63char WPA2 Personal encrypt
That's all you need to do. It's not going to be broken into using present day technology. It's not just the best thing, it's the only thing.
Not broadcasting the SSID won't help.
Even creating a wireless/wired boundary won't be as good as setting WPA2 or WPA. If you do want to separate wired from wireless, I've never used it, but there's a feature in the Advanced - Wireless section to segment your wireless from your wired network.
That's all well and good, but then the next step is a brute-force attack (fancy way of saying rapid-guessing) into your router password and that's significantly easier than breaking WPA or WPA2.
Just set WPA2 or WPA with a strong passphrase of non-dictionary words, like
"strongqpassphrase ofHnon-dictionary3words" <--- won't be guessed by today's technology