Smart Home Devices & Cameras
Smart speakers, video doorbells, cameras, locks, thermostats, baby monitors and appliances make homes convenient, but each one is a small computer on your network. Weak passwords and old software have let strangers watch cameras, talk through baby monitors and use devices to attack others. A few settings make most of them far safer.
- Homeowners
- Renters
- Families
What can go wrong
- Camera and microphone hijacking: attackers who guess or steal a password can watch and listen. Stories of strangers talking to children through cameras are real.
- Account takeover: reused passwords from data breaches let criminals log in. See Data Breaches.
- Network entry: an insecure device can give attackers a foothold in your home network, to reach computers and phones. See Home Wi-Fi & Router Security.
- Botnets: hijacked devices can be used in large attacks on other websites without you noticing.
- Physical risks: smart locks, garage doors and alarms that fail or get hacked can lock you out or leave the home open.
- Privacy: companies collect video, audio, schedules and habits. Data can be shared, sold, subpoenaed or exposed in a breach. See Online Privacy & Data Brokers.
- Abuse: abusers can use shared accounts, cameras and location features to monitor and control others. See Stalkerware & Trackers.
Before you buy
- Choose reputable brands with a record of security updates, a clear privacy policy and support for several years. Be wary of unknown cheap cameras and no-name devices.
- Check security features: two-factor authentication, encrypted video storage and transmission, automatic updates, and the ability to change the default password. Some products carry security labels or certifications. A US government cybersecurity label program for smart devices has been set up, so look for it where it applies, and verify claims.
- Read the privacy policy: what is recorded, where it’s stored (device, cloud), how long, who can see it, whether employees or partners can view clips, and how to delete data.
- Think about whether you need it. Fewer connected devices means fewer risks. Prefer devices that work locally, without a cloud account, when possible.
- Plan for the end: find out how long the maker supports the device with updates. Unsupported devices become security holes.
Setting up safely
- Change default passwords right away, and use a strong, unique password for each device and account. Use a password manager. See Strong Passwords and Password Managers.
- Turn on two-factor authentication for the app account. See Two-Factor Authentication.
- Keep software updated. Enable automatic updates for devices, apps and your router. See Software Updates.
- Put smart devices on a separate network. Use your router’s guest network or an IoT network, so a compromised camera can’t reach your computers and phones. Secure the router with a strong password and WPA3 or WPA2 encryption. See Home Wi-Fi & Router Security.
- Turn off features you don’t use: remote access, universal plug and play (UPnP), voice purchasing, microphones and cameras.
- Limit sharing and permissions. Give family members their own accounts instead of sharing a login, and review who has access regularly. See App Permissions.
- Check privacy settings for data collection, recording history, voice recordings and sharing with third parties, and delete old recordings you don’t need.
- Secure the phone that controls the devices with a screen lock, updates and no jailbreaking. See Smartphone Security.
Cameras, doorbells and baby monitors
- Placement: use cameras outdoors and in common areas, and don’t put cameras in bedrooms, bathrooms or other private spaces. Tell guests, nannies and cleaners about indoor cameras. Laws on recording audio and cameras in homes and rentals vary, so check them.
- Point cameras at your own property and avoid recording neighbors’ windows or yards, which can cause legal trouble and conflict.
- Prefer encrypted video and local storage options, such as a memory card, if you don’t want cloud storage. Check how clips are protected.
- Baby monitors: non-Wi-Fi monitors (digital radio) are less exposed than internet-connected ones. If you use a connected monitor, secure the account and the router. See Kids Online Safety.
- Cover or turn off cameras and mute microphones when not needed. Many devices have a physical shutter or switch.
- Watch for signs of hijacking: the camera moves on its own, you hear voices, the light comes on unexpectedly or there are unfamiliar logins. Change the password, sign out all devices and update the firmware.
Smart locks, alarms and garage doors
- Keep a physical backup, such as a key or code, in case of battery or network failure.
- Use unique codes, remove old guest codes and review activity logs. Check access when tenants, roommates or contractors change.
- Update firmware and use two-factor authentication for door and garage accounts. See Garage Doors.
- Remember that smart locks and alarms aren’t a replacement for ordinary safety devices such as smoke and CO alarms.
Selling, gifting, moving or renting
- Factory reset devices and remove them from your account before selling or giving them away. Remove old accounts, and delete saved recordings.
- In a new home or rental, reset or change any existing smart locks, cameras and thermostats, and ask previous owners to remove their access.
- Hosts and guests: short-term rental hosts must disclose indoor cameras, and guests may check for hidden devices. Report hidden cameras to the platform and police.
- Dispose of devices responsibly. Recycle electronics and batteries properly. See Household Chemicals.
Smart home checklist
- I bought devices from reputable brands that publish updates
- Every device and account has a unique strong password and two-factor authentication
- Automatic updates are on; smart devices are on a separate guest or IoT network
- Cameras and microphones are off or covered when not needed, and none are in private spaces
- I reviewed privacy settings and who has access, and I delete old recordings
- I factory reset devices when selling, and reset those I inherit in a new home
Standards & references
Last updated: