Yes, Wi-Fi and IP cameras can be hacked, and most break-ins are easy to prevent. Attackers usually get in through a default or weak password, out-of-date firmware, an unsecured home router, or a camera exposed directly to the internet. Set a strong unique password, keep the firmware updated, secure your Wi-Fi, and buy cameras from brands that support updates. In Singapore, look for the Cyber Security Agency's cybersecurity label.
How do cameras get hacked?
- Default or reused passwords. Cameras left on the factory login, or using a password leaked from another account, are the easiest targets.
- Exposed to the internet. Port forwarding a camera's web page to the internet lets anyone who finds it try to log in. Public search engines index such devices.
- Old firmware. Security flaws found later are fixed only in updates.
- Weak Wi-Fi. An open or poorly protected network lets an attacker reach the camera from nearby.
- Unencrypted streams. Cameras without encrypted connections can leak video on the network.
How do I stop my camera being hacked?
- Secure your router. Use WPA2 or WPA3 encryption, a strong Wi-Fi password, and change the router's admin password. Keep the router's firmware updated.
- Set a strong, unique camera password. At least 12 characters, not used anywhere else. Change it straight away if the camera came with a default.
- Turn on two-step verification for the camera's cloud or app account if it is offered.
- Update firmware from the manufacturer's app or website, and enable automatic updates where available.
- Use the manufacturer's app or cloud (P2P) access instead of opening ports on your router. Turn off UPnP on the router if you do not need it.
- Buy from a trusted brand and seller that publishes security updates. Avoid unbranded cameras that never receive updates.
- Check who has access. Review shared users in the app, remove old phones and staff, and check the login history if the app offers one.
What is Singapore's cybersecurity label for cameras?
The Cyber Security Agency of Singapore runs the Cybersecurity Labelling Scheme for IoT (CLS(IoT)), which covers consumer IP cameras. The number of stars shows the security level: Level 1 means basic measures such as unique default passwords and software updates, rising to Level 4, which needs penetration testing by an approved lab. The scheme is voluntary for cameras, so many good cameras have no label, but a label is a useful sign when comparing models. You can check a product's level and expiry date on CSA's website.
What are the signs that a camera has been hacked?
- The camera moves, speaks or changes settings on its own.
- You are logged out, or your password no longer works.
- Unknown users or phones appear in the app's sharing list.
- Network traffic is unusually high when no one is viewing.
If you notice these, reset the camera to factory settings, update its firmware, set a new password and change your Wi-Fi password.
Sources
Frequently asked questions
- Are wired IP cameras safer than Wi-Fi cameras?
- Wired cameras cannot be reached by someone near your Wi-Fi, but they can still be hacked through weak passwords or old firmware. The same precautions apply to both.
- Should I cover my indoor camera's lens?
- If you do not need an indoor camera at certain times, many apps have a privacy mode that turns the lens off or points it away. Unplugging it also works.
- Do I need port forwarding to view my cameras remotely?
- Usually not. Most brands offer cloud or P2P access through their app, which avoids exposing the camera directly to the internet.
Want this done for you?
We supply and install CCTV, door access, video intercom and Wi-Fi systems across Singapore, from Hikvision, Uniview, Vstarcam, TP-Link, Ruijie and EZVIZ. Send a photo or floor plan and we will recommend a setup and a fixed price.