This guide is part of our baby safety guides and focuses on practical steps you can take to prevent your baby monitor signal from being hacked.
Step 1: Secure your home router:
Your home internet router stores your network settings and controls who accesses it. Routers are like other internet-connected devices and use firmware with an account and password that you can log in and change using a browser. Most routers come with default accounts with login credentials that can be easily found online and all the hackers need to find to get access to your home network is the IP address.
The first step to ensure that your router is secured is to constantly update your router’s firmware. By updating your firmware, you are ensuring that any security loopholes or vulnerabilities have been patched by the manufacturer. You also need to disable any default accounts/default login credentials for your router to something unique and hard to guess.
In our guide about how hackers get access to monitor signal, hacking your router is the first option.
Step 2: Use a secure Wi-Fi network with Superior Encryption Protocol:
Make sure your baby monitor is connected to a password-protected Wi-Fi network. Secure networks use WPA2 or WPA3 encryption, which is more secure than WEP.
Wi-Fi Protected Access(WPA) was introduced in 2003 as an upgrade to the Wired Equivalent Protocol(WEP) introduced in 1999. WEP used a fixed key encryption protocol and a lower 64-bit/128-bit encryption session size. The WPA uses a superior TKIP encryption protocol with a 256-bit encryption session size which is less vulnerable. Unfortunately, some routers still come with firmware that supports WEP protocol you’ll need to ensure that you disable WEP and, if possible, make sure your router’s firmware doesn’t rely on WEP.
When enabling Wi-Fi encryption on your router, it is recommended to select WPA2 for optimal Wi-Fi security. To verify your Wi-Fi security protocol, follow these steps;
- Open Windows Start menu
- Search ‘Wi-Fi Settings’
- Click on the Wi-Fi network that you are connected to
- Scroll to Properties and ensure that it uses WPA2-Personal under Security type.
Learn more about turning on Wi-Fi encryption for your router here.
WPA Wi-Fi protocol is more secure than WEP because it uses a 256-bit key for encryption, which is a major upgrade from the 64-bit and 128-bit keys used by the WEP system
You should also use a strong password for your Wi-Fi network that includes a mix of numbers, letters and special characters.
Step 3: Change the default login credentials on your baby monitor:
Most baby monitors come with default login credentials such as ‘Admin’ and ‘Password’. It is important to change these default passwords to a strong, unique one to ensure that hackers cannot easily access your baby monitor. Here’s how you can change the default login credentials:
- Access the settings menu on your baby monitor
- Look for the Profile/account option
- Find the option to change login credentials or passwords for the account
- Create a strong, unique password and save it
- Log out of your baby monitor and log back in with the new credentials
This will prevent unauthorized access to your baby monitor through an unsecured network. Make sure to use a strong and unique password for your Wi-Fi network, as using common or easily guessable passwords can still leave your baby monitor vulnerable.
Step 4: Keep your baby monitor’s software up-to-date:
Just like any other device connected to the internet, it is important to keep your baby monitor’s software up-to-date. Manufacturers often release updates that fix security vulnerabilities and bugs. By keeping your baby monitor’s software up-to-date, you are reducing the chances of hackers exploiting any vulnerabilities.
You can check for updates through the manufacturer’s website or by accessing the settings menu on your baby monitor. If there are any available updates, make sure to download and install them as soon as possible.
Step 5: Disable remote access:
Some baby monitors come with a feature that allows remote access through an app or web portal. While this may seem convenient, it also poses a security risk as hackers can potentially access your baby monitor through this remote access. It is recommended to disable this feature unless absolutely necessary.
Step 6: Buy a monitor from a trusted manufacturer:
Choose baby monitor models from reputable manufacturers known for their excellent reviews and a strong commitment to superior security settings. Look for features like embedded security measures, such as two-factor authentication, robust encryption, a Wi-Fi toggle button, and permission-based family access.
While we highly recommend baby monitor brands such as Cubo Ai, Nanit, and Miku, which utilize bank-level 256-bit encryption for maximum security, we also don’t have a problem with brands like iBaby or Nest Google Home monitor. Although iBaby employs a lower 128-bit encryption, they compensate for it with a robust security framework that supports router-based WPA/WPA2 encryption, ensuring a reliable and secure monitoring experience for parents.
Read this guide on the hacking of various baby monitor brands to learn of known vulnerable brands to avoid. Make sure to confirm cases of hacking by understanding if the vulnerability resulted from network issues or baby monitor security settings as the case of Lollipop monitor hacking.
Step 7: Use a firewall:
Another way to secure your baby monitor from potential hackers is by using a firewall. A firewall acts as a barrier between your internet and devices, blocking unauthorized access to your network.
You can either use a hardware firewall, which is a physical device that connects to your router, or a software firewall, which is built into your computer’s operating system. Both options provide an additional layer of security that can help protect your baby monitor from remote access by hackers.
To ensure you are using a firewall, follow these steps;
- Open the Windows Start menu
- Search Wi-Fi settings
- Click on the Network you’re connected to
- A window with a Network Profile will show up. Opt for the Private option, not Public if you are on home Wi-Fi
- Below the Private option is an option to configure Firewall security settings. Click on the option
- A pop-up window asking you if you want to change security settings will show. Select ‘Yes’ option as shown in the screenshot below
- A window with Firewall and Network Protection options will show up.
- Click on Private (the active one)
- Turn the Microsoft Defender Firewall option On as shown in the screenshot below.
Unfortunately, if you are on Public Wi-Fi with WEP encryption, you can’t change Firewall settings. The good news is that most public Wi-Fi uses WPA encryption, which is more secure.
By using a firewall, you are adding an extra layer of protection to your baby monitor and your network from potential hackers. It’s always better to be safe than sorry when it comes to the security of your child.
Step 8: Disable DDNS (Dynamic Domain Name System):
DDNS is a type of service that allows you to access your baby monitor remotely using a domain name, instead of an IP address. While this may seem convenient, it can also leave your network vulnerable to hackers. By disabling DDNS, you are preventing the easy access to your baby monitor by unauthorized users.
To disable DDNS, follow these steps:
- Log in to your router’s admin page
- Look for the DDNS settings and click on it
- Disable the option by selecting ‘No’ or leaving the field blank, depending on your router
- Save the changes made and exit out of the admin page
- Restart your baby monitor and ensure it is connected to your network securely.
With DDNS disabled, hackers will not be able to easily access your baby monitor through a domain name. This adds another layer of security to your network and keeps your baby safe from potential threats.
Step 9: Disable port forwarding or UPnP:
Port forwarding and Universal Plug and Play (UPnP) are features that allow devices on your network to communicate with the internet. While this may seem convenient, it can also leave your baby monitor and other devices vulnerable to hackers. By disabling port forwarding or UPnP, you are restricting access from outside networks to your baby monitor.
To disable port forwarding or UPnP, follow these steps:
- Log in to your router’s admin page
- Look for the port forwarding or UPnP settings and click on it
- Disable the option by selecting ‘No’ or leaving the field blank, depending on your router
- Save the changes made and exit out of the admin page
- Restart your baby monitor and ensure it is connected to your network securely.
By disabling the port forwarding, you are telling your ISP (Internet Service Provider) that you do not want any outside networks to have access to your baby monitor. This further strengthens the security of your network and keeps it protected from potential threats.
Step 10: Modify the port access number or disable remote access:
While remote access is a great feature that allows you to monitor your baby even when you are away from home, it can also leave your baby monitor vulnerable to hackers. Your baby monitor’s camera has a port – usually set at 80 which it uses to relay signals to the screen or to the smartphone app over the internet and this port can also act as a gateway to hackers. To prevent this, it is recommended to disable remote access on your baby monitor.
I suggest changing the port access from 80 to 8200. By using the Transmission Control Protocol (TCP), which ensures data delivery and maintains the order of packets, we can enhance the reliability and efficiency of the transmission. Port 822 adds an extra layer of security, making it more difficult for hackers to gain access.
Moreover, you can also disable remote access altogether if you do not require this feature. This will completely eliminate any possibility of unauthorized access through the internet. To disable remote access, follow these steps;
- Log in to your baby monitor’s app
- Look for the remote access settings and click on it
- Disable the option by selecting ‘No’ or turning off remote access, depending on your app
- Save the changes made and exit out of the app
- Restart your baby monitor and app
Port access modification or disabling remote access can greatly improve the security of your baby monitor and keep it safe from potential hackers. It is a simple yet effective step to take in order to protect your privacy and keep an eye on your baby without any worries.
Step 11: Constantly monitor suspicious activity:
You can keep a log of all the devices that are connected to your baby monitor and check for any suspicious activity. If you notice any unusual connections or activities, immediately disconnect the device and change your passwords. Additionally, keep an eye on the camera’s LED indicator – if it turns on when no one is accessing the app or remote viewing, it could be a sign of unauthorized access.
One way hackers tamper with the hardware when they have hacked the monitor is to remotely control the camera’s movements. You can easily notice the camera’s changing view and can be a way to detect unauthorized access.
Step 12: Create a separate password for your monitor:
Instead of using the same password for all your devices at home, create a unique and strong password for your baby monitor. This way, even if one of your devices gets hacked, the rest of your devices will still be secure. Avoid using common or easily guessable passwords such as your birth year, pet’s name, or any other personal information.
Step 13: Use a strong password:
For optimal security, ensure your password is robust, consisting of a minimum of 12 characters. Incorporate a combination of uppercase and lowercase letters, numbers, and special characters.
Other 12 security precautions to secure your monitor:
Avoid using a pre-owned monitor:
- When purchasing a baby monitor, avoid buying a pre-owned or second-hand one. This way you can be sure that no one else has access to the device and it’s less likely to be compromised.
- Switch off your baby monitor when not using: When you’re not using the baby monitor, make sure it’s turned off. This will minimize the chances of someone hacking into your device and accessing your personal information.
- Use a secure Wi-Fi network: Ensure that your Wi-Fi network is password-protected and encrypted. Avoid using public or unsecured networks as they are more susceptible to hacking.
- If you are worried about your monitor being hacked, search your IP address on this site which scans vulnerable IP addresses. If it returns “no publicly accessible services” then your network is secure.
- Do not share your monitor’s login information with anyone: Your baby monitor is a personal device and sharing its login information can put your privacy at risk. Avoid sharing the login details with anyone, including family members, friends, or babysitters.
- If your monitor doesn’t automatically update its firmware whenever there are new updated security settings, make an effort to update it yourself. This is because new security updates are constantly being released to protect your device from potential vulnerabilities.
- Keep an eye on the manufacturer’s website for any recall notices or security patches that need to be installed. Staying up-to-date with these notifications can help keep your baby monitor secure and prevent any possible hacking attempts.
- Use a virtual private network (VPN): If you need to monitor your baby remotely, consider using a VPN for added security. A VPN encrypts your internet traffic and provides an additional layer of protection against hackers.
- Change default login credentials: Many baby monitors come with default login credentials that are easily accessible online. It is important to change these default settings and create a strong password to prevent any unauthorized access.
- Be cautious of baby monitor apps: Some baby monitors come with a mobile app for easier access. However, these apps may not be secure and can leave your monitor vulnerable to hacking. Make sure to research the security features of the app before using it.
- Consider a wired connection over wireless: While wireless connectivity is convenient, it also increases the risk of hacking. Consider using an ethernet cable for a more secure connection between your monitor and router.
- Consider getting a secure FHSS non-connected monitor that uses Frequency Hopping Spread Spectrum technology instead of a Wi-Fi-connected one. This type of monitor is less vulnerable to hacking as it constantly changes frequencies making it more difficult for hackers to in
- About the Author
- Latest Posts
- More info
Sandra W. Bullock is a grand-mom to two boys and is part of the review board here at Motherhoodhq.com. She is responsible for the quality control of content and is among our most experienced moms. She has over 20 years of writing parenting content online focussing on baby safety indoors and outdoors. She has written widely on babyproofing nurseries and homes for infants and toddlers and published work on privacy and the safety of baby monitors. She is a renowned advocate for non-wifi baby monitors that cannot be hacked and spends a lot of time educating parents on how to secure their homes – including ways to secure the baby from harm in and around homes. Sandra is a native of Atlanta where she also works. She can be reached using her email, Sandra.w(at)motherhoodhq.com
