The odds are very good that someone in your family got an Internet-connected device this holiday season.  This year, in addition to the old staples such as routers and tablets, your family members may be getting cameras (to watch people steal their Amazon and Google Express deliveries), thermostats, sprinkler controllers, crock pots, internet-connected refrigerators, etc.

And virtually all of them come with a default password.  And virtually all of those are well known, and bad.

So help Santa this year by making sure that when you give an internet-connected thing, you also give the instructions for securing the device and changing the default password and account.  If you didn’t give the gift, but are called on as your family’s Tech Support guru, help out with these simple tips.

1) Change the default credentials (username, password) that come with the device.

     Username: admin

     Password: admin

is so-Twentieth Century.  Find the Administrative or User sections of the device UI and change the default credentials (the username and password).  But be sure your family member stores the new credential info in a safe place, such as a Password Vault application – not on a yellow Post-It note…

2) For WiFi Access Points or WiFi routers:

     – Change the SSID to something unique.  Good examples:

          – notyourwifi

          – mumblefratz (unless that’s your name)

          – NSA Surveillance Van — OK, not original, but good for a laugh…

          – To be even more secure, avoid the top-1000 most-common SSIDs – hackers have pre-computed millions of passwords for these, making it easier to break into the network:

               https://wigle.net/stats

     Your favorite college or pro team name, or really any unique string of letters and numbers is fine.  Do not use the equipment vendor’s name (linksys, netgear, …) because that may help someone identify a list of possible bugs and exploits more easily.  I also don’t use my name or my family’s names – while your neighbors all know this info, the drive-by bad guy doesn’t need to have this information easily accessible.

     – Use the strongest security option available.  Use WPA2 Personal (possibly listed as WiFi Protected Access)

I’ve created an initial list of some popular connected Things and have provided information on the latest firmware/software version and a pointer to the manual.  Help your family, help your friends, help your neighbors.  Update their firmware/software, set a good administrative username/password, update their SSID and get them off-and-running with their new gear.  You’ll be a hero – and most likely cut down on the follow-on calls for support in the New Year…

Please comment on this post and add pointers to other devices that you – or your family – received.  Let’s all help each other.

I hope that you are having a very happy holiday season!