A secure smart home depends on more than buying a security-focused device. Account settings, router configuration, software updates, permissions, and everyday habits all affect risk.

This checklist provides general educational guidance. No checklist can guarantee complete protection against every threat.

1. Secure the Main Email Account

The email account connected to smart home services may be used for password resets and security alerts.

• Use a unique password
• Enable multi-factor authentication
• Review recovery email addresses and phone numbers
• Remove unfamiliar active sessions
• Protect the device used to access the account

2. Change Default Passwords

Change default passwords for:

• The router administrator account
• Smart home hubs
• Cameras and recording devices
• Network storage devices
• Any product that allows local login

Do not reuse the same password across several important accounts.

3. Enable Multi-Factor Authentication

Enable multi-factor authentication when supported by the manufacturer.

This can reduce the risk of account takeover when a password is exposed, although it does not eliminate every risk.

4. Update Devices and Applications

• Install official firmware updates
• Update mobile applications
• Update smart home hubs
• Update the router
• Remove unsupported devices when necessary

Verify that updates come from the official manufacturer or application store.

5. Review Router Security

• Change the router administrator password
• Use WPA2 or WPA3 when supported
• Disable outdated wireless security modes
• Review connected devices
• Disable unnecessary remote administration
• Install current router firmware

6. Create a Guest or IoT Network

A separate network may help limit direct communication between smart devices and personal computers or storage devices.

Availability and isolation behavior vary by router. Verify how the feature works before relying on it.

7. Review Application Permissions

Check whether each smart home application can access:

• Precise location
• Microphone
• Camera
• Contacts
• Local network
• Bluetooth
• Photos and files
• Background activity

Disable permissions that are not required for the feature you use.

8. Review Cloud Storage

For cameras, doorbells, and voice assistants, review:

• Whether recordings are stored locally or in the cloud
• How long data is retained
• Who can access recordings
• Whether recordings can be downloaded
• How data can be deleted
• Whether a paid subscription is required

9. Check Shared Access

Review household members, guests, installers, and third-party services that have access to:

• Cameras
• Door locks
• Alarm systems
• Voice assistants
• Home automation accounts
• Cloud recordings

Remove access that is no longer required.

10. Disable Unused Features

Consider disabling features you do not use, such as:

• Remote access
• Voice purchasing
• Public sharing links
• Third-party integrations
• Automatic discovery
• Unnecessary microphones or cameras

11. Review Connected Services

Automation services may connect several accounts and devices.

Periodically review:

• Linked applications
• Third-party skills
• Automation platforms
• Old integrations
• Developer or testing access

12. Protect Smart Locks and Alarms

• Maintain physical keys or backup access
• Use unique access codes
• Remove codes belonging to former residents or workers
• Check battery alerts
• Test manual operation
• Review emergency-access procedures

13. Secure Cameras and Doorbells

• Use unique passwords
• Enable multi-factor authentication
• Review sharing permissions
• Disable public links
• Check recording zones
• Avoid recording private areas unnecessarily
• Review local privacy and recording requirements

14. Remove Old Devices Safely

Before selling, donating, or discarding a device:

• Remove it from your account
• Delete stored recordings when possible
• Perform the official factory-reset procedure
• Remove memory cards
• Cancel related subscriptions
• Confirm that shared access has been removed

15. Keep an Inventory

Maintain a simple record containing:

• Device name
• Manufacturer and model
• Installation date
• Account used
• Update status
• Subscription details
• Support end date, when known

Do not store passwords directly in an unprotected checklist.

Quick Security Review

Additional Information

Review our Router Security Guide and Smart Device Privacy Checklist.