New Federal Laws on Smart Home Devices

1. What happened?

The government just passed a new consumer protection law that legally bans manufacturers from selling smart home devices (like Wi-Fi routers, baby monitors, and smart doorbells) with universal default passwords.

Historically, companies would ship a million security cameras that all used the exact same username (admin) and password (password). Now, companies will be legally required to either force the user to create a new password when they plug the device in, or print a unique, randomized password on a sticker at the bottom of the device.

2. Am I affected?

Yes, but in a good way! This law protects every consumer who buys an internet-connected device. It means that you no longer have to be a cybersecurity expert to set up a secure home network; the device will force you to be secure out of the box.

3. Do I need to worry? (Risk Level: Low)

You do not need to worry about this new law—it is a massive victory for consumer safety!

However, you should worry if you currently have old smart devices in your home that are still using default passwords. Hackers use automated scanners that constantly search the internet for smart cameras and routers that still use admin/password. If they find yours, they can hijack your camera or steal your internet traffic.

4. What should I do right now?

This law only applies to new devices being manufactured starting next year. For the devices already sitting in your house, you need to take action:

1. Audit your home: Walk around your house and identify anything connected to the internet (Wi-Fi router, smart TV, security cameras, smart thermostat).
2. Check the router: The most important device is your Wi-Fi router. If you have never logged into it, there is a high chance it is still using the default password printed on the back.
3. Change the passwords: Log into the companion apps for your smart devices and change the passwords. Use our Secure Password Generator to create strong, unique passwords for each device, and save them in a Password Manager.