Ring cameras: reused passwords, no 2FA
Strangers spoke to families through hacked Ring cameras. Ring blames reused passwords. Turn on two-factor authentication.
Over the past week, several families reported strangers talking to them, and to their children, through Ring cameras in their homes. Ring says its systems weren’t breached: the attackers logged in with email and password pairs leaked from other sites, on accounts without two-factor authentication.
That may be technically true. It’s still a design question. A camera inside a home shouldn’t be protected by a reused password alone.
If you have any home camera:
- Turn on two-factor authentication today.
- Use a unique password for the camera account.
- Check the shared users list and the login history in the app.
- Think about placement. Cameras facing bedrooms carry more risk than ones facing the door.
For device makers: make 2FA the default, and warn users when a login comes from somewhere new.