Home Network and Smart Camera Security Checklist

Smart cameras on a separate network from laptops and phones, both connected to a protected home router, beside a five-item home network security checklist

A typical home network now carries phones, laptops, TVs, doorbells, baby monitors, speakers and cameras. Each device is a possible door into the network, and a camera is one of the most sensitive, since it can show the inside of your home. The good news is that a handful of settings do most of the work.

This checklist follows the Federal Trade Commission (FTC) guidance on securing home Wi-Fi networks and home security cameras. For router basics, also see our guides on securing your home Wi-Fi router and changing your router's default password. Menus differ by brand, so use your manufacturer's instructions for exact steps.

Why Cameras Need Special Care

The FTC notes that cameras that stream live video, including doorbell cameras, baby monitors and security cameras, can be hacked. They are typically controlled through an app, so the security of the camera depends on several links: the camera, the app account, the router and your Wi-Fi. A weakness in any one can expose the video.

Part 1: Secure the Router First

Encrypt your Wi-Fi. The FTC says to set your router to WPA3 Personal or WPA2 Personal. WPA3 is newer and better, but both scramble your traffic. If your router only offers WPA or WEP, the FTC calls those outdated and not secure. Try updating the router software, and if WPA2 or WPA3 still isn't available, consider a new router.
Change default settings. Change the default admin username, password and network name to something unique, without your name, address or router brand. There are two passwords to change: the Wi-Fi password and the router admin password. Anyone with admin access could change settings, including the Wi-Fi password.
Keep the router updated. Check the manufacturer's site for newer software and register the router to hear about updates. If your router came from your internet provider, ask whether it sends automatic updates.
Turn off risky convenience features. The FTC recommends turning off remote management, Wi-Fi Protected Setup (WPS) and Universal Plug and Play (UPnP), since they can make your network less secure.
Turn on the firewall. Most routers have one built in, so confirm it is enabled.
Log out as administrator when you finish changing settings.

Part 2: Separate Cameras From Your Main Devices

The FTC suggests considering a separate network for cameras, apart from devices like your computer or printer. If someone compromises your computer or gets onto your main network, they wouldn't automatically have easy access to your cameras. Many routers offer a guest network with its own name and password. The FTC says a guest network also means fewer people have your main Wi-Fi password, and malware on a visitor's phone won't reach your primary network. Check your router maker's website for how to set up a separate network.

Some routers make it easy to put smart devices on the guest network, while others require an "IoT" or second network option. Not every device works well when isolated, so test that the app still connects.

Part 3: Choose and Configure Cameras Carefully

Before you buy

The FTC recommends researching security features. Look for a camera that encrypts account information, livestreams and archived video. If you already have a camera, check the maker's website, the box label or the manufacturer to learn what encryption it supports and how to turn it on. Also look for:

a manufacturer that publishes software updates and a way to hear about them;
two-factor authentication for the camera's cloud account;
the ability to disable remote viewing if you don't need it;
permission levels, so different people can have different access.

After you install it

Replace the default username and password. The FTC says default settings and reused passwords are easy for hackers to find online, so use a strong password you have never used anywhere else. A password manager helps.
Turn on two-factor authentication for the camera's cloud or app account if available. The FTC says it requires something in addition to a password, like a code from email or an authenticator app.
Enable encryption and any firewall setting the camera offers. If you can log in through a web browser, the FTC says the page should start with https, before and after login. If it doesn't, your username, password and stream may not be encrypted.
Update the camera firmware and the app. The FTC says to check the manufacturer's site regularly or sign up for automatic updates, and to set the viewing app to update automatically.
Limit remote access. The FTC advises locking down the devices and accounts allowed to view your feed remotely, and considering a camera that lets you turn remote viewing off, especially if it shows a private area like a bedroom.
Share carefully. If others will watch, use a camera with permission levels. For example, a friend could check on the house while you're away but not watch the livestream when you're home.

Part 4: Everyday Habits

If you work or travel away from home, read whether public Wi-Fi is safe.

Audit your devices. Open the router's connected-devices list and identify everything. Remove anything you don't recognize, and change the Wi-Fi password if needed.
Retire unsupported devices. If a camera no longer gets updates, consider replacing it.
Position cameras sensibly. Avoid pointing them into bedrooms or bathrooms, and think about whether you need audio.
Watch for changes. If a camera moves on its own, plays audio you didn't trigger or shows unknown logins, treat it as a possible compromise.
Be wary of scam messages. Fake security alerts saying your camera account was locked are common phishing lures. Go to the official app instead of clicking links.

If You Think a Camera Was Hacked

Unplug the camera or turn off its power and disconnect it from Wi-Fi.
Change the password on the camera's account and any account that shares that password. Turn on two-factor authentication.
Sign out of all sessions in the app if the option exists, and remove unknown users.
Update the firmware and the router. Change the router admin and Wi-Fi passwords.
Consider a factory reset according to the manufacturer's instructions, then set the camera up again with new credentials.
Contact the manufacturer for support, and report serious crimes such as stalking or extortion to local police. You can also report scams to the FTC at ReportFraud.ftc.gov.

Frequently Asked Questions

Is WPA2 still okay?

The FTC says both WPA3 Personal and WPA2 Personal will encrypt your traffic, with WPA3 being newer and best.

Do I need a VPN for my cameras?

Not usually. Focus on a strong router, a strong camera password, updates and two-factor authentication first.

Should I disable remote viewing?

If you never use it, disabling it reduces exposure. The FTC suggests considering cameras that let you turn it off.

Are cloud cameras safe?

They can be reasonably safe when the account has a unique password and two-factor authentication, and the company provides encryption and updates. Research the maker before buying.

How often should I check for updates?

Turn on automatic updates wherever available, and check the manufacturer's site periodically for devices that don't update themselves.

Related Guides

Conclusion

Securing a home network is mostly a one-time setup followed by light upkeep. Encrypt the Wi-Fi with WPA3 or WPA2, change the router and camera defaults, turn off risky features, separate cameras onto their own network, use unique passwords with two-factor authentication, and keep everything updated. These steps remove the easy openings that attackers rely on.