IP Camera App Security Test | Avast

IP Camera App Security Test | Avast
Grace Roberts, 23 September 2020

Of the 10 apps that we put to the test, the apps that accompany the Blink and Wyze smart cameras proved to provide the best account security measures



Recently, our research team looked into the account security of app companions belonging to ten IP cameras. Each of these cameras have been listed on Amazon’s “hot new releases” and “best seller” categories. 
Avast IoT researcher, Marko Zbirka, looked into whether the apps that accompany smart cameras include a two-factor authentication option, send the owner a notification that someone has attempted to log in or has successfully logged in from a new device, especially if the login attempts came from a device appearing to be on the opposite side of the world, and if the length of account passwords was restricted.  
The 10 different IP cameras, all of which have cloud functionality, are as follows:

Blink
Wyze
YI IOT
YI Home
Wansview Cloud
MIPC
Jawa
CloudEdge
Amcrest Cloud
iCSee
The apps accompanying these cameras have all been downloaded 50,000 times or more, and four of the ten have been downloaded more than one million times. 
Checking account security
Our team’s researcher downloaded the apps used to connect and control the cameras and created accounts for them. After successfully logging in, he checked for an option to change the accounts’ password and set up two-factor authentication for the accounts. He then used a second phone with a VPN app to connect to a server abroad, so that the communication from the second device woul ..

Support the originator by clicking the read the rest link below.