How to connect a smart device safely at home

Check the setup instructions before connecting

For a newly imported device or a sample you are evaluating, obtain setup instructions for the exact model. Confirm the manufacturer's app, account provider, update route and security support end date. Do not use a supplier's shared demonstration account or install software from an unexplained download link.

Keep home setup separate from your purchasing checks. Use our UK connectable-product security guide for supply documentation and our smart-device privacy settings guide for data collection and app permissions.

Choose a network that actually isolates the device

Start with your router's guest network or dedicated smart-device network, if available. Check that access to the main network is blocked, keeping the device away from computers holding business or personal files. A different network name alone does not prove isolation. Check the router manual and its access settings.

Guest isolation can prevent your phone finding the device or stop a hub communicating with it. Test pairing and everyday control. Temporarily joining your phone to the device network may help setup, but isolation between guest devices can still block discovery. Avoid solving this by opening access to the whole main network.

If the router cannot provide suitable isolation, ask your broadband provider about supported options. A separately configured network with access rules may suit devices needing local control. Simply plugging another router into the existing network does not establish the separation you need.

Protect the accounts and recovery route

Create an account you control, with a strong, unique password stored in a password manager. Change any shared factory password on the device itself. Enable multi-factor authentication wherever offered, including on the recovery email account. Store recovery codes somewhere secure and separate from the device.

Check who already has access. Remove factory test users, old invitations and unnecessary linked services. Invite household users through individual accounts where supported instead of sharing the owner's password. Confirm how to revoke access if a phone is lost or a user leaves.

Close unnecessary router and remote access

Secure the router's administrator login separately from the wireless password. Keep its firewall enabled and turn off internet-facing administration unless you need it. Review port-forwarding rules and automatic port-opening features, using the router manual to identify them. Remove unused rules and disable unnecessary automatic openings; check whether other household services are affected.

Turn off the device's remote viewing, remote control and supplier support access unless needed. Router port settings and app cloud access are separate checks: removing a port rule does not necessarily stop access through the provider's cloud service. Ask the supplier which switches control each route.

After changing settings, check local operation. Then disconnect your phone from home wireless and try accessing the device over mobile data. Unexpected continued access needs investigation. Check linked accounts and cloud settings before treating remote access as disabled; alerts or voice-assistant functions may also be affected.

Update, retest and keep a setup record

Install available updates through the manufacturer's verified update route before normal use. Enable automatic updates for the device, app and router where supported. If updates are manual, set a recurring reminder to check. Ask what happens at the security support end date and plan replacement or disconnection if support ends.

Record the model, installed software version, network used and chosen access settings without recording passwords. Recheck local control, isolation and remote access after updates or resets. For business sample approval, use our firmware and software approval guide to connect your findings to the build the factory will supply.