Summary

18 items · 30–60 minutes

Why Post-Setup Security Gets Skipped

Getting a smart home up and running takes real effort — connecting devices, downloading apps, setting up automations. Once everything works, it's tempting to move on and not think about it again. That's exactly when security gaps tend to open up.

Firmware goes unpatched. Default settings linger. Old devices nobody uses anymore stay quietly connected to your network. None of these feel urgent until something goes wrong.

This checklist is for households that already have smart devices running. If you're still in the early stages, the smart home setup guide is a good place to start first. But if your devices are live, this is the audit you probably haven't done yet.

Firmware and software updates

Check every smart device's app for available firmware updates and install any that are pending. Must
Enable automatic updates in each device's app settings where that option exists. Should
Check your router's admin panel for firmware updates — routers are frequently overlooked. Must

Passwords and account access

Change any device that still uses a default or factory-set password to a strong, unique one. Must
Make sure no two smart home accounts or device logins share the same password. Must
Enable two-factor authentication (2FA) on every smart home app or account that supports it — this means a second code is required at login beyond just your password. Must
Remove access for any household member or guest account that no longer needs it. Should

Network configuration

Create a separate Wi-Fi network (often called a guest network or IoT network) specifically for smart devices, keeping them off the same network as your computers and phones. Should
Confirm your home Wi-Fi is using WPA2 or WPA3 encryption — check this in your router's settings under security or wireless options. Must
Disable remote access features on any device where you don't actively use them. Should

App permissions and data sharing

Open each smart home app on your phone and review which permissions it holds — microphone, camera, location, and contacts access are worth scrutinising. Must
Revoke any permission that isn't genuinely required for the device to function. Should
Check whether any device app has a data-sharing or analytics opt-out, and set it according to your preference. Nice to have

Unused and forgotten devices

List every device connected to your network and identify any you no longer use — your router's admin panel or a network scanning app can help. Must
Factory reset any device you're decommissioning before disconnecting it, so your data doesn't stay on it. Must
Remove decommissioned devices from your associated accounts and apps — don't just unplug them. Must

Tools You'll Need for This Audit

You don't need any specialised software to work through this checklist. Most steps involve checking settings in apps or on your router's admin page. Here's what to have handy before you begin.

Required

Router admin panel

Used to check firmware updates, review connected devices, and configure network segments for smart devices.

Required

Smart device companion apps

Used to check for firmware updates, review permissions, and adjust privacy or security settings on each device.

Optional

Password manager

Helps you create and store unique, strong passwords for every device account without having to remember them all.

Optional

Network scanning app

Lets you see a full list of devices currently connected to your home network, helping you spot anything unknown or forgotten.

For anything related to how your cameras and doorbells handle recorded footage, it's worth pairing this checklist with a look at how smart camera data is stored and shared.

What to Do If You Find a Problem

Working through the checklist above will likely surface at least one thing that needs attention — an unpatched device, a shared password, or an app with permissions it doesn't need. That's normal. The goal isn't a perfect score; it's progress.

If you find your network setup itself is part of the problem, common home network mistakes explains the configuration errors that affect smart devices most often.

For a broader look at privacy across your accounts and apps — not just smart home devices — the annual privacy settings check is a practical companion to this one. And if you want to go deeper on why strong passwords alone aren't sufficient, Strong Passwords Are Only Half the Battle covers what else you need in place.

Don't just unplug unused devices

A device that's been physically disconnected but not removed from your account can still hold your login credentials, saved schedules, and network details. Always factory reset a device and remove it from all associated apps and accounts before retiring it. Check the manufacturer's support page for the correct reset procedure for your specific model.

Treat this checklist as a recurring task, not a one-time fix. Running through it every six months or so keeps your setup from quietly drifting back toward risk.

Share

Everyday Tech Editorial Team · Contributor

Everyday Tech Editorial Team is the collective byline for our editorial team and contributor network. Articles published under this byline or an editorial pen name are researched, written, and reviewed according to our editorial standards for clarity, consistency, and independence before publication.

The content on this site is for informational purposes only and is not a substitute for professional advice. Always consult a qualified professional for guidance specific to your situation.