Do you have a smart home? Here are 7 security settings you should check

Smart light bulbs, cameras, outlets, a TV, a robot vacuum, and a router connecting them all. According to one of the latest reports on home network security, the average household today has approximately 24 connected devices, and each one can be a weak link. Check these 7 settings once, and then you’ll only need to do so occasionally.

Why This Affects You

Devices in the home are attractive to attackers not because you’re interesting, but because there are so many of them and they’re often poorly protected. According to the same report, home networks are under constant automated pressure: devices behind the router detect an average of about two scans per day, mostly searching for open services. Smart TVs, smart plugs, and network-attached storage devices accounted for the largest share of recorded vulnerabilities.

Attackers don’t need anything sophisticated to do this. Infected devices are recruited into botnets, which are used to overload third-party services or to hide their activity behind your IP address. In early November 2026, a botnet comprising more than 1.3 million devices was compromised; many of these had been infected during manufacturing, not after being brought into the home. Lesson: The risk lies not only in what you do, but also in what you buy.

1. Router: The Heart of the Entire Network

The router is the gateway between your home and the internet, so start here.

• Change the default administrator password (not just the Wi-Fi password). Default login credentials are the first thing attackers try.
• Update the firmware and enable automatic updates if your router offers them.
• Disable remote management over the internet if you don’t need it, and turn off WPS.
• Set up WPA3 encryption if your router and devices support it; otherwise, use WPA2 with AES. Do not use older encryption methods.
• Choose a long and unique Wi-Fi password.

If you have a router from your internet service provider, some settings may be managed by the provider. In that case, consult with them before making any changes, and do not disable anything you did not set up yourself.

2. Unique Passwords and Manufacturer Accounts

Every camera, hub, or manufacturer app has its own account. Use a different password for each one (a password manager will handle this) and enable two-factor authentication wherever it’s available. If the device allows you to change the default password or username, do so immediately during the initial setup.

3. Device Updates

Smart devices receive updates less frequently than phones, but they do receive them. Enable automatic updates in the manufacturer’s app and check every once in a while to make sure the device is actually running the latest version. For devices that don’t connect to the internet often (cameras, garage outlets), set a reminder in your calendar.

4. A Separate Network for Smart Devices

This is the most effective single measure. If a device becomes infected, it shouldn’t be able to access your computer, phone, or files.

• Enable a guest network and connect your smart devices (light bulbs, outlets, TV, vacuum cleaner) to it. If your router offers client isolation, enable it.
• Keep your computer, phone, and network storage on the main network.

Note:
Some devices can only be set up or controlled when your phone is on the same network. If something stops working, you can move the device back to the main network temporarily during setup, or use the separate network only for the highest-risk devices, such as inexpensive cameras.

5. Unsupported and Old Devices

A device that no longer receives updates eventually becomes a permanent security vulnerability. For every smart device, find out:

• how long the manufacturer supports it,
• whether it still receives updates,
• what will happen if the manufacturer discontinues support.

If support has ended, replace the device, or at least isolate it on a guest network and disconnect it from the internet, if its features allow it. Before purchasing, check how long the manufacturer promises to provide security updates, and be wary of very cheap, unbranded devices—especially TV boxes—which may come with unwanted software pre-installed.

6. Turn off what you don’t need

• UPnP and port forwarding on your router. These features allow devices to open access from the internet without your knowledge.
• Remote access to cameras, if you don’t use it. If you do need it, use the manufacturer’s secure method (an account with two-factor authentication), not an open port.
• Microphones and cameras you’re not using, or a physical privacy cover.
• Unnecessary permissions in smart device apps.

7. Overview: What’s Connected and Who Has Access

Open the device list on your router and go through it. Do you recognize everything? Name your devices so you can immediately spot any unfamiliar ones in the future. Also check shared access permissions in apps (family members, former roommates, former guests) and remove those who no longer need them. When moving or selling a device, always reset it to factory settings and remove it from your account.

Quick Checklist

1. Changed router administrator password and up-to-date firmware.
2. Unique passwords and two-factor authentication on manufacturer accounts.
3. Automatic device updates enabled.
4. Smart devices on the guest network.
5. List of unsupported devices and a plan for replacing them.
6. UPnP, WPS, and unnecessary remote access disabled.
7. Overview of connected devices and shared access.

Summary

A secure home doesn’t require any special knowledge. Just secure your router, keep your smart devices separate from your computer and phone, keep them up to date, and replace anything that’s no longer supported. Go through the list once now, and then set a reminder for spring and fall.