technology

A practical security checklist for a new smart-home device

A smart-home device is often sold for one convenient task: checking a camera, controlling a light or adjusting a thermostat. Setup can introduce an application, an account and a continuing relationship with a service. Understanding that relationship helps you choose settings that fit your household and maintain the device after the first day.

Check support before the purchase

Find the exact model and read the manufacturer's support information. Check the stated update period where one is provided, and look for current instructions on account setup, reset and disposal. The NCSC advises avoiding devices that are no longer supported or whose support period is close to ending where practical. A working appliance and a supported connected service are separate considerations.

Think about which features require an online account or subscription and which still work if the internet is unavailable. A light that can also be operated physically has a different fallback from a camera accessible only through a cloud application. Decide whether that fallback meets your needs rather than discovering it during an outage.

Set up through known instructions

Use the manufacturer's official application and setup guidance. Be cautious of unrelated download pages or unsolicited calls offering installation help. If you receive a used device, follow the supported reset procedure before adding it to your own account. Check that it is no longer linked to a previous owner or a shared household you do not control.

Protect the associated account with a unique password or another supported sign-in method, and enable additional authentication where offered. Review recovery details. If the account belongs to a household, decide who owns it and how a second authorised person can regain access without depending on the owner's single phone.

Review permissions and access

The application may request location, microphone, camera or local-network access. Read what each permission is for and grant only what is needed for the features you intend to use, where the platform permits that choice. Some permissions are necessary for setup but may not be needed continuously; follow official guidance before changing them.

Review the people who can view or control the device. For a camera, a former housemate retaining access is a concrete problem even if the camera receives updates reliably. For a lock or shared appliance, consider how guest access is added, limited and removed. Use supported sharing features rather than handing everyone the main account password.

Consider placement and recordings

Where you place the device affects whose information it collects. A camera aimed at a shared entrance may capture more than the person who bought it intended. A voice-enabled device in a room used for confidential calls raises a different question from one in a kitchen. Think through the ordinary activities in the space before leaving settings at their defaults.

Read the provider's explanations of recording, retention and deletion controls. Choose settings that match the feature you need, and check the effect with a small test. Do not assume that deleting a visible clip changes every other data category associated with the account. If the details are unclear, seek the provider's current documentation.

Keep a maintenance and exit plan

Enable supported automatic updates where available and review whether they complete. Add the device to a household inventory with its model, account owner and support information. Revisit the list when people move in or out, when the provider announces a change or when you stop using a feature.

Before selling, donating or disposing of the device, remove it from the account and follow the manufacturer's reset instructions. Review related sharing and integrations as well. A useful connected device has a clear owner, maintained software, understandable access and a predictable way to leave your household; those details deserve as much attention as the initial feature demonstration.

Sources and further reading

This original guide was prepared with AI assistance. Examples are illustrative. The edition date is an assigned date in this 2026 catalogue. See our editorial policy and report a correction.

Privacy & cookies

This edition does not load advertising, analytics, social tracking widgets or optional cookies. Search runs locally in your browser. Hosting security may use necessary technical data as described in our privacy policy.

Read the Privacy Policy · Read the Cookie Policy