Home security systems like Nest and Ring are now subject to a new kind of threat. Hackers are hijacking home surveillance cameras to fake emergencies — some have even gone to the extent of getting the police involved in a dangerous hijacking prank called “swatting.”
While the intention may be harmless, “swatting” can have deadly consequences, like in 2017 when police stormed into a man’s home and fatally shot a man after a hacker falsely claimed a dangerous incident. We don’t ever want to see someone’s device intended for security and protection used by nefarious hijackers, which is why we recommend these tips in securing your surveillance system.
Has your email address already been involved in a data breach? Thankfully, the folks at haveibeenpwned.com have created a website that allows you to search across multiple data breaches to see if hackers have already compromised your email address. Go ahead and click that link. Have you already been “pwned?” Let’s discuss ways to undo that damage.
How can my security cameras be hacked?
There are many ways hackers can exploit your security cameras’ vulnerabilities to gain access to your private footage, from stealing credentials from other vulnerable sites to gaining access to your router to hack the attached security cameras. You never know how good of a hacker you’re up against, so it’s best to secure all of your devices as best as possible — especially your surveillance cameras.
Tip #1: Change your passwords (right now)
The most popular way hackers gain access to your security system is by using credentials that they stole from a separate data breach. Over 50% of internet users report using the same password or a slightly modified version of 1 password across multiple domains.
Are you using the same password across multiple domains? Consider varying your passwords from site to site and making all of them different and challenging to guess. The simplest way to do this is by including lowercase, uppercase, a number, and even a special character like an exclamation point. The more characters you include in your password and the more complex your password is, the harder it will be to crack.
If you’re going to do it the “easy” way, make sure you don’t include identifying information that can be found anywhere on the internet or social media in your chosen new password.
Tip #2: Use a password manager
Although you could potentially come up with solid passwords by yourself, we recommend using a password manager like LastPass. Programs like LastPass generate strong, random passwords for your digital accounts and securely store them for you. As long as you have secure login and password to a password manager, you can keep all of your passwords in one location. With LastPass, as long as you are logged in, you can automatically insert passwords on an array of devices and web browsers.
Tip #3: Set up two-factor authentication
This step might require some knowledge to accomplish, but if you can figure out two-factor authentication, it’s a great extra layer of security. Two-factor authentication requires you to input a second password that is randomly generated every time you log in to your security cameras.
While some security companies offer two-factor authentication by default, many do not have that option built-in.
You can have the authentication app (like the one by LastPass) send your phone an SMS code automatically when you log in to certain websites, or you can access randomly generated codes that change every couple of minutes.
Tip #4: Have your security system professionally installed
The United States is home to 29.8% of security system hacks globally — more than any other country. The core problem with IP cameras is they are all connected to the internet — where hackers are constantly finding new ways to gain access to private data.
Unfortunately, there isn’t a single brand that can confidently say, “our security cameras are unhackable.” From Amazon Ring and Google Nest to Panasonic, Sony, or Linksys — they’ve all been hacked. Thankfully, you can take steps to ensure that there are no data vulnerabilities, but this is where things get complicated, which is why we recommend talking to a professional installer.