4 Home Camera Mistakes That Turn Your Doorbell Into Someone Else's Livestream

In 2014, a website called Insecam streamed live feeds from tens of thousands of home and business cameras. Nobody hacked anything. The owners had simply never changed the default password.

Cameras are supposed to make you safer. Set up carelessly, they hand strangers a window into your living room. Here are four beginner mistakes and how to avoid each one.

Mistake 1: Keeping the Factory Password

Many cameras ship with logins like admin / admin or admin / 12345. Those lists are public. In 2016, the Mirai botnet hijacked hundreds of thousands of cameras and routers using a short list of default passwords.

Fix: Change the password the day you plug it in. Use a long, unique one stored in your password manager. If the camera won't let you change it, return it.

Mistake 2: Letting the Camera Phone Home

Cheap cameras often send video to the maker's cloud servers by default. You don't control who sees it, how long it's kept, or where it's stored.

Fix: Record locally instead.

• Pick cameras that support RTSP or ONVIF. These are open standards that let you pull video directly.
• Run a free local recorder like Frigate or Agent DVR on a spare PC or mini server.
• Block the camera from the internet in your router settings. It can still talk to your recorder. It just can't talk to the manufacturer.

Your footage now lives in your house, on your disk.

Mistake 3: Opening a Port to Watch From Work

Want to check the front door from the office? The tempting shortcut is "port forwarding," which opens a hole in your router so the camera is reachable from anywhere. Anywhere includes every scanner on the internet. Sites like Shodan index these exposed cameras within hours.

Fix: Use a private VPN instead. Your phone joins your home network securely, and the camera stays invisible to everyone else. No open ports, no public listing.

Mistake 4: Recording More Than You Need

Two quiet problems here:

• Aim. A camera that covers your neighbor's garden or the public sidewalk can cause legal trouble in some places. Audio recording is even stricter. Many regions require consent from everyone being recorded.
• Retention. Keeping months of footage means months of your family's daily life sitting on a drive. If it's stolen or leaked, all of it goes with it.

Fix: Point cameras at your own entrances only. Turn off audio unless you truly need it. Set your recorder to delete footage after 7 to 14 days, and keep only clips with motion events.

Quick Checklist

Your Next Step

Tonight, open your router's admin page and look at the list of connected devices. Find each camera, then check one thing: is port forwarding turned on for it? If yes, switch it off. That single click removes your camera from the public internet.