Worried About Unauthorized Access to Your Hikvision System?
The security of your surveillance system is paramount. The thought that an unauthorized person could be viewing your cameras is a serious violation of privacy and a significant security risk. Hikvision is a global leader in surveillance equipment, but like any network-connected device, their products must be properly secured to prevent unauthorized access.
If you've noticed strange behaviour from your cameras or NVR, or if you simply want to be proactive about securing your system, this guide is for you. We will walk you through the signs of a breach and the critical steps you must take to lock down your system.
Signs of Unauthorized Access to Your Hikvision System
Be alert for any of these red flags, which could indicate that someone else has gained access to your device:
- Changed Settings: You notice that camera names, image settings (brightness, contrast), or recording schedules have been altered without your knowledge.
- Unexpected Camera Movement: Pan-Tilt-Zoom (PTZ) cameras are moving or pointing in new directions on their own.
- Login Failure: Your password, which you know is correct, suddenly no longer works.
- Unfamiliar IPs in Logs: System logs show successful logins from IP addresses you do not recognise.
- Increased Network Traffic: You observe unusually high data upload traffic from your camera or NVR, suggesting a video stream is being sent to an unknown location.
If you see any of these signs, you must act immediately.
Immediate Steps to Secure Your System
Follow these steps in order to regain control and secure your Hikvision devices.
1. Disconnect the Device from the Internet
This is your first and most important action. Unplug the Ethernet cable from the back of the camera or NVR. This immediately cuts off the attacker's access and gives you a safe environment to work in.
2. Perform a Factory Reset
A factory reset will wipe all custom configurations, including any backdoors or user accounts the attacker may have created.
- Locate the physical reset button on the device.
- With the device powered on, press and hold this button for approximately 20-30 seconds.
- The device will reboot with its factory default settings.
3. Create a New, Strong Password
Once the device has been reset, you will be prompted to create a new administrator password upon your first connection. This is a critical step.
- Use a password that is at least 16 characters long.
- Combine uppercase letters, lowercase letters, numbers, and symbols.
- Do not use dictionary words or personal information (like names or dates).
- Use a unique password that you do not use for any other service.
4. Update to the Latest Firmware
Firmware updates contain patches for known security vulnerabilities.
- Go to the official Hikvision website and find the support/download portal.
- Search for your exact device model number to find the latest firmware file.
- From a computer on the same local network, log in to the device's web interface.
- Navigate to Configuration > Maintenance (or similar) and use the 'Upgrade' function to upload the new firmware file.
5. Reconnect and Implement Best Practices
Once the device is reset, password-protected, and updated, you can reconnect it to the internet. Now, implement these long-term security measures:
- Disable UPnP: Log in to your router and disable UPnP. This prevents the device from automatically opening ports to the internet.
- Change Default Ports: In the device's network settings, change the default HTTP (80) and RTSP (554) ports to random, unused numbers.
- Regularly Check Logs: Periodically review the system logs to check for any suspicious login attempts or activity.
By taking these decisive actions, you can effectively remove unauthorized access and harden your Hikvision system against future attacks.