Ubiquiti says change your password. Do more
Ubiquiti asked customers to reset passwords after unauthorised access. Your router account deserves MFA too.
Yesterday Ubiquiti emailed customers about unauthorised access to systems hosted by a third-party cloud provider. It asked everyone to change their account password and turn on two-factor authentication.
That account isn’t a forum login. For many people and small offices, it can manage their routers, Wi-Fi and cameras remotely. Whoever has it can change your network.
Do this today:
- Change the Ubiquiti account password, and anywhere else you reused it.
- Turn on 2FA with an authenticator app.
- Check the devices linked to the account and the admin users on each. Remove anything you don’t recognise.
- Consider a local admin for your network gear, so remote cloud access isn’t the only door.
The same goes for any cloud-managed device: firewall, NAS, smart cameras. The cloud account is the master key to the hardware.