The Internet of Things (IoT) will revolutionize how we go about our daily lives, but it also introduces new vulnerabilities and leaves us more susceptible to cyberattacks than ever before. Just as the physical world has risks, the virtual world of IoT devices can present threats to our privacy, finances, and even physical security.
It’s important to be aware of these risks so you can stay safe when IoT devices start infiltrating your life and business. Here are seven ways to secure your IoT devices from cybercriminals.
Always Keep Your Software Up-To-Date
Updating your software isn’t just about fixing bugs and vulnerabilities—it also removes unneeded features and other code that could be taking up memory or slowing down your computer. In addition, keeping your software up-to-date allows you to take advantage of new features and security updates as soon as they’re available, so you don’t have to worry about keeping everything patched for extended periods.
You should also update any software you regularly use, even if you’re unsure if there’s an available update. Whether it’s a web browser like Internet Explorer or Firefox, or a program like Microsoft Word or LibreOffice, having up-to-date software is vital to securing your computer.
Change Your Passwords Regularly
One of the easiest ways for cybercriminals to steal data is by guessing your passwords. To prevent that, make sure you change your passwords regularly and never reuse old ones. While at it, be sure these new passwords are strong and complex (you can use a password generator like PasswordBox if you need help with that).
It also wouldn’t hurt to turn on two-factor authentication. This will send you a text message whenever someone tries logging into your account from an unrecognized device—it’s a helpful layer of protection against cybercrimes such as phishing and man-in-the-middle attacks.
Use Two-Factor Authentication
Implementing two-factor authentication (2FA) on your devices will significantly reduce your risk of being hacked. The more difficult it is for cybercriminals to access your data, the less likely they will be able to pry open and steal it.
2FA uses a second verification method beyond a password—such as receiving a code via text message or using an authenticator app like Google Authenticator. For example, if you’re logging into Gmail on a new computer, Google may ask you to enter a security code that was sent to your phone number.
If someone tries to get into your account without that security code—or if they try logging in with someone else’s phone number—it won’t work. For added protection, add 2FA wherever possible: Facebook and Twitter both offer it, so do Amazon Web Services and Dropbox. You can even add 2FA protection to some smart home devices, such as Alexa or Nest thermostats. And if you use any public Wi-Fi connections, turn off any file-sharing functions so hackers can’t access files stored on connected devices.
Don’t Use Universal Plug And Play
Universal Plug and Play (UPnP) allows network-connected devices such as printers, webcams, routers, and game consoles to automatically forward requests to other devices within a local area network. Unfortunately, UPnP is rife with security holes that cybercriminals can exploit. You can protect yourself from hackers by disabling UPnP on your router; if you must use it for some reason, ensure you’re using a high-quality password.
If you do use a smart device in your home, be sure to install all software updates as soon as they become available. If there’s no immediate threat of an update being available or you don’t have access to Wi-Fi or internet service at home, disable automatic updates altogether. If an update is crucial, turn off your device before updating it—and once again when you turn it back on—to prevent any potential hacks while data transfers between devices over a potentially unsecured connection.
Finally, avoid storing sensitive information like bank account numbers and passwords on smart home systems like voice assistants or IP cameras; instead, use these systems only for tasks like ordering products online or setting timers and alarms.
If IoT Devices Are Not Needed, Discount Them
If you have a security camera or smart television that is not being used, it should be disconnected. The simple reason is that cybercriminals may attempt to gain access to your network via these devices. The more complex reason is that it reduces your overall risk and future headaches that come with outdated technology on your network. It’s a good rule of thumb for any unused devices in general, but even more so for those connected to networks that you don’t manage directly. Remember, if you don’t use it and it doesn’t make money for you, get rid of it!
