Latest in Tomorrow

Image credit: Shutterstock / kpatyhka

California bans default passwords on any internet-connected device

No more 'admin,' 'passw0rd,' and '12345.'
1559 Shares
Share
Tweet
Share
Save

Sponsored Links

Shutterstock / kpatyhka

In less than two years, anything that can connect to the internet will come with a unique password — that is, if it's produced or sold in California. The "Information Privacy: Connected Devices" bill that comes into effect on January 1, 2020, effectively bans pre-installed and hard-coded default passwords. It only took the authorities about two weeks to approve the proposal made by the state senate.

The new regulation mandates device manufacturers to either create a unique password for each device at the time of production or require the user to create one when they interact with the device for the first time. According to the bill, it applies to any connected device, which is defined as a "physical object that is capable of connecting to the Internet, directly or indirectly, and that is assigned an Internet Protocol address or Bluetooth address."

The law is clearly aimed at stopping the spread of botnets made up of compromised network devices, such as routers, smart switches or even security cameras and other IoT equipment. Malicious software could often take control of them by trying easy-to-guess or publicly disclosed default login credentials. It's not entirely clear yet as to how the new regulation will affect legacy industry hardware from the 1980s and 1990s where passwords are either hard-coded or next to impossible to change.

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
1559 Shares
Share
Tweet
Share
Save

Popular on Engadget

The 2019 Engadget Holiday Gift Guide

The 2019 Engadget Holiday Gift Guide

View
Apple may reveal its 16-inch MacBook Pro tomorrow

Apple may reveal its 16-inch MacBook Pro tomorrow

View
Federal judge rules suspicionless device searches at the border are illegal

Federal judge rules suspicionless device searches at the border are illegal

View
Elon Musk: Berlin 'gigafactory' will build Teslas starting with the Model Y

Elon Musk: Berlin 'gigafactory' will build Teslas starting with the Model Y

View
This 'O-29' hum is the sound of Ford's new hybrid SUVs

This 'O-29' hum is the sound of Ford's new hybrid SUVs

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr