We may earn money when you buy through our links.
4 min readSafeWise experts have years of firsthand experience testing the products we recommend. Learn how we test and review.
Reviewed by IT security expert Pete Canavan
While smart devices can make daily tasks easier, connecting everyday devices to the internet means there’s a potential for unwanted cyber intrusion.
It’s important to first size up the security of each connected product you bring into your home. Once everything is online, take the following precautions to keep your smart home safe.
Our hacking-proof tips work for all sorts of brands and products. But if your smart home is partial to a specific brand, we’ve got a Guide to Alexa and Guide to Google to help you squeeze out your tech’s full potential.
By signing up, you agree to our Terms and Conditions and Privacy Policy.
As you look for smart home devices, check to see that they have security features in the first place. Most major brands shouldn’t pose a problem on this front, but it pays to see if there are reviews from reputable publications if you come across an unfamiliar brand.
When possible, choose Power over Ethernet (PoE) devices instead of wireless ones since PoE is the more reliable and secure choice. A hacker must get past your network's firewall to hack into a PoE device, which is a lot harder than busting into a Wi-Fi connection.
PoE cameras include some ZOSI, EZViz, and Lorex models, to name a few.
After you get the devices you want, take time each month to check for updates. And as tempting as it may be to snooze (or ignore) update notifications, these updates strengthen your line of defense against malware and other online threats.
As you tap through the smartphone app to set up a device, make sure it doesn’t create a default username or account for you. This is especially true for wireless routers that help your smart home run smoothly, not just smart devices themselves.
One of the first things hackers look for is a list of default usernames, which does half of their work for them. Changing the default username gives you more breathing room and takes you off the list of easy targets.
While some smart devices still use default usernames and passwords, it’s falling out of practice as companies look to create more secure devices for informed consumers. Instead, you’ll probably create an account using your email address, which isn’t as readily available to hackers.
Don’t lock your smart home behind a cheap luggage lock when it needs a deadbolt. The best thing you can do is to set up a secure password using a password manager. With a password manager, you don’t have to remember dozens of passwords or hit the “Forgot your password?” link each time you log in.
Most password managers generate random passwords that are difficult for hackers to crack, even with the best tech. The password manager also helps you track how long since you last changed your password. Changing passwords a couple of times a year helps keep hackers at bay.
Make sure you create an extra-strong master password to ensure the password manager doesn't get hacked. Otherwise, hackers will have all of your passwords at their fingertips.
If you share smart home devices with other members of your family, make sure they each have their own account (rather than passing along a shared password for one account).
A strong password doesn’t always need numerals and special characters unless your smart device sets those conditions. Where possible, use a passphrase of at least six random words with spaces between them, which is easier to remember than a string of numbers and characters. To learn more about creating passphrases, check out this helpful page about Diceware.
When you enable two-factor authentication, it’s a lot like a second password in case a hacker gets past your username and password. Even if they input the right login info, they won’t get access without a special code (usually sent via text message or email). The best part is that you get a notification of suspicious activity so you can change your password.
Most smart devices don’t have two-factor authentication, but Nest Cam*, Ring Alarm, and Arlo all plan to add the feature later this year. Until this feature becomes more common, it’s a good idea to use a password manager with two-factor authentication.
Have you ever seen someone use a $100 bill at the store, only to have the cashier mark it with a special pen to see if it’s genuine? This is actually a form of two-factor authentication that works based on the type of paper in authentic and counterfeit bills.
Public Wi-Fi networks are not secure because a hacker can monitor unencrypted traffic and send out malware. All online activity is vulnerable, including when you control smart home devices.
For quick commands, like turning on the lights at night or locking your smart lock, you won’t use much data, so it’s better to use your cellular plan instead of a public network.
For more intensive tasks like streaming from security cameras and video doorbells, a cellular network should work fine, but finding a secure Wi-Fi network is ideal if you don’t have unlimited data.
If you must use an unsecured public Wi-Fi network, use a Virtual Private Network (VPN) to encrypt your data so watching eyes can’t read it.
Learn more in our guide to public Wi-Fi safety.
There’s a new type of product called a security hub that’s similar to an antivirus program, but it works across your Wi-Fi network instead of just a computer or smartphone. It can help create a VPN for your smart home.
While we haven’t tested any cybersecurity hubs yet, you can look into popular models like the Bitdefender Box.
Some smart home apps collect data about how you use them. Look into what it’s gathering and deny app permissions if you don’t use specific features like location data and Bluetooth connectivity.
One of the biggest advantages of smart home devices is that they talk to each other, but this can work against your security.
Whether or not you choose to protect your smart home on the digital front is up to you. But we think the extra effort is worth it.
Contributing writer: Mitchell Klein
*Google, Google Nest, and other related marks are trademarks of Google LLC.
Brand | Best for | Starting price | Specs | Standout feature | Learn more |
| Best identity theft protection | $179.50/yr. | $1 million recovery insurance | Two-factor authentication | View Plans | |
| Best VPN | $59.98/yr.** | Works on 6 devices | 5,100 servers 60 countries | View Plans | |
| Best parental control | $39/mo. | Unlimited devices | Email and social media monitoring, powerful parental controls | View Plans | |
| Best antivirus/malware software | $59.99/yr.* | Protects up to 10 devices | Includes VPN and password manager | View plans | |
| Best password manager | $0.00 | Unlimited devices with Premium plan | VPN and dark web monitoring with Premium plan | View Plans |
Amazon.com price as of post date. Offers and availability may vary by location and are subject to change. Read full disclaimer.
*First year only. Regular price $99.48/yr.
**First year only. Regular price $59.99/yr.
Subscribe to SafeWise for updates on safety news, product releases, and deals!
