Guide · 6 min read
Securing your cameras and smart home: what the seller won't tell you
Cameras and smart devices connected to the network can be an entry point for attackers. Passwords, privacy and updates: a list of what to ask for before you sign.
Installing cameras or a smart home means adding network-connected devices inside your home or office. These devices can be an entry point for anyone looking for a weakness. The seller usually talks to you about resolution and features, and doesn't touch on security. This is what you need to know, and ask for, before you sign.
1. Change default passwords immediately
The default password is known to anyone who looks. Each device should have its own strong, different password, and the contractor should hand it to you in writing, not keep it to themselves.
2. Don't open ports to the internet
Opening a port on the router "to see your cameras" makes the device visible to anyone. Use the manufacturer's app with a protected account, or a VPN.
3. Separate smart devices from your main network
Put cameras and smart devices on a network separate from your computer, phone and files. That way, if someone breaks into a device, they can't reach the rest of your devices.
4. Updates
Companies release updates that close vulnerabilities. Ask: who updates the devices? And for how many years will the company keep releasing updates for this model? A device that no longer gets updates becomes a liability over time.
5. Protect your own account
Many breaches are not in the device but in the account: a password reused from another site. Use a unique password and enable two-step verification, and do not share the app account with anyone you don't trust.
6. Privacy: the camera should not cover everywhere
Point cameras at your property and its boundaries, and avoid neighbors' homes and private places. Audio recording has special considerations. Review the regulations in force in the Kingdom, including the personal data protection law, and if you have staff or visitors, tell them the cameras are there.
7. Who sees your recordings?
Ask where the video is stored, who has viewing permission (the contractor? the company? maintenance technicians?), and how access is revoked for someone who leaves the job. A few specific permissions are better than a shared account.
A quick checklist before handover
- New passwords, handed to you.
- No open ports, and remote access through a secure channel.
- A separate network for smart devices.
- Two-step verification on your account.
- A written update plan.
- Viewing permissions assigned to named people.
No one can promise absolute security. But with these steps you close most of the doors attackers come through, and you avoid the mistakes we see often.
Frequently asked questions
Can my cameras be hacked?
Any network-connected device can be targeted. You reduce the risk with strong passwords, not opening ports, updating devices, separating the network, and enabling two-step verification.
What is a separate network for smart devices?
A second network (or a VLAN) for cameras and smart devices, isolated from the network of your personal devices, so an attacker cannot move from one device to the rest of your devices.
Is it allowed to film the street or a neighbor's house?
Point the cameras at your property and its boundaries and avoid private places. Review the regulations in force in the Kingdom, including those on personal data protection.
Who should hold the passwords?
You. The contractor hands them to you in writing at handover, does not keep a copy without your knowledge, and any passwords the technicians used are changed after the work is finished.