And it’s not just Ring. Consumer Reports found plenty of video doorbells sending data in plain text—your IP, your Wi-Fi name, even—you know, small things like your digital identity.
Some devices reset with a single button press, letting a stranger hijack it and connect to their own network in under a minute. Get this: steal the serial number during that takeover, and boom, they can pull still images from the cloud without ever touching the device. No joke.
A stranger can reset some devices in seconds, steal the serial, and pull your private images from the cloud—no device access needed.
Some don’t even have FCC IDs, meaning they’re illegal to sell in the U.S., yet they’re on shelves and online. Talk about sketchy.
Most of these gadgets skip two-factor authentication, keep your data forever, and store footage without encryption. Default passwords? Often “password123” level weak. Cameras with local storage options can provide better security by keeping your footage off vulnerable cloud servers.
And thanks to KRACK attacks, even the Wi-Fi handshake isn’t safe. Remember that 2019 Ring flaw? Hackers streamed unencrypted video *and* injected fake images. Imagine seeing Santa on your porch in July—except it’s a hacker saying “Boo.”
The good news? Amazon pushed an update encrypting setup data. But older firmware, like pre-2.01.078, still leaks debug info. Unbranded models? Worse.
So, what can you do? Turn on two-factor, update everything, use strong passwords, reset compromised devices for 20 seconds, and for heaven’s sake, don’t post your dog’s bark-at-the-mailman video online.
Attackers can force reconnection by deauthenticating the device, and during setup, Wi-Fi credentials are transmitted unless the firmware uses encrypted communication. Your user privacy isn’t just *yours*—it’s the hacker’s treasure map. These insecure doorbells were purchased on Amazon—one even had the Amazon Choice badge, despite leaking sensitive data and posing serious risks.
References
- https://www.bitdefender.com/en-us/blog/hotforsecurity/bitdefender-finds-ring-doorbell-vulnerability-exposes-users-wi-fi-password
- https://innovation.consumerreports.org/new-cr-investigation-finds-troubling-security-vulnerabilities-with-video-doorbells/
- https://amtrustfinancial.com/blog/warranties/smart-doorbell-security-issues
- https://surfshark.com/blog/can-ring-cameras-be-hacked
- https://github.com/advisories/GHSA-c7f7-759c-x26f
- https://www.cvedetails.com/cve/CVE-2025-60856/
- https://www.eff.org/deeplinks/2025/12/breachies-2025-worst-weirdest-most-impactful-data-breaches-year
