Smart home security

Networks

Devices shipped with a default password that nobody ever updates. What to configure, what to move to the guest network and what not to buy.

A smart plug costs less than a dinner and gets updates for a year, if at all. Meanwhile it sits on the same network as your work laptop and your network drive — and that, rather than the plug itself, is the problem.

What is at stake with each device

DeviceWhat it gives away
Camera and video doorbellHigh — a stranger sees and hears what happens at home
Smart speakerMedium — access to query history and linked services
Robot vacuumMedium — a floor plan of the flat, sometimes a camera
Smart bulbLow — harmless in itself
Smart lockHigh — physical access to the flat
TelevisionMedium — streaming service accounts
Even a low-risk device matters: it is a foothold on the network from which the others can be reached.

What to do at setup

  1. Change the factory password

    Lists of default passwords by model are published openly. This is the single most important step and the one most often skipped.

  2. Put the device on the guest network

    Then an infected plug cannot reach your laptop. Ten minutes of setup — how exactly.

  3. Switch off remote access if you do not use it

    Many devices are reachable from the internet by default. If you only control it from home, that is a door for nothing.

  4. Check for updates

    At setup and twice a year afterwards. If the manufacturer has abandoned the model, treat it as having an expiry date.

  5. Use a unique password on the linked account

    The manufacturer's account holds control of every device you own from them; a breach of it is worse than a breach of any single gadget.

Before buying

Router settings that affect every device at once are in home network security.

Copied