# Security concern

**URL:** <https://forums.wyze.com/t/security-concern/5957>\
**Category:** Cameras\
**Tags:** cam-v1-v2\
**Created:** [August 12, 2018, 9:10pm UTC](https://forums.wyze.com/t/security-concern/5957 "2018-08-12T21:10:53Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![amangb](https://avatars.discourse-cdn.com/v4/letter/a/c67d28/32.png) [@amangb](https://forums.wyze.com/u/amangb)\
**Post date:** [August 12, 2018, 9:10pm UTC](https://forums.wyze.com/t/security-concern/5957/1 "2018-08-12T21:10:53Z")

</div>

Got my Wyze Cam v2 last week and set it up with my phone. My nanny also connected to my wifi created her own account and was able to connect to the camera. Now she can be at home and can connect to the camera over the Internet. Isn’t this a security loophole? Shouldn’t a camera be tied to one account and at least ask for username and password before it lets anyone connect to it? Am I missing something? I can see how this could be easily exploited. Thinking of returning this thing.

---

<div class="post-metadata">

**Author:** ![catcat1386](https://sea2.discourse-cdn.com/wyze/user_avatar/forums.wyze.com/catcat1386/32/4302_2.png) [@catcat1386](https://forums.wyze.com/u/catcat1386)\
**Post date:** [August 12, 2018, 10:38pm UTC](https://forums.wyze.com/t/security-concern/5957/2 "2018-08-12T22:38:15Z")

</div>

You meant your nanny added your camera to her account by scanning the QR code etc ?

---

<div class="post-metadata">

**Author:** ![Loki](https://sea2.discourse-cdn.com/wyze/user_avatar/forums.wyze.com/loki/32/1595_2.png) [@Loki](https://forums.wyze.com/u/Loki)\
**Post date:** [August 13, 2018, 5:20am UTC](https://forums.wyze.com/t/security-concern/5957/3 "2018-08-13T05:20:47Z")

</div>

@amangb… Please clarify what happened, because nobody should be able to access your camera unless they have your Wyze account username and password, or if you shared the camera to their separate Wyze account. Simply connecting to your local wifi alone should by no means allow access to the camera.

You imply that your nanny created her own Wyze account. If so, then either she used your phone/account to create a share of the camera to her account. To check this, open the Wyze app and tap the Share button above the camera thumbnail in the device list. If the camera is shared, you will see it listed under “Shared Users”. You can cancel the share from there.

Another possibility (as mentioned above) is that she reset the camera to her account by physically pressing the setup button, scanning the QR code, etc. If this is the case, then you will not be able to connect to the camera from your account,.

The final possibility is that she has **your** Wyze account login credentials and is using those to access the camera. If that’s the case, then change your Wyze password and she will no longer have access.

Please report back what you discover.

---

<div class="post-metadata">

**Author:** ![amangb](https://avatars.discourse-cdn.com/v4/letter/a/c67d28/32.png) [@amangb](https://forums.wyze.com/u/amangb)\
**Post date:** [August 14, 2018, 4:46am UTC](https://forums.wyze.com/t/security-concern/5957/4 "2018-08-14T04:46:21Z")

</div>

You are right. After talking to her again she actually followed what the app told her to press the button and scan the qr code.

---

<div class="post-metadata">

**Author:** ![Loki](https://sea2.discourse-cdn.com/wyze/user_avatar/forums.wyze.com/loki/32/1595_2.png) [@Loki](https://forums.wyze.com/u/Loki)\
**Post date:** [August 14, 2018, 4:51am UTC](https://forums.wyze.com/t/security-concern/5957/5 "2018-08-14T04:51:28Z")

</div>

Thanks for getting back on that. So, she “stole” your camera feed. To get it back, you just need to press the setup button and scan the QR code again with your app logged into your account.

For future use, you can share the camera to her account and then revoke it when she should not have access. Unfortunately, there’s no way to schedule share access at this time. However, that idea is being tracked and I’ve added your vote for it to Wyze’s feature request tracker.

---

<div class="post-metadata">

**Author:** ![wallace](https://avatars.discourse-cdn.com/v4/letter/w/b4bc9f/32.png) [@wallace](https://forums.wyze.com/u/wallace)\
**Post date:** [August 15, 2018, 5:25am UTC](https://forums.wyze.com/t/security-concern/5957/6 "2018-08-15T05:25:52Z")

</div>

Interesting. Is there a way for the app to detect a missing or “stolen” camera and send notification to owner? Or a way to lock a camera to an account which can only be unlocked by rightful owner?

---

<div class="post-metadata">

**Author:** ![Loki](https://sea2.discourse-cdn.com/wyze/user_avatar/forums.wyze.com/loki/32/1595_2.png) [@Loki](https://forums.wyze.com/u/Loki)\
**Post date:** [August 15, 2018, 5:31am UTC](https://forums.wyze.com/t/security-concern/5957/7 "2018-08-15T05:31:10Z")

</div>

No there isn’t. If there is physical access to the camera, it can be reset to a different account. I know that Wyze is working on making previously recorded cloud clips still available to the camera’s former account in the event that the camera is re-initialized to a different account.

---

<div class="post-metadata">

**Author:** ![wallace](https://avatars.discourse-cdn.com/v4/letter/w/b4bc9f/32.png) [@wallace](https://forums.wyze.com/u/wallace)\
**Post date:** [August 15, 2018, 5:33am UTC](https://forums.wyze.com/t/security-concern/5957/8 "2018-08-15T05:33:36Z")

</div>

I know Wyze are forward thinking and always looking to improve, maybe such a locking mechanism will be reality one day.

---

<div class="post-metadata">

**Author:** ![catcat1386](https://sea2.discourse-cdn.com/wyze/user_avatar/forums.wyze.com/catcat1386/32/4302_2.png) [@catcat1386](https://forums.wyze.com/u/catcat1386)\
**Post date:** [August 15, 2018, 2:20pm UTC](https://forums.wyze.com/t/security-concern/5957/9 "2018-08-15T14:20:18Z")

</div>

How about having the camera to send push/email notification to current account owner before being reset ?

---

<div class="post-metadata">

**Author:** ![tim-weidenhaft](https://avatars.discourse-cdn.com/v4/letter/t/e8c25b/32.png) [@tim-weidenhaft](https://forums.wyze.com/u/tim-weidenhaft)\
**Post date:** [January 19, 2019, 7:46pm UTC](https://forums.wyze.com/t/security-concern/5957/10 "2019-01-19T19:46:11Z")

</div>

It would also be nice to be able to identify a stolen camera (assuming it is reset and re-registered). This would be helpful to give to the police and a deterrent for people thinking about stealing them.

---

<div class="post-metadata">

**Author:** ![mixonepa](https://sea2.discourse-cdn.com/wyze/user_avatar/forums.wyze.com/mixonepa/32/7623_2.png) [@mixonepa](https://forums.wyze.com/u/mixonepa)\
**Post date:** [January 19, 2019, 7:57pm UTC](https://forums.wyze.com/t/security-concern/5957/11 "2019-01-19T19:57:17Z")

</div>

It’s not very common that people steal camera but I do agree it would be nice to have.

---

<div class="post-metadata">

**Author:** ![Tuna](https://sea2.discourse-cdn.com/wyze/user_avatar/forums.wyze.com/tuna/32/3617_2.png) [@Tuna](https://forums.wyze.com/u/Tuna)\
**Post date:** [January 21, 2019, 5:39pm UTC](https://forums.wyze.com/t/security-concern/5957/12 "2019-01-21T17:39:28Z")

</div>

Please see this thread for more information

> [@Stolen camera](https://forums.wyze.com/t/stolen-camera/12681):
>
> If somebody steals my Wyze camera, can they reset it to a new account and use it? Can I lock the camera to make it useless if it is stolen?

hope this helps,

Thanx,

73’

Tuna
