Information security in the home network

Information is interpreted data. For example, a number can be a figure, a time or a distance between two locations. It only becomes information once it has been put into context. Nowadays, we increasingly use data carriers, computers and networks to process, store or transfer information. Information is an essential asset for companies, public authorities and private individuals and must be adequately protected.

The core of information security is maintaining the availability (accessibility at all times for authorized users), integrity (completeness and accuracy of information) and confidentiality (protection against access by unauthorized third parties) of information.

For your own four walls, for example, this means preventing unauthorized access from outside to sensitive data such as private photos, online banking or smart home applications.

To be on the safe side, data and information security must be guaranteed in the interconnected home. We recommend the following:

• Your WiFi should be operated with the latest protection standards, for example WPA2. Use a long and, if possible, complex password.
• Passwords for smart home systems (local or on the internet) should also be sufficiently long and should not be guessable using dictionary attacks. Use the usual recommendations for passwords (upper and lower case, special characters, letters and numbers).
• Passwords should only be used for one system at a time so that one password cannot be used to open other internet accounts. A password manager is recommended to manage the various system accesses.
• Make sure that apps and other applications have the latest update. This often closes security loopholes.
• Also keep your router and the password for your router up to date.
• Remote access (access via the internet) to a smart home system should be specially protected and encrypted. You can obtain this information directly from the manufacturer.
• The provider's privacy policy must indicate which personal data is processed and how it is handled. It is therefore important to read this declaration carefully.
• Cell phones and tablets used to control the smart home should not be rooted (jailbreak) and should always be up to date with the latest updates.
• Apps for remote control of the smart home should only be installed from trustworthy sources and, if possible, tested by an independent body.
• Also look out for certification marks so that smart home systems and components are tested by independent bodies, such as the VDE Institute, in terms of information security and data protection.

A simple but effective safety principle is to deactivate the WiFi when it is not needed – for example at night, when you are away for a long time or on vacation. Because what is not connected cannot be attacked. Some routers have buttons on the housing that can be used to switch the WiFi on and off. Some models also have an integrated timer that automatically deactivates or reactivates the WiFi at certain times. If neither of these options is available on your router, the only way to reactivate the WiFi after deactivation is with a LAN cable. It is best to find out how to reactivate your router before switching off the WiFi. Please also note that appliances in your home that are connected via WiFi, such as WiFi cameras or alarm systems, will no longer work if the WiFi is deactivated.

Switching off the WPS function provides additional security. WPS stands for "WiFi Protected Setup" and sets up a wireless home network with encryption simply by pressing a button on the router or entering a PIN without having to manually enter a long WiFi password. A useful function that makes it easy to connect appliances to the network. However, a vulnerability in some router models means that activating WPS allows other appliances to determine the security key and connect to the WiFi network.

VDE Verband der Elektrotechnik Elektronik Informationstechnik e.V. and its affiliated companies (hereinafter each “VDE”) provide non-binding information on consumer protection topics. These publications are intended solely to raise general awareness of consumer protection in relation to electrotechnical products and issues. They expressly do not constitute professional or technical advice. The information is provided the best of one's knowledge and belief without having evaluated the actual conditions at a specific location or of a specific product.

While VDE makes every reasonable effort to ensure that the information is correct and complete, it cannot assume liability nor any warranty (neither explicitly nor implicitly) for the correctness, completeness or topicality of the content of the information provided.

The information may only be applied with the understanding that VDE cannot be held liable for any direct or indirect damage or loss of any kind. The use of the information provided does not release the user from the responsibility for his/her own actions and is therefore at his/her own risk.

Product-/Model-specific manufacturer specifications must be observed.