Smart devices

As life and business in the 21st century have become increasingly reliant on being connected to the internet, there has been a rise in Internet of Things (IoT) products such as doorbells, smart locks, lightbulbs, or voice assistants (Alexa, Siri). You can reduce the risks that these IoT products pose while continuing to enjoy all that smart technology has to offer by following the recommendations below:

1. Update the Operating System – The operating system by which the IoT application/online account is accessed must remain up-to-date to prevent cybercriminals from exploiting vulnerabilities that will give them remote access and control over the IoT device.
2. Evaluate Settings – Default settings are not always applied with security in mind. Take time to enable security settings as applicable and disable those that offer no benefit to you or the usability of the device.
3. Turn on 2-Step Verification (2SV) – Where possible, enable 2SV to add an extra layer of security to the application/online account.
4. Disconnect any IoT device no longer in use – When a smart device serves no further purpose, immediately disconnect it from the network.
5. Change default passwords – Many IoT products are produced with a default password either commonly used or easily obtainable online. Use strong passwords for a truly robust security solution.
6. Secure the router – Change the default administrator credentials for the router settings (accessible online) and also change the issued Wi-Fi password. Ensure to use WPA2 (Wi-Fi Protected Access) encryption to disguise the network from immediate view.
7. Enable a firewall - This will monitor and block any unauthorised connections to the network.
8. Use a separate/guest network for IoT devices. Any compromise of an IoT device will remain quarantined within the network to which it is connected, keeping your home/business network secure.
9. Update software - As with all software, IoT needs updating to receive security fixes for vulnerabilities. Enable automatic updates to ensure you never miss the latest release.

Secured by Design has launched a 'Secure Connected Device' (SCD) accreditation scheme in consultation with the Department for Science, Innovation and Technology (DSIT), which highlights products that have achieved the appropriate IoT standards/certifications, helping consumers make better-informed choices when buying such devices.