A home security camera, a baby monitor, a router, a smart TV or a plug you can switch on from your phone: the average home now has dozens of internet-connected devices. They are very convenient, but many were built with little thought for security. Cameras shipped with default passwords and routers not updated for years are among the easiest targets online.
What can happen? The scariest scenario is a stranger watching a camera inside your home; there are sites online that collect feeds from cameras nobody secured. A more common and less noticeable scenario is that the device is hacked and joins a 'botnet', a network of remotely controlled devices used to attack others, such as DDoS attacks that knock sites offline. A third: a hacked device serves as an entry point into the rest of the home network, including computers and phones.
Six steps that remove most of the risk. One: immediately change every default password, on cameras, the router and any other device, to a long, unique one. Two: update device software and turn on automatic updates if available. Three: turn on two-step verification on the camera app account. Four: if your router allows it, create a separate 'guest network' for smart devices so that even if one is hacked it cannot reach your computers. Five: turn off remote access and services you do not use. Six: buy from well-known makers that provide security updates for years.
Another question worth asking: where should the camera be at all? A camera aimed at the entrance or yard is very useful. One in the bedroom or children's room calls for double caution, and sometimes it is better to skip it. Many cameras also let you turn off recording when you are home, or cover the lens.
And old devices? A router or camera the maker no longer updates stays vulnerable to every new flaw discovered. If a device is several years old and has not had an update in a long time, consider replacing it. It is a small expense compared with the risk of someone watching your home, or using it to attack others.
