Smart devices using : Smart devices are the everyday items that connect to the internet. This can include both ‘hi-tech’ items (think smart speakers, fitness trackers and security cameras), and also standard household items (such as fridges, lightbulbs and doorbells). Unlike conventional household items, you can’t just switch on a smart device and forget it; you’ll need to check a few simple things to protect yourself.
This page explains how to set up and manage your smart devices to keep your home – and your information – safe. Information on your consumer rights can be found on Which? and Citizens Advice.
What is the risk from using Smart Devices?
Just like a smartphone, laptop or PC, smart devices can be hacked to leave your data and privacy at risk. Very rarely, devices have been controlled by somebody else managing the device, often to frighten the victim.
Children’s GPS and fitness trackers (BBC News)
Security cameras could be hijacked (BBC News)
Smart home gadgets in domestic abuse warning (BBC News)
The NCSC and DCMS are encouraging manufacturers to make (and keep) their products secure, and have developed a code of practice (PDF) to help keep consumers safe. There’s also lots you can do to protect yourself.
Setting up your device
Before you buy,
check reviews of the product and the manufacturer. For information about how to set up a specific device, refer to the manufacturer’s documentation. This may be a printed manual or ‘getting started’ guide that came with the device, on the manufacturer’s website (check the Support area first), or within the app itself.
Some smart devices will work without being connected to the internet. Others may need an internet connection, a smartphone app, or for you to create an account. Again, check their website for details.
Check the default settings
Some devices may be insecure when they are first switched on, so you’ll need to take some quick steps to protect yourself.
If the device comes with a password that looks easily guessable (for example admin or 00000), change it.
Easily guessable passwords can be discovered by cyber criminals, so make sure you choose a secure one.
Managing your account
If the device or app offers 2-step verification (2SV), turn it on. 2SV provides a way of ‘double checking’ that you really are the person you are claiming to be, and makes it much harder for criminals to access your online accounts, even if they know your password.
Some products can be controlled when you’re away from your home Wi-Fi, by creating an online account linked to your device. You can also often back up your settings and data. So you can recover them if you need to wipe your device. However, accessing your device like this can make it easier for other people online to access them without your permission, so make sure you have changed default passwords and enabled 2SV if available.