Who else can see what your camera captures?

Imagine giving camera access to someone looking after your home. You return from your trip, but the permission stays active. This hypothetical situation raises a useful question: do you know who can watch today? Before buying another device, it is worth reviewing the one you already have.

What a connected camera does

It sends video over a network; some models also capture sound and allow viewing away from home. Files may be stored locally or on the provider’s servers, depending on the product. A baby monitor with these features also needs decisions about access and privacy. Check where your model stores videos and how you can delete them. NCSC FTC.

2026: a password cannot compensate for a software flaw

In an advisory updated on 27 August 2026, TP-Link described flaws in the Tapo C120 V1 and C200 V5 and listed corrected software versions. One could allow someone with local network access to obtain administrator permissions without the password. OPSWAT explained that this access could expose live video and recordings. This is a documented vulnerability, not evidence that all these cameras have been compromised. Check your model and hardware version, then install the corrected firmware specified by the manufacturer. TP-Link OPSWAT.

2024: when the service shows images from another home

Wyze acknowledged that, on 16 February 2024, around 13,000 users received thumbnails from other people’s cameras; in some cases, event videos could also be viewed. The company attributed the incident to an error linking data to the wrong accounts as service was restored and announced additional checks. The case shows that providers must protect access, too: changing a password cannot by itself correct a fault in their platform. Wyze.

An invitation may grant more than you expect

Google warns that sharing a home through Home or Nest may allow access to and control of several products. Some older cameras managed in Nest even support public links. Before inviting a relative, check what the permission includes. Use the official sharing option without handing over your password, and remove access when it is no longer needed. An invitation to help during a trip need not last forever. Google Nest.

Sessions and linked services matter, too

The list of invited people does not necessarily show every route of access. Review connected devices and integrations. Ring, for example, explains how to end sessions, remove users and unlink services. Its help pages clarify that signing out or changing a password does not automatically disconnect Alexa. Menu names vary: follow your model’s instructions. Disable public links when they are not needed. Ask support to review any direct internet exposure configured on the router. Do not open ports simply to solve a connection problem: the procedure depends on the equipment. Ring NCSC Google Nest.

The camera’s view is a privacy decision

Try this: look at the live feed before fixing the camera in place. For a baby monitor, limit the view to the area you need to supervise and avoid changing areas. Listen to the audio; it may pick up conversations you do not need to record. Review how long you keep recordings. Legal rules vary: the UK ICO’s guidance explains that filming beyond your property can bring data protection obligations. That page is under review; consult your country’s authority about your circumstances. ICO.

How to check patches without getting lost in menus

Note the manufacturer, exact model and firmware version: firmware is the software running inside the camera. Find that model on the official support website and compare the installed version with the latest available for your device. Follow the instructions, check that installation finished and enable automatic updates where offered. Check the phone app as well: updating it does not prove that the camera has been updated. This applies to home cameras, baby monitors and pet cameras. A patch fixes known flaws; it does not guarantee complete protection. FTC NCSC.

The manufacturer should provide support after the sale

As a buying check, identify the manufacturer, seller and official support channels. Read independent reviews of the model and look for security notices: how the company responds to a flaw and whether it releases fixes matters. Ask when updates will end. Country of origin is a provenance detail, not a security certificate; a familiar brand does not replace these checks. If you cannot verify who maintains the software or support has ended, avoid buying that model and seek guidance on taking an existing one offline. NCSC.

Connection and support: questions for the manufacturer

Can you turn off remote viewing if you do not need it? The NCSC warns that doing so may affect alerts and integrations. Until what date will security updates be available? The UK’s connected-product regime, in force since 29 April 2024, requires publication of the minimum support period. This is a UK reference, not a global law or a guarantee of complete protection. The NCSC camera guide was published in 2020; consulting it in 2026 does not make it an update from this year. NCSC GOV.UK.

If you suspect improper access

As a temporary measure, disconnect the camera and arrange another way to supervise what you were looking after. Keep relevant alerts. Through the official app or website, recover the account, change its password, end sessions and review access. Contact support to clarify what happened before reconnecting it. An isolated fault does not prove spying, and disconnecting the device does not erase copies that may already exist. Avoid an impulsive factory reset if you need to preserve evidence. NCSC Ring.

A check you can do today

Open the app, identify who can watch and inspect the view. If a permission no longer makes sense, remove it. If something private appears, adjust the camera. Keep a unique password, two-factor authentication where available and software updates in place. Your camera is on. Is your privacy protected? FTC.