Technology that comes with weak passwords such as “admin” or “12345” will be banned in the UK under new laws that dictate all smart devices must meet minimum security standards.
Measures to protect consumers against hacking and cyber attacks will come into force on Monday, the Department of Science, Innovation and Technology said.
This means that manufacturers of smart phones, TVs and doorbells, among others, are now legally required to protect internet-connected devices from access by cybercriminals, and users are required to change common passwords.
Brands should publish contact details so bugs and issues can be reported, and should be transparent about the timing of security updates.
The new measures are expected to help give customers confidence in purchasing and using products at a time when consumers and businesses have been attacked by hackers at a rapid pace.
The consumer champion Which one? He said he had been instrumental in pushing through the new measures and welcomed the changes.
Rocío Concha, director of policy and advocacy at Which?, said: “The OPSS [Office for Product Safety and Standards] We must provide the industry with clear guidance and be prepared to take strict action against manufacturers if they break the law, but we also expect smart device brands to do the right thing by their customers from day one and ensure that buyers can easily find information about how long your devices last. “They will be supported and make informed purchases.”
Minister for Science and Technology Jonathan Berry said: “As everyday life becomes increasingly reliant on connected devices, the threats generated by the Internet are multiplying and becoming even greater.
“Starting today, consumers will have greater peace of mind knowing their smart devices are protected from cybercriminals, as we introduce world-first laws that will ensure their personal privacy, data and finances are safe. “We are committed to making the UK the safest place in the world to be online and these new regulations mark a significant leap towards a safer digital world.”
The laws are coming into force as part of the Product Security and Telecommunications Infrastructure (PSTI) regime, which aims to strengthen the UK’s resilience against cybercrime.