Connected cameras, plugs and thermostats are convenient, but each one is another device on your network. The UK National Cyber Security Centre (NCSC) gives a short list of checks for before and after you buy.

This guide is based on the public sources listed at the end. We have not tested the products or services mentioned.

This is a short reference page. The full guide is Home Safety Buying Guide: Heaters, Smoke and CO Alarms, Cords, Candles, Furniture and Smart Devices.

Before you buy

  • Read reviews of the product and the maker.
  • Check what it needs: Wi-Fi, a phone or tablet, an app or an account.
  • Check how long the maker will keep supporting it. The NCSC says to treat the support end date as a cutoff, because unsupported devices are easier to hack.

When you set it up

  • Change the factory password to a strong one. The NCSC suggests several random words joined together.
  • Turn on two-step verification where it is offered.
  • Switch off remote access if you only need the device at home.
  • Turn on automatic updates and install manual updates when prompted.

Later

  • If you think someone has taken control of a device, check the maker's site and reset it.
  • Do a factory reset before you sell or give a device away.

Extra questions for a product page

Does it need an account or subscription? Does it work without the internet? Can the microphone or camera be turned off? What happens if the company closes? We have no source on specific makers, so check each product's page and privacy policy.

Common mistakes

Leaving default passwords, never updating, enabling remote access by default, buying a device with no stated support end date, and selling it without a factory reset.

See also our guide to choosing smart home devices and Matter explained.

Last checked: 15 October 2026. Sources: UK NCSC, smart devices in the home.