The Internet of Things means dozens of tiny computers at home: cameras, bulbs, speakers, TVs, printers, sometimes appliances. Many ship with default admin passwords, stale firmware, or needless internet exposure — each can be a foothold into your LAN.
Start with the router
Change the router admin password (not only Wi‑Fi). Enable automatic firmware updates if offered. WPA2/WPA3, strong Wi‑Fi passphrase, disable WPS unless required. On capable gear, use a separate VLAN/IoT SSID so cameras cannot talk directly to your work laptop.
Remote router admin on a public IP is rarely needed — use VPN home instead of exposing management ports.
Cameras and doorbells
Budget cameras may stream via opaque clouds with weak controls. Change defaults, disable risky UPnP port mapping, patch firmware. For business CCTV at scale, see our cameras and analytics article — principles match: segmentation, strong auth, access logging.
Voice assistants and shared gadgets
Voice triggers matter in shared spaces — review purchase and unlock features. Mute microphones when idle if policies worry you.
When vendors stop patching
Retired IoT gear should not share a network with sensitive work data — isolate or replace. Enterprises run formal lifecycle management; at home, a deliberate unplug/replace decision is enough.
Related: Wi‑Fi hygiene, patching programs.