In short
To protect a connected home or business, change factory passwords, keep devices updated, put cameras and automation on their own network, avoid opening router ports and access remotely through a VPN or the manufacturer’s service with two-factor authentication. Simple measures that prevent most problems.
The measures that matter most
- Unique, strong passwords on every device and account; never the factory defaults.
- Firmware updates for cameras, recorders, routers and controllers.
- Two-factor authentication on apps and cloud accounts.
- Separate networks: guests, personal use and devices (cameras, automation).
- Do not open router ports to view cameras; use a VPN or the manufacturer’s secure access.
- Disable unused services such as UPnP or unencrypted HTTP access.
Why separate the network
If a cheap device is compromised, a separate network stops it reaching computers, the NAS or the recorder. Professional networks do this with VLANs and firewall rules; at home, at the very least, with a separate WiFi network for devices.
When hiring an installer
- Ask for the credentials and documentation of the installation.
- Ask how remote access works and who has it.
- Agree who applies updates and when.
- Choose manufacturers that publish security updates regularly.