A home IP camera can be useful, but no camera is automatically safe because it is expensive, uses the cloud, or comes from a familiar brand. Look for ongoing security updates, protected accounts, encrypted connections, and settings that let you control who can watch and where recordings go.
Updated : Corrected claims that all cloud cameras are secure or that every IP camera needs port forwarding. Added a practical checklist for local and cloud models.
How an IP camera works
An IP camera sends video over a network. It may connect through Ethernet or Wi-Fi and store recordings on a memory card, a local recorder, the manufacturer’s cloud, or a combination. Remote viewing can use a vendor service or a separately configured secure connection.
| Setup | Useful advantage | What to check |
|---|---|---|
| Local recording | Can keep recordings under your control | Passwords, recorder security, backups, and how remote access works |
| Cloud recording | Convenient viewing and storage away from the camera | Account protection, subscriptions, retention, encryption and vendor support |
| Local plus cloud | Can provide more than one recording route | Both sets of settings; one protected route does not secure the other |
“Local” does not guarantee privacy, and “cloud” does not guarantee encryption. Check the exact model’s documentation and settings. The FTC’s camera-security guide recommends looking at protection for account details, live video, and stored recordings.
Settings to change before everyday use
- Update the camera, recorder, and viewing app. Turn on automatic updates where supported and check the manufacturer’s support policy.
- Replace default credentials. Use a unique password for the camera and a different one for its cloud account where those are separate.
- Enable two-factor authentication. Protect the account that can view or manage the camera.
- Review sharing. Give household members their own limited access if supported; remove old guests.
- Check remote access. Turn it off if you only need local viewing.
- Review recordings. Know where footage is stored, how long it stays, and how to remove it.
Think about the view as well as the settings. Avoid pointing a camera into private rooms or capturing more of a neighbour’s property than you need. Check the relevant local rules before recording shared spaces or audio.
Do you need to open router ports?
Not always. Many consumer camera apps use a vendor service without manual port forwarding. A local camera may offer different options. Do not open ports or expose its admin page just because an old guide says remote viewing requires it.
For a locally managed system, remote access through a properly maintained VPN can be an option, but its setup and security still need attention. Use the maker’s supported instructions for the exact camera and router. A VPN does not fix an unpatched camera or a stolen account password.
Protect the network around the camera
Use WPA2 or WPA3 Wi-Fi, update the router, and give it a strong admin password. A separate device network can reduce exposure, but make sure your phone or recorder can still reach the camera in the way you need.
The FTC’s router guidance covers those basics. Our Wi-Fi setup guide explains why a mesh or “smart” label alone does not make a network secure.
When should you replace a camera?
Consider replacement if the manufacturer no longer provides security fixes, the app or cloud service has stopped working, or essential protection is missing. A cheap model is not automatically unsafe, and a costly one is not automatically supported forever. Check the product’s actual record and support terms.