DON’T just LEAVE them…. CHANGE them… (IoT default passwords): an OSable Guide

Photo by BENCE BOROS on Unsplash

Default passwords are a significant security risk for IoT (Internet Of Things) devices, and it’s essential to change them as soon as possible. Hackers can easily find and exploit these default passwords, gaining unauthorised access to your devices and potentially stealing sensitive information or using your devices for malicious purposes such as botnets.

SOURCE: https://www.oracle.com/in/internet-of-things/what-is-iot/#:~:text=The%20Internet%20of%20Things%20(IoT)%20describes%20the%20network%20of%20physical,and%20systems%20over%20the%20internet.

Here is a generic OSable guide on how to change the most common default passwords on the most common IoT devices:

Top Tip — if you struggle to find your settings on your device OR the default credentials… consider using a search engine like Google with your model name.

Routers

Photo by Compare Fibre on Unsplash

The default passwords for routers are often easy to guess or readily available online. To change it, log in to your router’s admin panel using the default username and password (often “admin” for both OR found on the card that came with your Router) and look for the password change option. Choose a strong password that includes numbers, letters, and symbols.

https://www.ncsc.gov.uk/news/ncsc-lifts-lid-on-three-random-words-password-logic — Advice from the United Kingdom’s cyber security body on Passwords

‘Security’ cameras

Many ‘security’ cameras come with a default username and password that are easy to find online. To change them, log in to your camera’s admin panel using the default credentials and look for the password change option. Choose a unique, strong password that is different from your other passwords.

Top tip — if your camera does not NEED to be accessible on the Internet, why not consider disabling this feature whilst you are in settings?

See a live camera view of any vulnerable cameras on the Internet on sites such as these. Whilst some of these cameras may even intentionally be configured to be viewable by anyone, our team has seen instances of cameras clearly intended to be private inside family homes on these sites, for example, (creepy!).

Smart home hubs

Smart home hubs can control all of your smart devices, so it’s crucial to change the default password. To change it, log in to your hub’s admin panel and look for the password change option. Choose a strong password that includes numbers, letters, and symbols.

Photo by James Yarema on Unsplash

Smart TVs

Smart TVs often come with default passwords, which can be easy to guess or find online. To change it, go to your TV’s settings menu and look for the password change option. Choose a strong password that is, again, unique from your other passwords.

Photo by Dario on Unsplash

Smart speakers

Smart speakers like Amazon Echo or Google Home can be a gateway to your personal information, so it’s important to change the default password. To change it, open the app associated with your smart speaker and look for the password change option. Choose a strong password that includes numbers, letters, and symbols.

Photo by Jan Antonin Kolar on Unsplash

Conclusion

Changing default passwords is a critical step in securing your IoT devices. Hackers often exploit these weak passwords to gain access to your devices, which can lead to the theft of sensitive information or malicious activity such as botnets (where your computer’s power is utilised remotely by a hacker as part of their own illegal operations). Take the time to change the default password on all of your Internet of Things devices, and remember to choose strong, unique passwords for each one. You may also want to check out the other OSable Guides on Cyber Security so you can learn about why you should also be using 2 Factor Authentication for all your accounts and other security practises you should be using, for example.