Securing IoT devices from hacking?
reddit / selfhosted

----------------------------------------------------------------------
Own_Career_7388 · 2023-11-17 05:31

I've been told that I should put my IoT devices on a separate VLAN
from everything else, but what other steps can I take to make sure
that my devices don't get hacked?

Note: I will be using a dedicated wifi router for my IoT and hooking
that up (on it's own VLAN) to a OPNsense firewall server. I'm using a
dedicated router for this because 1. I have an extra one and 2. my IoT
requires both wifi and ethernet connections. Right now Google is
controlling my IoT but I hope to set up my own app for it at some
point.

----------------------------------------------------------------------
ElevenNotes · 2023-11-17 05:43

#1: Put devices on their own VLAN if you want to isolate them from the
rest of the network, like: IoT, kids, school or work devices, you get
the idea.

#2: Only allow WAN (internet) access for a device if it’s necessary
for its function. If the device needs WAN, only allow the kind of WAN
it needs, like access to TCP:80 & 443, do not give unrestricted WAN
access to all devices

#3: Try to migrate off, of cloud based IoT devices. Home Assistant and
Tasmota are your friend.


**Disclaimer**: *I’ve got over 200 IoT devices in my home, and they
are all Tasmota and connected to my Home Assistant, no cloud needed,
there are only a few exceptions like the Roombas who need WAN access
but only on specific ports.*

----------------------------------------------------------------------
thekrautboy · 2023-11-17 07:03

Another vote for Tasmota, and HA is neat too.

----------------------------------------------------------------------
Own_Career_7388 · 2023-11-17 10:00

What is Tasmota? I have not even looked into Home Assistant yet but my
current devices are just a couple of Nest cameras and a couple of
Lutron light switches.

----------------------------------------------------------------------
ElevenNotes · 2023-11-17 10:12

[Tasmota](https://tasmota.github.io/docs/) is a custom firmware you
can upload to a lot of devices to make them more useful and to
disconnect them from any cloud vendor. Like Sonoff or Shelly products,
which you can then use to automate your home with Home Assistant. For
instance, with Shelly 1 (+Tasmota) you can automate any existing light
switch you have in your home, no need to buy an entire new light
switch that might not even look nice. Or you can buy a Sonoff POW R2
to measure energy usage of a device up to 15A, or use a simple Sonoff
Basic to switch any device on or off, and much, much more.

----------------------------------------------------------------------
[deleted] · 2023-11-17 10:22

[removed]