By the SightShield team · · 3 min read
The shared password problem
In many homes and offices one admin password is shared by everyone: the owner, the spouse, a manager, the installer and sometimes a former employee. Anyone with it can delete recordings, change settings, switch off cameras or lock everyone else out. When something goes wrong, there is no way to know who did it.
Every NVR from the major brands supports separate user accounts with different rights. Setting them up takes about half an hour and is one of the most useful security steps you can take.
Who needs what
| Person | Suggested access |
|---|---|
| Owner or director | Admin account, kept private; used for settings only |
| Spouse or partner | Live view and playback on all cameras, no settings |
| Shop or office manager | Live view and playback on work areas; no export, or export only |
| Reception or security guard | Live view of entrances and gates only |
| Apartment committee members | Playback and export of common areas, with a log of who exported what |
| Installer or AMC provider | A separate account they use only during service visits, or temporary access |
How to set it up
- Change the admin password to a long, unique one and store it somewhere safe, such as a password manager or a sealed envelope.
- Create one user account per person, never one shared “staff” account.
- For each account, choose which cameras they can see and whether they can play back, export, or use PTZ.
- Turn off rights to change settings, format disks or reboot for everyone except admin.
- In the brand’s phone app, use the device sharing feature rather than giving out the login, so you can remove someone’s access in one step.
- Enable the NVR’s log and check it occasionally for unexpected logins or exports.
Privacy inside the home
Cameras that look at bedrooms, bathrooms or changing areas should not exist at all. For cameras in living areas, think about who in the family can see them; domestic staff and elderly parents are entitled to know cameras are there. Many families give household members access to the outdoor and entrance cameras only, and keep indoor cameras for the owners.
Cameras for home staff →When someone leaves
The moment an employee leaves, a tenant moves out or a committee changes, remove their account or app share the same day. If the admin password was ever shared, change it too. Apartment associations should hand over CCTV accounts as part of the committee handover, just like bank signatories.
Records and the DPDP Act
Businesses and associations that record people are expected to protect the footage and limit who can see it. Separate accounts, a short list of people allowed to export, and a simple register of exports — date, camera, time range, who asked, and why — show that access is controlled. That register is also what police or insurers will want when you hand over a clip.
DPDP Act and CCTV →Worked example
A clinic in Jayanagar had the doctor, two receptionists, the practice manager and the installer all using one admin login. After a receptionist left, playback for one afternoon was found deleted. We set up five accounts: admin for the doctor, playback and export for the manager, live view of reception and the entrance for the two receptionists, and a service account for AMC visits that the doctor enables when needed. The log now shows every login and export.
Quick answers
Can I give someone CCTV access without my password?+
Yes. Create a separate user on the NVR or use the app’s device sharing feature, with only the rights they need.
Can I limit which cameras a user sees?+
Yes. Most NVRs let you choose cameras per user, separately for live view and playback.
How do I stop someone deleting recordings?+
Give them a non-admin account without rights to format disks or change settings.
How many people can view at once?+
It depends on the NVR and your upload speed. Several users at once is normal; many simultaneous remote viewers may need a faster connection.
Should our installer keep admin access?+
Better to give them a service account you can switch on for visits, and keep the admin password yourself.