What to Do If Your Smart Home Devices Are Hacked?

Smart home devices like cameras, thermostats, and voice assistants can be hacked if they have weak security. If you notice strange behavior, unauthorized access, or receive alerts about your account, act fast to protect your home and privacy.

What is happening

A hacked smart device may be controlled by an attacker to spy on you, disrupt your home, or use your network for illegal activities. Common signs include devices turning on or off unexpectedly, unfamiliar voices or sounds, changed settings you did not make, or a sudden drop in internet speed.

Emergency warning

If you believe someone is physically inside your home or you are in immediate danger, call local emergency services right away. For non-emergency hacking, follow the steps below.

Step by step: what to do first

1. Disconnect the compromised device. Unplug it or turn off its power. If it is a camera or microphone, cover the lens or mute it. This stops any ongoing spying or control.
2. Change your Wi-Fi password. Use a strong, unique password that you have never used before. This will kick off all devices, including the attacker. You will need to reconnect your legitimate devices.
3. Change the device's default credentials. Many hacks happen because devices still use default usernames and passwords like "admin" or "1234". Create a new, strong password for each device.
4. Update firmware and software. Check for updates on the device, its app, and your router. Install all available security patches.
5. Check for unauthorized access. Review the device's app for unfamiliar users, recent activity, or changed settings. Remove any unknown accounts.
6. Run a security scan on your network. Use your router's app or a trusted network scanner to see if other devices are affected. If you find more, repeat the steps above.
7. Enable two-factor authentication (2FA). If the device or its app supports 2FA, turn it on to add an extra layer of security.

What NOT to do

• Do not ignore the issue. A hacked device can be used to attack others or steal your data.
• Do not reuse old passwords or use the same password across devices.
• Do not reconnect the device until you have secured it.
• Do not confront the attacker directly; it could escalate the situation.

When to seek professional help

If you cannot regain control, if multiple devices are affected, or if you suspect your personal data (like banking information) has been stolen, contact a cybersecurity professional. If you believe a crime has been committed, report it to local law enforcement. In the US, you can also file a complaint with the FBI's Internet Crime Complaint Center (IC3).

What to monitor

• Watch for unusual network activity or slow internet.
• Check your email and bank accounts for unauthorized changes.
• Monitor device logs for strange login attempts.

How to prevent it

• Buy devices from reputable brands that offer regular security updates.
• Set up a separate Wi-Fi network for smart devices (a guest network).
• Disable features you do not use, like remote access or microphones.
• Regularly update all devices and router firmware.

Taking these steps quickly can limit damage and help secure your smart home. If you are unsure, seek expert help. Stay vigilant and keep your software up to date.

This is general information and not a substitute for professional cybersecurity advice. In an emergency, call local emergency services.