumstances on the account.
- Vodafone's vulnerable customer policy has a domestic and economic abuse section: it says it can remove a named contact, change your contact details, change passwords and logins, or arrange a number change. You can add an optional flag so you don't have to repeat yourself, in your online account settings or by calling 191, and it lists webchat as a written option.
Our guide on telling your provider you're vulnerable covers what to say and what records providers keep. Policies change, so confirm anything important with your provider when you get in touch.
Getting online after you've moved out
If you're in a refuge or temporary accommodation and don't want a one- or two-year broadband contract, Ofcom suggests a mobile contract, including SIM-only, with a large or unlimited data allowance. Many allow tethering (sharing your phone's data with a laptop or tablet), but check your provider's policy. Ofcom adds that 4G and 5G routers can be rented or bought without a fixed broadband contract, and can give a better signal than tethering. Our guide to using a SIM-only data plan in a home router explains how that works.
When you're settled, a broadband contract in your own name means you decide who has the passwords:
- If you aren't sure how long you'll stay, rolling monthly broadband contracts avoid a long minimum term; check the notice period before you sign.
- On a low income or certain benefits, a broadband social tariff may be cheaper, and our cheap broadband deals page shows lower-cost packages.
- Compare broadband deals at your postcode. The deals come from our comparison partner; we don't switch you or set up the account, so you order directly with the provider and set your own contact details from the start.
- Browse all UK broadband providers, or a provider such as BT broadband deals or Vodafone broadband deals, and read its vulnerability policy before you order.
On the new router, change the admin and Wi-Fi passwords from the defaults on its label straight away.
Where to get specialist help
These helplines are listed on GOV.UK, which says free, confidential support is available for victims and for worried family and friends. Not every line is open around the clock: the hours below come from GOV.UK or each service's own website (checked October 2026).
Where | Helpline | Number | Hours |
|---|---|---|---|
England | National Domestic Abuse Helpline (run by Refuge) | 0808 2000 247 | 24 hours a day |
Scotland | Domestic Abuse and Forced Marriage Helpline | 0800 027 1234 | 24 hours a day, 7 days a week |
Wales | Live Fear Free | 0808 80 10 100 | 24 hours, 365 days a year |
Northern Ireland | Domestic and Sexual Abuse Helpline (aged 18 or over) | 0808 802 1414 | 24/7, 365 days a year |
UK-wide, for men | Men's Advice Line (run by Respect) | 0808 801 0327 | Monday to Friday, 10am to 5pm; webchat at separate times on its website |
All five are 0800 or 0808 freephone numbers, covered by the bill rule explained earlier. The National Domestic Abuse Helpline's website also offers live chat (Monday to Friday 10am to 10pm, weekends 10am to 6pm, according to the helpline's website) and British Sign Language support (10am to 6pm, Monday to Friday).
For technology in particular, Refuge Tech Safety has step-by-step guides for phones, accounts, location, email, smart devices and wireless routers. Women's Aid has a guide to covering your tracks online.
We're a broadband comparison site, not a support service: specialist advisers can help you decide which steps are safe for you.
Broadband and domestic abuse FAQs
Will my partner know if I reset the router?
They may well notice. Refuge (for BT Hubs) and Virgin Media (for its own Hubs) both say a factory reset returns the Wi-Fi name and admin password to their defaults, so every device using the old details has to reconnect. Refuge warns that changes like this can alert an abuser, so plan a reset with a helpline adviser first.
Can my broadband provider talk to me if the account is in my partner's name?
Only in a limited way. Ofcom says providers should take instructions only from the named account holder, unless a power of attorney or third-party bill management is in place, and an account can't be moved into your name without the holder's permission. A new contract in your own name is the usual route.
Can I get out of a broadband contract I was forced to take out?
You can ask. Ofcom says that if someone forced you to take out an unsuitable contract or run up debt, you can ask the provider to close the account or cancel the contract, though it isn't obliged to. If you've left because of violence, Ofcom says the provider might be willing to close an account in your name without a penalty.
Will a call to a domestic abuse helpline show on the phone bill?
It shouldn't. GOV.UK lists 0800 and 0808 numbers as freephone, and Ofcom's General Condition C3.10 says calls to free-to-caller numbers, including helplines, must not be identified on itemised bills or other call records given to the account holder. Some landline handsets keep their own recent-call list, though, so a safer phone is best if someone could check it.
How can I get online in a refuge without a long contract?
Ofcom suggests a mobile contract, including SIM-only, with a large or unlimited data allowance; many allow tethering, but check the plan's policy. A 4G or 5G home router can be rented or bought without a fixed broadband contract. Check the minimum term of any plan before you sign; once settled, rolling monthly broadband avoids a long commitment.
What should I do before removing someone's access to my devices?
Save any evidence first. Refuge says to keep evidence before deleting messages, removing an abuser's access to your phone or accounts, or reporting content, and suggests screenshotting a router's connected-devices list. It warns that someone who loses Wi-Fi access may notice, and that removing location tracking can cause escalation, so make a safety plan with a helpline first.



