Change credentials and protect accounts

Replace factory-default passwords before connecting a camera or recorder to a network. Give every device a unique, long password and store it in a reputable password manager. Where supported, enable multifactor authentication for administrator and cloud accounts, and remove accounts that no longer need access.

Use separate viewer and administrator accounts when the system supports them. Limit recording access to the people who need it, and review account activity and remote-access settings periodically.

Keep cameras off the public internet

Do not create router port-forwarding rules that expose camera or NVR login services to everyone on the internet. Disable Universal Plug and Play (UPnP) if it creates unwanted automatic port mappings. Turn off remote administration and services you do not use.

For remote viewing, use the vendor's documented secure design or a maintained VPN configured by someone who understands the network. Check what outbound connections the camera platform requires, and avoid installing unofficial firmware or remote-access apps.

Separate devices and update them

If your router or managed switch supports VLANs or isolated networks, place cameras and recorders on a separate network from personal computers and sensitive business systems. Allow only the connections required for recording, administration, and approved remote viewing. A guest Wi-Fi network is not always equivalent to a properly isolated camera VLAN; check the router's behavior.

Install firmware from the manufacturer's official support channel. Before a major update, confirm the model and hardware revision, read the release notes, and keep a recovery plan. Replace products that no longer receive security updates if the risk and installation warrant it.

Protect footage and the people recorded

Use encrypted connections where available, protect exported clips, and set a retention schedule rather than keeping footage indefinitely. Restrict physical access to the recorder and storage drives. Keep a record of who can view footage and how to revoke access.

Camera placement, audio recording, notice, and retention rules vary by location and context. Check local privacy and employment requirements before recording. Avoid capturing neighboring homes or public areas beyond what is reasonably necessary for your security purpose.

Review the setup

From a network outside the property, confirm that only intended services are reachable. Review router port mappings, camera accounts, firmware versions, remote-access users, and recorder logs. If you find an exposed management service or cannot identify its purpose, disable it and consult a qualified network professional.