Skip to content
Smart-home security · Essential guide

How to review the security of your connected home

Cameras, robot vacuums, smart lights and routers make everyday tasks easier. This guide explains which settings to check first, without unnecessary fear or complex procedures.

Reviewed: · Editorial synthesis of official guidance; not an independent device audit.

1. Start by identifying connected devices

The Internet of Things (IoT) describes everyday objects that communicate with apps, online services or your home network. Smart cameras are only one example: lights, televisions, robot vacuums, plugs and appliances may also connect. Before changing settings, make a simple list of devices and the apps controlling them.

Spain's Interior Ministry recommends keeping track of connected equipment. For a household, knowing which devices and accounts you use is a useful first step. You do not need network-scanning software or to enter your Wi-Fi password on a third-party site.

2. Check updates and the support period

A camera or light can receive security updates too. Look for updates in the official app and consider automatic updates when supported. Check whether the manufacturer still supplies fixes for your exact model. The NCSC advises checking product support when choosing smart devices. In April 2026, NIST revised its guidance for manufacturers, covering support and ongoing maintenance.

For real examples, TP-Link documents firmware updates in its Tapo app, and Philips Hue publishes software release notes for smart lights. These are manufacturer-specific examples, not instructions for all brands. Do not disconnect power during a firmware update.

3. Protect the account controlling each device

If the device uses an online account, use a long, unique password. Replace default credentials where applicable, avoid reusing other account passwords and enable two-step verification where available. A camera's privacy also depends on which people have been granted permission to view recordings. The FTC explains these controls for home security cameras.

For a specific example, TP-Link provides official steps for two-step verification in Tapo. RUSADIX does not need your credentials to run its checklist. If you need a new password, try the local password generator.

4. Review Wi-Fi and router settings without guessing

The router connects many household devices. Ask your provider or manufacturer about updates and confirm an appropriate wireless security setting, such as WPA2 or WPA3. The FTC also recommends checking the router admin password and considering a separate network for some connected devices when supported.

Important: do not change your Wi-Fi name, password or unfamiliar settings, and do not factory-reset your router without a plan. Cameras and other equipment can lose connectivity and require setting up again.

5. Decide who can access the device and from where

Do you need to view a camera while away from home? If not, you may be able to disable remote viewing using official instructions. Review shared users, cloud recordings, microphone permissions and camera access only where your model offers those controls. The aim is to match the settings to your needs, not to disable every connected feature: alerts and automations may rely on internet access.

For robot vacuums, check app permissions and camera or mapping features only if present on your model. Smart lights may instead depend on an app account and a hub or bridge.

6. Tackle basic checks before advanced configuration

Use this order: identify the device, check updates, review the account, inspect access permissions and only then consider network settings. Changes to an advanced router panel need the exact model and sometimes help from your internet provider. Screenshots from a different firmware version can be misleading.

The RUSADIX interactive checklist lets you record what you checked or still need to investigate, temporarily in your browser. It does not measure risk or contact any device.

Frequently asked questions

Is a smart bulb inherently unsafe?

No. Review its manufacturer, support period, accounts and updates. A device category alone does not establish a security vulnerability.

Should I disconnect all smart devices from the internet?

Not as a blanket rule. Check which features you use and the manufacturer's options. Some devices need connectivity for updates or essential services.

Can RUSADIX detect every device on my Wi-Fi?

No. The initial tool does not scan your router or equipment. It is a private guided checklist. Use your provider's or router manufacturer's official interface for a real device list.

Original sources and how this guide was checked

Guidance was contrasted with public cybersecurity bodies and official device-manufacturer documentation available by 28 October 2026. Manufacturer-specific steps apply only to supported models; always check your exact hardware and software version.

  1. NCSC — Smart devices: using them safely in your home
  2. FTC — Securing your internet-connected devices at home
  3. FTC — How to secure your home security cameras
  4. Ministerio del Interior de España — Seguridad en dispositivos IoT
  5. NIST IR 8259 Rev. 1, April 2026 — Manufacturer cybersecurity activities
  6. TP-Link Tapo — Verificación en dos pasos
  7. TP-Link Tapo — Actualización de firmware
  8. Philips Hue — Notas y actualizaciones de luces

More security resources · Review my devices