By the SightShield team · · 3 min read
A camera is a computer on your network
A Wi-Fi camera is a small computer with a lens, a microphone, an internet connection and an app that talks to servers somewhere in the world. A cheap one that costs less than a dinner out has to save money somewhere, and the usual saving is security: shared default passwords, unencrypted streams, firmware that is never updated, and cloud servers with unknown owners. When that camera is pointed at your bedroom, baby’s cot or cash counter, those shortcuts matter.
What can go wrong
| Risk | What it means for you |
|---|---|
| Default or weak passwords | Anyone who finds the camera online can watch and listen |
| No firmware updates | Known security holes stay open for the life of the camera |
| Unknown cloud servers | Your video and account details sit on servers you cannot check |
| Botnet infection | Your camera is used to attack other networks, slowing your internet |
| Network foothold | An attacker uses the camera to reach your phones and computers |
| App disappears | The maker shuts down and the camera stops working overnight |
This has happened before
The Mirai botnet in 2016 took over hundreds of thousands of cameras and recorders using default passwords and used them to knock major websites offline. Since then there have been repeated reports worldwide of private camera feeds being viewed or sold online. Cheap cameras with shared credentials and abandoned firmware remain the easiest targets.
India’s certification rules
Since 2024, CCTV cameras sold in India must meet security requirements under the government’s compulsory registration scheme, tested through STQC-recognised labs before BIS registration. The rules apply model by model and cover hardware, firmware and supply-chain security. Many unbranded cameras sold online cannot show this certification. Ask the seller for the registration of the exact model before buying.
STQC certification for CCTV explained →How to choose a safer camera
- Buy from an established brand with an Indian office, support and a record of firmware updates.
- Check the model’s certification for sale in India.
- Prefer cameras that force you to set your own strong password at setup.
- Look for two-factor login on the app and encrypted video.
- Avoid cameras that need port forwarding on your router.
- Read what the app collects; deny permissions it does not need.
Securing the cameras you already have
- Change the password to a long unique one, and change the app account password too.
- Update firmware from the app or maker’s website.
- Turn on two-factor authentication.
- Put cameras on a guest or separate network, not the one your laptops use.
- Disable remote access features you do not use, and turn off UPnP on the router.
- Replace cameras whose maker no longer exists or has stopped updates.
Where cameras should not point
Even a secure camera can be hacked eventually, so think about what it sees. Avoid cameras inside bedrooms and bathrooms, and use privacy shutters or schedules that turn indoor cameras off when the family is home. Outdoor cameras watching gates and doors give most of the security benefit with far less privacy risk.
Wired IP cameras as the alternative
For homes and businesses that need reliable security rather than one baby monitor, wired PoE IP cameras with an NVR are more secure and more dependable: no Wi-Fi dropouts, local recording, and a network we can lock down properly. We install only IP cameras from brands whose models we can confirm are certified for sale in India.
Wi-Fi CCTV vs wired CCTV →Quick answers
Can cheap Wi-Fi cameras be hacked?+
Yes. Weak default passwords, unpatched firmware and insecure cloud services make cheap cameras easy targets.
How can I tell if a camera is certified in India?+
Ask the seller for the BIS registration of the exact model, and check it against the registration database.
Should I put a camera in my bedroom?+
Avoid it. If you must use indoor cameras, choose ones with a physical privacy shutter or schedules.
Is a wired camera safer than Wi-Fi?+
Generally yes, especially with an NVR on a separate network and no port forwarding.