Protect the account as carefully as the front door
A stolen password can expose live views, recordings, microphone access and security settings. Secure the email account, camera account, app users and recovery options as one chain.
Prevent
Use a unique password, turn on two-step verification, remove unused users and keep apps, cameras and routers updated.
Detect
Watch for unfamiliar logins, new shared users, altered settings, unexpected talkback, disabled recording or password-reset messages.
Recover
Secure the email account first, revoke sessions, change credentials, remove strangers and preserve relevant notices or logs.
Account-takeover checklist
- Protect the email used for recovery with its own unique password and two-step verification.
- Enable the strongest sign-in protection the camera provider supports.
- Give each household member an individual account instead of sharing the owner login.
- Review authorised phones, browsers, integrations and voice-assistant links.
- Turn off remote access if you do not need it.
- Install camera, hub, router and app updates promptly.
- Do not expose a camera’s administration page directly to the internet.
If you suspect access
| Action | Why |
|---|---|
| Secure email and mobile account | Attackers may otherwise reset the camera password again or intercept codes. |
| Change the camera-account password | Use a clean, trusted device and a password never used elsewhere. |
| Sign out other sessions | A password change does not always revoke every token automatically. |
| Remove unknown users and integrations | Shared access can survive an owner-password change. |
| Check settings and footage access | Restore recording, notifications, privacy modes and retention deliberately. |
| Contact the provider | Ask for login history, preservation, escalation and account-recovery guidance. |
Continue the audit
Run the full camera audit · Set up two-factor authentication · Separate security devices
Official starting points: FTC camera-security guidance and UK NCSC smart-device guidance.
Last checked: 1 September 2026.