Because the Internet of Things is growing so fast, there is a lot of pressure on manufacturers to take advantage of that growth and bring as many products to market as they can..
Home routers and security cameras are the main IoT targets for hackers. Why? Why, like most other connected devices, have little or no built-in security. That makes them vulnerable to malware.. And there's another reason.. Security is generally not a top priority for IoT device manufacturers.
When devices are replaced by new products, due to the rapid pace of the market, manufacturers don't seem to care as much about safety. A clear difference between the world of hardware and software, where we would expect regular updates to address security vulnerabilities.
But hackers never rest, so a security camera from five years ago or even a six-month-old smart TV could have a known vulnerability. That means even the most novice hackers can find these vulnerabilities to gain access to your network..
Your poor security practices could include the following:
- No system hardening, which gives a computer system several means of protection and makes it more secure.
- Default or encrypted passwords, that hackers can exploit.
- No mechanism to update the software, which can create vulnerabilities.
In this guide we will give you some tips to ensure the security of your devices
Configure your router correctly
Your Wi-Fi router is the gateway to your smart home. You don't want it to break in case a cybercriminal tries to gain access. Creating a more secure smart home starts with your router. It's the network that connects all your IoT devices and makes them so valuable.
Never use the default router name
Don't stick with your router's factory name. This is usually your make and model. If hackers discover the make and model, they may be able to look for a vulnerability and thus get the default username and password and easily access your smart home network.
Here you just need to get creative with the name of your router, but do not disclose any personal identifier.
Set the strongest password you can
Just like the name of the router, set the router password to something really unique. Use complex passwords made up of letters, numbers and symbols. Our recommendation is to use a random password generator to generate an almost impenetrable password..
Your IoT devices require you to create an account and log in to use them. Devices often have related mobile apps where those login credentials are needed.
Create unique account and application credentials for each IoT device. This is so that if the password of a device is compromised, the others remain intact.
Implement SSL/TLS
Ask the manufacturer if you are using Secure Socket Layer (SSL) o Transport Layer Security (TLS). We are all familiar with the sites that use these security certificates.. Whenever you see the change from HTTP to HTTPS, there is a certificate. SSL certificate types are available at a discounted price, from single domain to wildcard SSL, multiple domain. In case there are subdomains, you can try a cheap wildcard SSL .
Use the highest level of encryption
At the moment, WPA2 is the security standard (WPA3 is just around the corner). If your router only supports WPA or WEP protocols, Bad news, is outdated.
Home routers are the top IoT targets for hackers. Thus, a secure router translates into a substantially more secure smart home.
Enable multi-factor authentication (2Fa)
If you've ever used online banking, knows what multi-factor authentication is. Multi-factor authentication, usually two-factor authentication (2Fa), is an extra layer of security beyond a simple password. With two-factor authentication, every time someone tries to log in to your IoT device, must provide additional proof of identity.
Many apps already have an integration with the Google Authenticator app to enable 2FA.
A router, two networks
Many modern routers give you the opportunity to set up a guest network (or secondary). By creating a separate network dedicated to your IoT devices, can protect your core network from IoT threats.
This means that family members, friends and guests can log in to a network that is not associated with their IoT devices. This way, just you (and his family) can access your local smart home network. Since putting IoT devices on a different network keeps them offline, whether hackers manage to gain access, will not be able to access any of your most important devices, such as your laptop or smartphone.
Disable features you don't use
Smart TVs come with voice control, but this feature is generally not used even in voice-controlled homes where smart assistants like Google Assistant. This can be a gateway for a hacker.
Many IoT devices give you the ability to control them from anywhere on the planet.. But if you only use them on your home Wi-Fi connection, it's smarter to disable remote access. The rule is simple, don't you use it?? Turn it off.
Therefore, disabling features is about blocking as many of these various entry points as possible.
