Is my smart home a gateway for attackers?
IoT & smart home.
Connected devices make life easier. With a few rules, they also make it safer.
In 60 seconds
- Smart devices belong in a separate network, away from laptop and phone.
- 6 rules: separate the network, secure accounts, check updates, control remote access, local before cloud, keep an inventory.
- The home network check shows where you stand.
Start small, secure smartly.#
What is IoT?
Everyday objects with a network connection and software: lamps, cameras, locks, thermostats and sensors.
Where is the risk?
Many devices run with default passwords, rarely get updates and sit in the same network as laptop and phone.
What helps?
Separate, update, secure: a separate network, strong accounts and devices with long update support.
The world of devices.#
Everything in the house that can be connected.
Lights and sockets
Lamps, switches and smart plugs, controllable individually or in scenes.
Heating and climate
Thermostats and sensors that heat rooms by schedule or presence.
Locks and sensors
Door locks, window contacts, smoke detectors and water sensors.
Cameras and doorbells
Indoor and outdoor cameras, video doorbells, often with cloud connection.
Assistants and media
Voice assistants, speakers and TVs with microphone and network access.
Energy
Solar power, storage, wallbox and heat pump, often with their own app and remote access.
Separate network for smart devices.#
If one device falls, the rest stays secure.
Smart devices are often the weakest link. That is why they belong in a separate network, away from laptop, phone and data storage. If someone attacks a lamp or camera, they get no further.
- Home network: only trusted family devices.
- IoT network: lamps, sensors, cameras, robot vacuums. No access to the home network.
- Guest network: visitors get internet, nothing more.
- From outside only via VPN, not via port forwarding.
Many routers offer a guest network that can be used as a simple separation. Routers and firewalls with VLAN support give more control.
Wireless standards compared.#
Which technology fits which purpose?
| Technology | Strengths | Limits | Typical for |
|---|---|---|---|
| Wi-Fi | High data rate, no hub needed | Power-hungry, quickly overloaded with many devices | Cameras, sockets, robot vacuums |
| Zigbee | Energy-efficient, self-healing mesh network | Needs a gateway, shares the 2.4 GHz band with Wi-Fi | Lamps, sensors, switches |
| Z-Wave | Its own radio band (around 868 MHz in Europe), robust in everyday use | Needs a hub, smaller range of devices | Locks, roller shutters, heating |
| Thread and Matter | Matter works across manufacturers and communicates locally and encrypted; Thread is an energy-efficient mesh network | Ecosystem still growing, devices still need updates | New devices, mixed households |
| Bluetooth LE | Energy-efficient, pairs directly with the phone | Short range | Door locks, sensors, trackers |
| KNX | Wired building automation standard, very robust | Planning and installation by a specialist, higher costs | New builds and renovations |
6 rules for a secure home.#
Separate the network
Put smart devices in the IoT or guest network, not in the home network.
Secure accounts
Change default passwords, turn on MFA for the manufacturer account.
Check before you buy
How long will there be security updates? Without a commitment, choose another device.
Control remote access deliberately
Turn off UPnP and port forwarding. Access from outside via VPN.
Local before cloud
Control locally wherever possible, for example via Matter or a local hub.
Keep an inventory
Maintain a list of all devices. Reset them when selling or disposing of them.
Home network check.#
8 questions about router, Wi-Fi and network separation.
Rough guidance for private households, not a security audit. Your selection stays in your browser.
Device inventory.#
Which devices are on your network? As a list to print or save.
| Device | Manufacturer / model | Location | Network | Account / cloud | MFA on | Update support until | Notes |
|---|
Your input stays in your browser. Nothing is stored or sent. Save the list as CSV or print it.
Smart home check.#
6 questions about your home.
Rough guidance, no audit and no legal advice. Your selection stays in your browser.
IoT in companies and buildings
Cameras, access systems, building automation and production systems are connected to the network. There, inventory, segmentation and anomaly detection are even more important, and many IT service providers offer dedicated OT and IoT security for this. More under Video surveillance and Access control.
Frequently asked questions.#
Cloud or local?
Local control is more independent of the manufacturer and protects data better. Cloud services are convenient but need a well-secured account. The two can be mixed.
Do I really need a VLAN?
Not necessarily. A guest network on the router is a good start. A VLAN gives more control, for example so that devices may only talk to certain destinations.
Are cheap cameras a risk?
The risk lies less in the price than in missing updates and default logins. Look for update commitments, encrypted connections and the ability to change passwords.
Does Matter make my home more secure?
Matter uses encrypted, local communication and works across manufacturers. But it does not replace updates or a separate network.
Questions? Get in touch.
Write to me if a topic is missing or you want to know more.