Cybersecurity Expert Urges Users to Secure Smart Devices Before Connecting

Before connecting new smart devices to a home network, users should prioritize security and privacy settings, according to technology journalist Kurt "CyberGuy" Knutsson. In a recent "Beyond Connected" podcast episode, Knutsson warned that many devices, particularly smart TVs, come with default settings designed for convenience rather than protection, leaving users vulnerable to hackers and data brokers.

"The problem is that most people connect a new device first and think about security later," Knutsson stated. "Some never check the settings at all. That gives hackers, data brokers and nosy companies exactly the opening they want."

Default Settings and Smart TV Vulnerabilities

Many smart TVs, for instance, feature Automatic Content Recognition (ACR) enabled by default. This technology monitors viewing habits and sends the data back to manufacturers, often buried within lengthy terms and conditions. Similarly, phones and tablets may share location data, accept connections from nearby devices, and back up data to company servers without explicit user awareness.

Knutsson emphasizes that a home network's security is only as strong as its weakest link. A single, poorly configured device can provide an entry point for attackers into the entire network.

A 10-Step Security Checklist

To mitigate these risks, Knutsson recommends a comprehensive 10-step checklist before connecting any new smart TV, tablet, or phone:

1. Guest Wi-Fi Network: Set up a separate guest network for IoT devices, using a strong, unique password.
2. Software Updates: Install all available software updates before signing in or adding personal information. This applies to various operating systems and smart TV platforms, including iOS, Android, Samsung, LG, and Roku.
3. Change Default Passwords and Names: Replace factory default passwords and PINs with strong, unique ones. Use a password manager and opt for longer passcodes on phones and tablets. Rename devices to generic identifiers rather than personal ones.
4. Account Protection: Enable two-factor authentication for accounts like Apple, Google, Samsung, and Amazon. Roku users should set a PIN to prevent unauthorized purchases and subscriptions.
5. Disable ACR and Ad Tracking on Smart TVs: Turn off ACR and other tracking features, such as Viewing Information Services or Interest-Based Advertising, within the TV's privacy settings. This includes options for Samsung, LG, Roku, Amazon Fire TV, and Vizio.
6. Limit Location, Camera, and Microphone Access: On phones and tablets, review app permissions and grant the minimum necessary access, opting for "Ask every time" or "While using the app" where possible.
7. Disable Unused Wireless Features: Turn off Bluetooth when not in use. On mobile devices and TVs, disable features like Nearby Share, Quick Share, AirDrop, file sharing, screen mirroring, and remote access if they are not needed.
8. Enable Lost-Device Protection: Set up features like "Find My iPhone" or "Find My Device" to help locate lost or stolen devices. This includes options for location tracking and offline finding capabilities.
9. Remove Unnecessary Apps: Delete preinstalled apps that will not be used and only install applications from official app stores. Avoid sideloading apps from unknown sources and be wary of free streaming apps with poor reviews or suspicious permission requests.
10. Use a VPN: Implement a Virtual Private Network (VPN) to encrypt internet traffic, adding a layer of privacy and security. A VPN can protect devices that do not natively support VPN apps when run at the router level.

Knutsson also mentioned an upcoming free live class on July 22 at 1 p.m. ET, focusing on reducing spam, robocalls, and junk email, with registration available at CyberGuyLive.com.