Login to your router, and change your encryption to WPA/PSK (anything but WEP)

Key in a longer password with mixture of capital alphabets, number and special characters.

Then, try to change the password of your router.

After this, the only way they can access your Internet conn is by hard resetting your router, in which you can instantaneously find out.