The Internet of Things, or IoT, has ushered in the era of smart homes, where everyday devices, from appliances to security systems, are seamlessly connected to the Internet. This can include hi-tech items like smart speakers, fitness trackers, security cameras, and standard household items like fridges, doorbells, and lightbulbs.

The convenience and automation offered by smart homes also come with new cybersecurity concerns. However, a new study has revealed that most Britons believe their homes to be secure from cyber threats, with only one out of six acknowledging the potential risks to their devices.

Risks of smart homes

While many believe their home networks are secure, NordVPN warns that hackers are more likely to target vulnerable devices like Wi-Fi-enabled lightbulbs or internet-connected fridges. These devices may appear harmless, but criminals can exploit them to gain access to your home network. 

Cybercriminals often target smart TVs to eavesdrop on conversations through microphones, monitor habits through cameras, and even steal sensitive information, like passwords.

“The connection between a router and a device is like a two-way bridge: sophisticated malware from an infected device can spread to the Wi-Fi router and infect other devices connected to the home network,” says Marijus Briedis, CTO at NordVPN. 

“It can also stay in the router and collect data from any other device in the network or change router settings and redirect users to malicious websites. So one infected device can cause security issues for all the network.”

The security risks of a smart home can extend to outside the residence, potentially even before you enter the house.

Outdoor smart devices, such as garage door openers, wireless doorbells, and smart sprinklers, pose a heightened security risk due to their accessibility outside the home. Malicious actors can exploit vulnerabilities in these devices to gain unauthorised access to the entire smart home network. 

Keeping smart homes safe

The National Cyber Security Centre (NCSC) and the Department for Digital, Culture, Media and Sport (DCMS) advise consumers to adopt vigilant measures to safeguard their smart homes against evolving cybersecurity threats. 

First, before buying a smart device, do a thorough research on the device. You can consult user reviews, industry publications, and independent testing results to gain insights into the device’s performance, reliability, and potential vulnerabilities. Some smart devices can work just fine without any internet connection.

Upon installation, ensure the device’s security by promptly changing any default passwords that are easily guessable, such as “admin” or “0000.” Replace them with strong, unique passwords to prevent unauthorised access.

If your smart device or its app offers two-step verification (2SV / 2FA), enable it immediately. 2SV / 2FA adds an extra layer of security by requiring a secondary verification method, such as a code sent to your mobile device and your password. This is particularly important for products that can be controlled remotely through an online account linked to your device.

Maintain the security of your smart devices by promptly installing any available software updates, similar to how you regularly update your computers and smartphones. Regularly check each smart device to see if its operating system is up-to-date.

Remember to upgrade your router if it is outdated. Older routers may employ obsolete security protocols, making them more susceptible to cyberattacks. Opt for a router that supports the latest Wi-Fi standard, such as Wi-Fi 7, to enhance security and performance.

Upon discovering a security incident potentially affecting your smart device, visit the manufacturer’s website for recommended actions. You can also check the NCSC and the Information Commissioner’s Office for expert advice on mitigating potential risks.

If you need assistance safeguarding your smart home devices, you can enlist the help of security companies like Marengo. Marengo conducts comprehensive Property Security Reviews for clients. We review existing security, identify vulnerabilities, and design bespoke security plans for clients. We ensure that new security systems are tasteful and effective; and we provide training for family members, household staff, close protection teams, and residential security teams (RSTs), to ensure they know how to use them properly. Training is critical, because humans are more often than not the single point of weakness in a security plan.