What to Do If Your Security Camera Is Hacked (2026)

Last updated September 2026

Quick Answer

If your security camera is hacked, disconnect it from power immediately, then change your account password and WiFi password from a different device, enable two-factor authentication, and check the app for unfamiliar logins or shared users. Report the incident to the manufacturer, and if you saw or heard a stranger through the camera, contact local police before doing anything else.

Signs Your Security Camera Has Been Hacked

Most compromised cameras show at least one of these warning signs before an owner notices anything is seriously wrong:

• The camera moves on its own (pan/tilt models) when no one in the household is controlling it
• A light or indicator LED turns on at odd hours, or the status light behaves differently than usual
• You hear a stranger’s voice through a two-way audio speaker
• The app shows a login session, device, or shared user you do not recognize
• Notification settings, motion zones, or camera names have changed without your input
• Your internet connection slows dramatically or your router shows unusual outbound traffic
• You receive a password-reset or new-device email you did not request

If any of these apply, treat it as an active hack rather than a glitch and move straight to the action plan below.

The Immediate Action Plan

Work through these steps in order. Speed matters more than perfection here — the goal is to cut off access first, then clean up.

1. Physically disconnect the camera. Unplug it or remove the battery. This is the fastest way to stop a live intruder from watching or listening, even before you touch any passwords.
2. Change your camera app password from a different, trusted device — a laptop or phone that was never connected to the compromised camera’s app session. Use a long, unique password you have not reused anywhere else.
3. Log out of all sessions. Nearly every major camera app (Ring, Eufy, Wyze, Nest, Arlo) has a “manage devices” or “active sessions” screen. Force-logout every session, not just the one you suspect.
4. Enable two-factor authentication (2FA) on the camera account if it is not already on. This single step blocks the most common re-entry method: credential stuffing with a leaked password.
5. Change your WiFi password and reboot your router. If the camera was compromised through your network rather than a leaked account password, a new WiFi password with WPA3 encryption cuts off that path too. Our WiFi security guide walks through this step by step.
6. Check for firmware updates on both the camera and the router, then install them immediately. Unpatched firmware is one of the most common ways attackers get in the first time. See our firmware update guide for model-specific instructions.
7. Review shared users and third-party app permissions. Remove anyone you do not recognize, and revoke access for any smart-home integration (Alexa, Google Home, IFTTT) you are not actively using.
8. Contact the manufacturer’s support line. Report the incident so they can flag the account and, in some cases, confirm whether the breach originated on their servers rather than your network.

Brand-Specific Steps

The core process above applies everywhere, but the exact menus differ by brand:

Ring: Open the Ring app, go to Control Center > Account Settings > Authorized Client Devices, and remove any device you don’t recognize. Then enable Two-Step Verification under Account Settings > Two-Step Verification. Ring’s support team can also pull login history if you report the incident.

Wyze: Go to Account > Devices Login (or Account Security) to see and revoke active sessions, then turn on 2FA under Account > Account Security > Two-Factor Authentication. Wyze cameras that use local SD storage rather than cloud storage limit what an attacker can actually access even if the account is compromised.

Eufy / Anker: Because most Eufy cameras default to local storage rather than the cloud, a compromised app account typically exposes the live feed but not a stored video archive. Still, change your Eufy account password, enable 2FA in the app’s Security Center, and update the camera’s firmware.

Google Nest: Nest cameras run through your Google Account, so go to myaccount.google.com > Security > Your devices, sign out of unfamiliar sessions, and turn on 2-Step Verification if it isn’t already active.

Arlo: In the Arlo app, go to Settings > My Account > 2-Step Verification to enable it, and check Settings > My Devices to remove unrecognized sessions.

How Attackers Actually Get In

Understanding the entry point helps you close it permanently. The three most common causes, in order of frequency, are a reused password leaked in an unrelated data breach, a weak or default router password that let an attacker onto your home network, and outdated camera firmware with a known, unpatched vulnerability. Real incidents like the 2019 Ring credential-stuffing wave and the 2015 SimpliSafe replay attack both trace back to these same root causes rather than some unstoppable, sophisticated exploit. For the full history of what has actually happened to camera brands and how they responded, see our breakdown of whether home security systems can be hacked.

Should You Replace the Camera?

You do not need to replace hardware just because an account was compromised — in most cases, a password reset, 2FA, and a firmware update fully close the gap. Consider replacing the camera only if it is several years old and the manufacturer has stopped shipping firmware updates for it, or if you want to move to a camera with local-only storage so a future account compromise cannot expose a video archive at all. If you are shopping for a replacement with that goal in mind, our privacy-first security cameras roundup covers models built specifically around local storage and no required cloud account, and the Eufy SoloCam S40 is a strong pick if you want solar power and on-device storage in one unit.

What an Attacker Could Actually Access

The severity of a camera hack depends heavily on what the camera does and where its footage lives. If the camera only streams live video and has no local or cloud storage, an attacker who gains access typically only sees what happens while they are actively logged in — there is no archive to download. If your plan includes cloud recording, an attacker with account access can potentially download or view stored clips going back days or weeks, which is a much bigger exposure. Two-way audio cameras add another dimension: a compromised device can be used to talk through the speaker, which is how several publicized incidents (including cases involving Ring cameras in 2019) escalated from unsettling to genuinely frightening. Check your camera’s storage settings now, and if you use cloud recording, assume any footage from before you regained control could have been viewed and change your behavior accordingly — for example, avoid discussing sensitive information near the camera until you have confirmed the account is fully secured.

Common Mistakes to Avoid After a Hack

A few reactions make the situation worse instead of better. Do not simply delete the app and reinstall it without changing the underlying account password first — the account itself, not just the app, is what was compromised. Do not reuse a “close enough” variation of your old password (adding a number or symbol to the same base word); credential-stuffing tools check common variations automatically. Do not skip the router-level check, since a camera hack that originated from a compromised home network will simply happen again to the replacement device if the network itself is not secured. Finally, do not assume a single security question or an obscure account email makes you safe — most cameras are compromised via automated tools testing leaked password databases at scale, not a targeted attacker who studied your specific setup.

Should You Call the Police?

Call local police if you saw or heard someone through the camera’s live feed or speaker, if you have evidence someone used footage to plan a break-in (for example, watching for when your house is empty), or if the hack coincided with an actual break-in or theft. For an account compromise with no evidence anyone actually watched or listened in real time, reporting to the manufacturer and the FTC at reportfraud.ftc.gov is the more useful step, since local police departments typically cannot investigate a remote account breach.

Preventing It From Happening Again

Once you have secured the immediate breach, put these habits in place so it does not repeat:

• Use a password manager to generate a unique password for every camera and smart-home account — reused passwords are the single biggest cause of camera hacks
• Turn on 2FA everywhere it is offered, not just on the camera app
• Put smart-home devices on a separate guest WiFi network so a compromised camera cannot see the rest of your devices
• Check for firmware updates monthly rather than waiting for a notification
• Buy from brands with a public bug bounty program and a track record of patching disclosed vulnerabilities quickly — see our full comparison of security camera brands for how the major players stack up
• Consider a camera with a physical privacy shutter or one that stores video locally instead of in the cloud, so even a future account breach exposes less

A router that supports WPA3 and a modern security standard, like a TP-Link WiFi 6 router, makes the whole home network — not just the camera — meaningfully harder to break into. Pairing that with a hardware key such as a YubiKey security key for your most important accounts (email, camera app, router admin) closes off the credential-stuffing path almost entirely.

Frequently Asked Questions

How do I know if someone is watching my camera right now?

Look for an active indicator light behaving unusually, unexpected pan/tilt movement, or an active session in the app’s device management screen that you do not recognize. If you see any of these, disconnect the camera immediately and work through the action plan above.

Can a hacked camera see other devices on my network?

Generally no — a camera itself typically cannot pivot to your computer or phone, but if an attacker used the camera’s WiFi credentials to get onto your network, they could potentially probe other devices. This is why changing your WiFi password and using a separate guest network for smart-home devices matters.

Will a factory reset remove a hacker from my camera?

Yes, a factory reset clears any unauthorized configuration changes and forces a fresh setup, but you must still change your account password and enable 2FA afterward — otherwise the same leaked credentials can let the attacker back in immediately.

Is it safe to keep using the same camera after a hack?

In most cases yes, once you have changed passwords, enabled 2FA, and updated firmware. Replace the camera only if it can no longer receive firmware updates or if you want to move to a local-storage model for extra peace of mind.

Does a security camera hack mean my whole security system is compromised?

Not necessarily. Cameras, door/window sensors, and the alarm panel are often on separate accounts or protocols, but you should still check every connected device’s login history and change any reused passwords across your whole system to be safe.

Bottom Line

A hacked security camera is alarming but almost always fixable in under an hour: disconnect it, lock down the account with a new password and 2FA, update firmware, and tighten your WiFi. The handful of real-world camera breaches that made headlines all trace back to reused passwords or unpatched firmware — both of which are fully within your control to prevent going forward.