Secure Your Smart Home — Lock Down IoT Devices and Home Wi-Fi
Smart plugs, cameras and doorbells ship with default passwords and open ports. Here's how a UK engineer sets up a home network so those devices can't be used against you.
Symptoms
- New smart plug, camera, TV or doorbell installed at home
- Router still on its factory admin password or default Wi-Fi name
- Working from home on the same network as untrusted IoT devices
- Occasional strange DNS lookups or unknown devices in the router list
Likely causes
- Consumer routers ship with WPS enabled and admin remote access on by default
- IoT devices phone home over unencrypted HTTP and rarely get firmware updates
- A single flat network means a compromised camera can reach your work laptop
- Default 'admin/admin' credentials on cheap smart devices are public knowledge
Step-by-step fix
- 1
Change the router admin password first — not the Wi-Fi one
Log into the router (usually 192.168.0.1 or 192.168.1.254). Set a long, unique admin password and save it in a password manager. This is the account that controls every other setting — it matters more than the Wi-Fi password most people obsess over.
- 2
Update the router firmware, then turn on automatic updates
Look for 'Firmware', 'System' or 'Router update' in the admin menu. Apply anything pending, reboot, then enable auto-updates if the router supports it. Most consumer routers made after 2021 do.
Unlock the remaining 6 steps + engineer follow-up
Detailed instructions, screenshots where it matters, and a real UK engineer on standby if a step doesn't behave.
Payments aren't wired up in this build — the button takes you to the expert form and an engineer follows up.
Watch out for
- Don't buy no-name smart cameras from unbranded sellers. If the manufacturer isn't shipping firmware updates, the device is a liability the day it's plugged in.
- Never expose a home security camera directly to the internet with port forwarding. Use the vendor's cloud app or a proper VPN back into your network.
Frequently asked
Do I need a separate router just for IoT?▾
No. A single decent router (BT Smart Hub 2, Sky Hub, TP-Link Deco, Asus, Netgear Orbi, Ubiquiti) can create a guest SSID that's isolated from the main network. That's enough for the overwhelming majority of homes.
Is WPA3 worth the upgrade?▾
If your router and your main devices all support it, yes — it closes the offline password-cracking attack that WPA2 is vulnerable to. If some old devices refuse to connect, use WPA2-AES only (not mixed mode) and accept the trade-off.
What about smart TVs — do they really need to be on a separate network?▾
Yes. Modern smart TVs run full operating systems, phone home constantly, and rarely receive security updates past year three or four. Put them on the IoT SSID with everything else.
Still stuck? A UK engineer can jump on remotely.
Fixed fee, secure one-time session, usually within the hour.