Smart cameras and video doorbells are among the most popular smart home security devices. They let you see who is at the door, check on a package, or keep an eye on your home while you are away. Because these devices connect to your home network and often stream video to the internet, they need the same careful security setup as any other internet-connected gadget. A few straightforward steps can help you protect your privacy and keep unwanted visitors out of your camera feeds.
Start with your router
Your home router is the gateway that all your smart devices use to reach the internet. The Federal Trade Commission (FTC) advises that securing your router is the first step to protecting every connected device in your home. Begin by changing the default administrative username, password, and network name (SSID) to something unique that does not include your name, address, or router brand. The Cybersecurity and Infrastructure Security Agency (CISA) adds that default credentials are often publicly available and leaving them unchanged makes it easy for an attacker to take control of the router.
CISA’s home network guidance and its Project Upskill module both stress the importance of using the strongest wireless encryption your router supports. Choose WPA3 Personal or, if that is not available, WPA2 AES (also called WPA2-PSK). Older encryption types such as WEP, WPA, or WPA2 TKIP are not considered secure. If your router only offers those older options, CISA recommends contacting your internet service provider for an upgrade or replacing the router.
Several convenience features can create security gaps. CISA and the FTC both recommend disabling Wi‑Fi Protected Setup (WPS), which can be brute-forced by an attacker. Turn off Universal Plug and Play (UPnP) unless you have a specific, short-term need for it; malware can use UPnP to bypass the router’s firewall. Also disable remote management so that nobody can change your router settings over the internet. Finally, set up a guest Wi‑Fi network with its own strong password. CISA’s Project Upskill module suggests connecting smart home and other IoT devices to the guest network when they only need internet access, because this stops them from seeing other devices on your main network and reaching your router’s administration page.
Set up each camera or doorbell securely
Once the router is locked down, turn your attention to the camera or doorbell itself. The UK National Cyber Security Centre (NCSC) explains that many smart devices are not secure right out of the box, so you need to check a few settings before relying on them. The first task is to change any default password. If the device came with a preset password, replace it with a strong, unique one. The NCSC suggests combining three random words to create a password that is both long and memorable. CISA echoes this, warning that default passwords are easily found online and offer no real protection.
Both the NCSC and the FTC recommend turning on two‑step verification (also called two‑factor authentication or multi‑factor authentication) whenever the device or its companion app offers it. This extra check, such as a code sent to your phone, makes it much harder for someone to log in even if they learn your password. The FTC also advises against reusing a password you already use on another account, because stolen credentials from one breach can open the door to others.
Many cameras and doorbells let you view the live feed from anywhere via the internet. If you do not need that remote access, switch it off. The NCSC notes that disabling remote access when you are away from your home Wi‑Fi reduces the ways an attacker can reach the device. The FTC similarly suggests disabling any feature you will not use, including remote management, to shrink the attack surface.
Keep software and firmware up to date
Manufacturers release updates to fix security flaws and improve performance. The NCSC urges you to switch on automatic updates if the device offers that option, and to install manual updates as soon as they are prompted. CISA’s guidance on IoT security and home network security both describe software updates as one of the most effective steps you can take, because patches close vulnerabilities that attackers already know about. The FTC adds that you should also keep the companion app on your phone up to date, using the latest version available.
If a device no longer receives updates from the manufacturer, it becomes easier to hack over time. The NCSC compares the support end date to a “use by” date and recommends checking the manufacturer’s website to see how long the product will be supported. A new UK law that took effect in April 2024 now requires smart device makers to state that support period, so look for that information when you buy a camera or doorbell.
Monitor and manage device access
For IP cameras, including security cameras and video doorbells, the FTC suggests checking the access logs regularly. You can usually find these logs in the device’s administrative settings. Look for IP addresses you do not recognize or access times that do not match your normal patterns. Unusual entries may indicate that someone else has gained access to the feed.
CISA recommends using your router’s management interface to monitor for unknown devices joining your network. Many routers let you see a list of connected clients, sometimes labeled “wireless clients” or “DHCP clients.” If you spot a device you do not own, consult the router manufacturer’s support site for instructions on blocking it. The NCSC adds that if you think someone has taken control of a camera or doorbell, you should reset it using the steps provided on the manufacturer’s website.
Physical placement and network segmentation
Where you put the router and the camera matters. CISA’s home network guidance points out that Wi‑Fi signals often reach beyond your property, which could allow someone outside to attempt to connect. Experiment with router placement and signal strength settings to limit how far the signal travels. Also store the router in a secure physical location; anyone with physical access could press the reset button and use the default credentials printed on the label to get into your network.
Connecting smart cameras and doorbells to a guest Wi‑Fi network, as CISA’s Project Upskill module advises, adds a layer of separation. Even if a camera were compromised, the attacker would not easily jump to your laptop or phone on the main network. If your router does not offer a guest network option, consider whether you can place the smart devices on a separate virtual LAN, but for most homes the guest network is the simplest tool.
What to do if you suspect a problem
If a camera or doorbell behaves strangely, freezes, or shows signs of unauthorized access, the NCSC recommends visiting the manufacturer’s website for support information. In many cases a factory reset, performed according to the manufacturer’s instructions, will return the device to its original state and remove any malicious configuration. The NCSC also has guidance on resetting devices and on buying and selling second‑hand smart products. CISA reminds users to back up important data regularly, though for cameras that typically means saving any footage you want to keep before a reset, because a factory reset will wipe the device.
Frequently asked questions
Should I connect my smart camera to the guest Wi‑Fi?
Yes, if your router has a guest network option. CISA’s Project Upskill module recommends connecting smart home and IoT devices to the guest Wi‑Fi when they only need internet access. This prevents the camera from discovering other devices on your main network and stops it from reaching your router’s settings page. Create a separate, strong password for the guest network.
How often should I update my camera’s firmware?
The NCSC advises switching on automatic updates so that the device installs new firmware as soon as it is available. If automatic updates are not an option, install updates when the app or manufacturer’s website prompts you. CISA and the FTC both stress that applying patches promptly is one of the most important habits for keeping devices secure. There is no fixed schedule; the key is not to ignore update notifications.
What if I forget my camera’s password or suspect it has been hacked?
The NCSC says you should reset the device using the instructions on the manufacturer’s website. A factory reset will erase all personal data and return the device to its out‑of‑box state, after which you can set it up again with a new, strong password and two‑step verification. If you are unsure how to perform the reset, look for the support section on the manufacturer’s site or refer to the NCSC’s guidance on resetting smart devices.
For more step‑by‑step advice on choosing and configuring smart home security devices, visit our Smart Security category. You can also explore the broader Smart Home section or read Smart Home for Beginners: Which Devices to Start With if you are building your first connected home. When you are ready to install new gear, our Smart Home Setup guide walks you through the process, and Gadget Troubleshooting Basics can help if something does not work as expected.
