--- title: '5 Tips for Securing Your Smart Devices and IoT Devices' url: 'https://blog.datum-consulting.com/blog/5-tips-for-securing-your-iot-devices' markdown: 'https://blog.datum-consulting.com/blog/5-tips-for-securing-your-iot-devices.md' date: '2019-10-18' description: 'Heating your business, controlling the lights and viewing security footage can all be done remotely from your phone or computer when you aren’t there. This is known as the Internet of Things (IoT) and it is growing rapidly, spurred on by a culture that demands digital connectivity and smart d…' taxonomy: category: - blog tag: - cybersecurity - 'multi-factor authentication' - wi-fi - 'security solutions' - 'Two-Factor Authenication' - 'password manager' - 'cyber attack' - 'data breach' - 'internet of things' - 'iot devices' - "Universal Plug in and Play\_(UPnP)" month: - October archives_month: - oct_2019 archives_year: - '2019' --- # 5 Tips for Securing Your Smart Devices and IoT Devices [ Home ](https://blog.datum-consulting.com/) 5 Tips for Securing Your Smart Devices and IoT Devices ## [5 Tips for Securing Your Smart Devices and IoT Devices](https://blog.datum-consulting.com/blog/5-tips-for-securing-your-iot-devices) 18th Oct 2019 [cybersecurity](https://blog.datum-consulting.com/tag:cybersecurity#body-wrapper) [multi-factor authentication](https://blog.datum-consulting.com/tag:multi-factor%20authentication#body-wrapper) [wi-fi](https://blog.datum-consulting.com/tag:wi-fi#body-wrapper) [security solutions](https://blog.datum-consulting.com/tag:security%20solutions#body-wrapper) [Two-Factor Authenication](https://blog.datum-consulting.com/tag:Two-Factor%20Authenication#body-wrapper) [password manager](https://blog.datum-consulting.com/tag:password%20manager#body-wrapper) [cyber attack](https://blog.datum-consulting.com/tag:cyber%20attack#body-wrapper) [data breach](https://blog.datum-consulting.com/tag:data%20breach#body-wrapper) [internet of things](https://blog.datum-consulting.com/tag:internet%20of%20things#body-wrapper) [iot devices](https://blog.datum-consulting.com/tag:iot%20devices#body-wrapper) [Universal Plug in and Play (UPnP)](https://blog.datum-consulting.com/tag:Universal%20Plug%20in%20and%20Play%C2%A0(UPnP)#body-wrapper) Heating your business, controlling the lights and viewing security footage can all be done remotely from your phone or computer when you aren’t there. This is known as the Internet of Things (IoT) and it is growing rapidly, spurred on by a culture that demands digital connectivity and smart devices that can be applied to all areas of life. Whilst this level of connectivity is great, there are some major drawbacks that you need to be aware of. Without proper management and security, your smart business full of connected IoT devices can become a living nightmare if it is targeted by hackers. ![](https://blog.datum-consulting.com/blog/5-tips-for-securing-your-iot-devices/IoT-devices.jpg) There are several security and privacy risks that pose a serious threat. Any device that shares a wireless network is inherently at risk of a [security breach](hackers-malware-data-breaches). When somebody gains access to your smart devices, they can harvest your data and manipulate them. Luckily, there are plenty of security measures you can take to secure your IoT devices. If you haven’t done any of these things yet or haven’t at least checked your devices over to ensure they meet the following points, then you should do so right away if you use a lot of smart devices. 1. **Start with Your Router** Your router is the ‘front door’ to your smart business. Just like your physical front door, your router’s front door should be secured with solid locks. You never know who’s going to come knocking. A secure smart business, therefore, starts with your router. It is the hub that connects all your devices to the IoT and enables them to operate. Most people use the router that their ISP provided them with, however, it’s always best to invest in a router that is better and offers a higher degree of security as standard. There is nothing wrong with using the router your ISP provided, but it’s not going to be massively secure. 2. **Create a Secondary or ‘Guest’ Network** You can create multiple networks on your Wi-Fi router. This is mostly used to create guest networks for visitors. You may want to create an additional network that is solely for connecting your IoT devices too. By doing this, you prevent potential hackers from accessing sensitive data, shared files and other bits and pieces from your other devices if they breach your network. All your Wi-Fi router’s networks should be secured with a strong encryption method and robust passwords. For routers, the standard and most secure encryption method is called WPA2. This should always be used, even for guest networks. For passwords, avoid things that are common and easy to guess. A [strong password](what-makes-a-secure-password) is composed of letters, numbers, and symbols, and each network should have a unique one. You can use a [password manager](lock-down-your-passwords) to help you remember them all. Never use your router’s default username and password. Creating a secondary and tertiary network is easy, and most routers let you do this through a user-friendly GUI. 3. **Check Your IoT Device Settings and Keep Them Updated** Your IoT device probably comes with default security settings and you may want to consider changing them. Not all manufacturers have your best interests in mind and the default settings may work to benefit them more than you. Additionally, check that you don’t have features enabled that you don’t need. For example, remote and microphone access might not be required, however, network access will be. This depends on the device and its purpose. Avoid putting off software updates as these are often patches for security vulnerabilities. Many IoT devices will prompt you when an update is available, but it’s good due diligence to check manufacturer websites often. 4. **Enable Two-Factor Authentication** If any of your devices offer [two-factor authentication](two-factor-authentication-made-easy), use it. Two-factor authentication is an additional security layer on top of a device’s password that requires secondary authentication—a one-time code sent via email or SMS—before access is granted. When used properly, two-factor authentication can stop the bad guys gaining access to your accounts and taking control of your IoT devices. 5. **Disable UPnP Features** IoT devices tend to have Universal Plug in and Play (UPnP) features, enabling different devices to find and connect to one another. Whilst this is convenient and eliminates the need to configure each device individually, the protocols rely on local networks to connect to each other and these are vulnerable to third-party attackers. When an attack occurs, UPnP lets multiple devices be accessed at the same time. It’s far safer to just disable it and configure your devices manually. Staying one step ahead of attackers and securing your network of IoT devices comes with the territory; it is the price you pay for convenience and benefiting from what IoT devices have to offer. Securing your devices isn’t difficult and it is something you absolutely must be doing if you want a comprehensive smart business network. By drawing inspiration from the above security tips, you can keep yourself safe from the threats posed by using the Internet of Things. If you want to learn more about how you can be proactive in keeping your company secure, contact [Datum Consulting ](tel:4144318726) to learn how we help organizations protect critical assets. [ Previous Post](https://blog.datum-consulting.com/blog/scammers-fake-caller-id-info) [Next Post ](https://blog.datum-consulting.com/blog/public-wifi-security) #### Related Posts - 100 [The Most Hacked Passwords Around the World](https://blog.datum-consulting.com/blog/most-hacked-passwords "The Most Hacked Passwords Around the World") - 100 [Apple, Google and Microsoft Commit to Expanded Support for FIDO Standard to Accelerate Availability of Passwordless Sign-Ins](https://blog.datum-consulting.com/blog/passwordless-sign-ins "Apple, Google and Microsoft Commit to Expanded Support for FIDO Standard to Accelerate Availability of Passwordless Sign-Ins") - 100 [How Hackers Get Your Passwords and How To Defend Yourself](https://blog.datum-consulting.com/blog/hackers-get-passwords "How Hackers Get Your Passwords and How To Defend Yourself") - 100 [How to Keep Your Company Safe from Russian Hacks](https://blog.datum-consulting.com/blog/russian-hacks-safety "How to Keep Your Company Safe from Russian Hacks") - 100 [Data Privacy Week: 6 Best Practices for Your End Users](https://blog.datum-consulting.com/blog/data-privacy-week "Data Privacy Week: 6 Best Practices for Your End Users") [JOIN OUR NEWSLETTER](https://zc.vg/sf/bawK1) [PAY INVOICE ONLINE](https://datum.connectboosterportal.com/authentication/login) [![](https://blog.datum-consulting.com/modules/sidebar/Yubico.png)](https://www.pntra.com/t/SkNJTk5MT09DSEZMTExNQ0dPR0tNSw) #### Follow Us [](https://twitter.com/datumconsulting "Twitter")[](https://www.linkedin.com/company/datum-consulting/ "LinkedIn") "); #### Popular Tags #### Archives - [ 3 May 2022 ](https://blog.datum-consulting.com/archives_month:may_2022) - [ 3 March 2022 ](https://blog.datum-consulting.com/archives_month:mar_2022) - [ 3 February 2022 ](https://blog.datum-consulting.com/archives_month:feb_2022) - [ 2 January 2022 ](https://blog.datum-consulting.com/archives_month:jan_2022) - [ 1 December 2021 ](https://blog.datum-consulting.com/archives_month:dec_2021) - [ 2 November 2021 ](https://blog.datum-consulting.com/archives_month:nov_2021) - [ 2 October 2021 ](https://blog.datum-consulting.com/archives_month:oct_2021) - [ 1 September 2021 ](https://blog.datum-consulting.com/archives_month:sep_2021) - [ 3 August 2021 ](https://blog.datum-consulting.com/archives_month:aug_2021) - [ 2 July 2021 ](https://blog.datum-consulting.com/archives_month:jul_2021) - [ 4 June 2021 ](https://blog.datum-consulting.com/archives_month:jun_2021) - [ 2 May 2021 ](https://blog.datum-consulting.com/archives_month:may_2021) --- ## Navigation - Parent: [Home](https://blog.datum-consulting.com/index.md) - Previous: [Public Wi-Fi Security 101](https://blog.datum-consulting.com/blog/public-wifi-security.md) - Next: [Scammers Can Fake Caller ID Info](https://blog.datum-consulting.com/blog/scammers-fake-caller-id-info.md)