Every connected device is a small computer on your network — and most people never change a single default. Following NIST researcher recommendations and 2026 security guides, here is the checklist that closes the doors attackers actually use.
1. Kill the default passwords
Unique, strong passwords on every device and app prevent the majority of automated attacks. A password manager makes this painless. While you are at it, change your router’s admin password — separate from the Wi-Fi password.
2. Turn on two-factor authentication
Use an authenticator app rather than SMS for the accounts that control your home — Amazon, Google, Apple, and each device brand’s app.
3. Segment your network
Most routers offer a guest network. Put smart home devices on it, separate from your laptops and phones. If a cheap plug gets compromised, the attacker cannot pivot to your banking. Enable WPA3 if your router supports it.
4. Keep firmware updated
Outdated firmware is the #1 way smart devices get compromised. Enable automatic updates wherever possible, and apply critical patches quickly. Devices that no longer receive updates should be retired — an unpatched camera is a liability, not a bargain.
5. Prefer physical privacy controls
A physical mute switch or camera shutter beats any software setting. When buying, favour devices that offer them.
6. Keep footage local where possible
Cameras and doorbells with SD-card or NAS storage keep your video inside your own walls. What never leaves the house cannot leak from a server.
7. Audit twice a year
Open your router’s device list. Anything you cannot identify gets investigated or blocked. Remove apps and accounts for devices you no longer own.
One evening of setup buys years of quiet security — do it before you add the next gadget, not after the first scare.