Close the Open Doors - A Home & Smart-Gadget Security Audit

Walking the House With Fresh Eyes

A security audit sounds fancy, but it is really just a slow walk through the house asking one question at each gadget: is this thing locked down, or did I plug it in and forget it?

• A single weak gadget can be a way in for a stranger, and from there they may reach your other devices.
• Most break-ins are not clever. They rely on a factory password nobody changed, or a gadget nobody updated.
• You do not need to fix everything at once. Even a few changes make a real difference.

The Two Router Passwords

Here is the mix-up I untangle most often. Your router has two different passwords, and folks confuse them all the time. Knowing the difference is half the battle.

• The Wi-Fi password. The one you and your guests type to join the network. Most people know this one.
• The admin password. The one that lets you into the router's own settings to change things. Many people have never touched it, and it is often a weak factory default printed on a sticker.

WPA2, WPA3, and Why They Matter

Your Wi-Fi scrambles the signal so a neighbor or a stranger parked outside cannot read it. The type of scrambling has a name, and newer is stronger.

• WPA3 is the newest and strongest. If your router and devices support it, use it.
• WPA2 is still solid and very common. It is a fine choice if WPA3 is not available.
• WEP or WPA (the old ones) are weak and easily broken. If you see these, it is time to update the setting or the router.

Keep the Router's Firmware Fresh

Firmware is the software inside the router itself. Makers send updates to fix weak spots that crooks look for. An out-of-date router is one of the most common open doors in a home.

• Open the router's app or settings and look for a firmware or software update option.
• Turn on automatic updates if your router offers them. Most newer ones do.
• If there is no automatic option, check for an update once every few months.

Change Every Factory Password

Many gadgets ship with the same simple password, like admin or 0000, and lists of those defaults are all over the internet. Changing them is quick and it shuts a very common door.

• Cameras and video doorbells, especially cheaper ones.
• Baby monitors that connect to Wi-Fi.
• Printers with a web setup page.
• Smart plugs, bulbs, and no-name gadgets set up through an app.

A Separate Wi-Fi for Visitors

Most routers can create a second Wi-Fi network called a guest network. It is a simple, powerful way to keep visitors off your main network, away from your computers and files.

• Visitors get internet without you handing out your main password.
• If a guest's phone has a virus, it cannot reach your personal devices.
• You can change the guest password any time without disrupting your own gadgets.

Put Cheap Gadgets on Their Own Network

The riskiest gadgets are usually the cheapest, no-name ones: a bargain camera, an off-brand smart plug, a dollar-store bulb. A smart trick is to keep them off the network where your important things live.

• Put these gadgets on your guest network instead of your main one.
• That way, even if one of them is weak, it cannot reach your computer, your phone, or your files.
• Some newer routers offer a dedicated smart-home or IoT network; that works just as well.

When a Gadget Stops Getting Updates

Cheap smart gadgets are often abandoned by their makers after a year or two. No more updates means any weak spot found later never gets fixed. At some point, the safe move is to retire it.

• The app has vanished from the app store, or has not been updated in years.
• The company is gone, or you cannot find any support or updates.
• It has not received a firmware update in a very long time.
• It will not let you set a strong password.

Webcams and Baby Monitors

Cameras and baby monitors are the gadgets people worry about most, and for good reason. A few settings put you firmly back in charge of who can see and hear.

• Change the default password to a strong, unique one right away.
• Turn on two-factor sign-in for the camera app if it is offered, so a stolen password alone is not enough.
• Keep the camera's firmware updated through its own app.
• Point indoor cameras at doors and common areas, not bedrooms.

The Printer Nobody Thinks About

A modern printer is a little computer on your network, often with its own web page and sometimes a hard drive that remembers what you printed. It deserves a quick look during your audit.

• Set an admin password on the printer's settings page; many ship with none at all.
• Turn off remote or internet printing features you do not use.
• Keep its firmware updated through the maker's app or website.
• If it stores scanned or printed files, clear them, and wipe the printer before you get rid of it.

The Old Devices Still Hanging On

Every home collects them: the old tablet in a drawer, a retired phone used as a music player, a laptop from years ago. If they still connect to Wi-Fi, they are still on your network.

• Old phones and tablets stop getting security updates, so their weak spots never get fixed.
• They may still be signed in to your accounts.
• A forgotten device is one nobody is watching.

See Everything on Your Network

Your router keeps a list of everything connected to it. Looking at that list once in a while is like a headcount. It is the single best way to spot something that should not be there.

• Open your router's app, or sign in to its settings in a web browser.
• Look for Devices, Connected Devices, or something similar.
• You will see a name for each gadget, phone, and computer on your network.

A Room-by-Room Walkthrough

Here is a simple way to make sure you do not miss anything. Walk the house room by room and give each gadget the same quick once-over.

• Does it still have a factory password? If so, change it.
• Does it still get updates? If not, plan to retire it.
• Does it belong on the main network, or the walled-off one?

Smart TVs and Streaming Sticks

Your smart TV and streaming devices are on the network too, and they carry your streaming accounts. They are easy to secure with a few minutes of attention.

• Keep the TV and streaming device software updated in their settings.
• Use strong passwords on the streaming accounts, and two-factor where offered.
• Turn off viewing tracking or ad personalization in the privacy settings if you would rather not be watched.

Smart Speakers and Voice Assistants

Speakers and displays are always listening for their wake word, and they are tied to a big account like Amazon, Google, or Apple. Lock that account down and you have done most of the work.

• Give the account a strong, unique password and turn on two-factor sign-in.
• Turn on voice-purchase protection so no one buys by voice by accident.
• Use the microphone mute button when you want a private conversation.

Smart Locks, Doorbells, and Garage

The gadgets that guard the way into your home deserve extra care, because they are the ones a stranger would most like to reach.

• Strong, unique passwords and two-factor on the lock, doorbell, and garage apps.
• Keep their firmware updated through their own apps.
• Give helpers their own door codes, not your master code, and delete a code when it is no longer needed.

The Fake Update Trap

Because everyone knows updates are good, crooks use fake ones as bait. Learn what a real update looks like and this trick loses its power.

• A pop-up in your web browser shouting that a device or your computer needs an urgent update, with a button to click.
• An email or text with a link to download new firmware for your router or camera.
• A phone caller who says your gadget is out of date and offers to fix it if you install remote-access software.

Your Once-a-Year Home Audit

You do not need to fuss over this all year. Once a year, pour a cup of coffee and run down this short list. Everything stays locked tight with very little effort.

• Confirm the router's admin password is still strong, not the factory one.
• Confirm Wi-Fi security is WPA2 or WPA3, and firmware updates are on.
• Look at the list of connected devices and remove any you do not know.
• Check that cameras, doorbells, and monitors have updates and two-factor.
• Retire any gadget that no longer gets updates.
• Sign out and reset old devices you no longer use.

What's in the 27-page PDF

• Changing default passwords on your router and your gadgets
• The difference between your admin password and your Wi-Fi password
• WPA2 and WPA3, and keeping your router's firmware updated
• A guest network for visitors and a separate one for cheap gadgets
• Cameras, baby monitors, printers, and old devices still connected
• How to see everything that is on your network right now

Why I wrote this

I write these as printable handouts because a guide you can keep in a drawer beats a web page you have to find again. No jargon, no judgment, no rushing. If you'd rather have someone sit beside you and go through it together, that's a flat $99 first visit with the 30-day follow-up included — serving Portage County from Atwater, Ohio. — Bill