Eaton’s Wiring Devices

Home Network Security Best Practices

Security is top priority at Eaton. This document contains a brief

description of how Eaton Home protects your security and some

suggestions for keeping your home network secure.

Eaton Home

Eaton values the customer’s security and has worked hard to make sure that the Eaton Home app is protected.

SmartHome system PIN (personal identification number)

Eaton Home secures app access through a PIN, assigned by default and the customized by the user.

The default SmartHome PIN should be changed immediately after your first connection to the SmartHome with the app. To change the

PIN, open the app and browse to Reset PIN (Settings > Configuration > Reset PIN), and then select a PIN that contains a combination

of letters (upper and lowercase), numbers, and symbols. Avoid selecting an easily guessed PIN-1234.

Consider changing your PIN every 30 to 90 days or after guests/installers access your smart home system. This prevents continued

access from undesired users.

Note: For added security, first time connections to the Eaton Home project with a user device (smartphone) must be made while on

premises and connected to the LAN.

Secure tokens for remote connections

Eaton Home uses secure tokens for device connections. Thermostats, security devices, etc., all use tokens. These tokens are short lived

and change regularly to ensure that connections are safe.

Reverse proxy

The Eaton Home app opens a secure encrypted tunnel to a cloud based system using authorized user provided credentials, to

authenticate device communication in the home. The encrypted tunnel is created between the user’s device and the Eaton Home app, no

further communication is made to other internet services.

Homeowner notified when their system is accessed using Pro Install app

The homeowner is notified when a installer accesses their project using the Eaton’s Pro Install app. This appears as pop-up notification

on all connected Android smartphones or iOS devices. This alerts the homeowner that their system is being accessed. So, no more blind

updates or changes. The homeowner can contact the installer to learn about the changes.

Controlled incoming connections

The Eaton’s Home automation hub only uses encrypted SSL (Secure Socket Layer) based protocols to communicate with client devices

and the app. The hub initiates all connections and does not allow traffic over ports without valid credentials. This makes unauthorized

devices unable to connect to your Eaton Home system.

Home network security

Not only do we care about Eaton Home security, but also general home network security. See the security suggestions below.

Change your default router administrator password and username

Most WiFi wireless routers and access points have a manufacturer set default admin username and password. This information is often

simple and documented. If unchanged, this leaves you vulnerable to cybercriminals. These settings should be changed immediately. A

secure router password should be at least 20 characters long and include a combination of numbers, letters (upper and lowercase), and

symbols.

Some routers allow remote access from the internet. Disabling this feature helps prevent hackers from connecting to your router on a

device not on your wireless network.

Choose a strong WiFi password

Default router passwords are easy to guess when manufacturer information is known or available. A secure wireless password should be

at least 20 characters long and include a combination of numbers, letters (upper and lowercase), and symbols. A complex password also

discourages hackers from accessing your network to “borrow” your data.

Use network encryption

Do not use outdated encryption technology. WEP and WPA encryption are older and susceptible to hacking. WPA2 AES is the current

secure standard, compatible with most modern routers and WiFi devices.

Eaton’s Wiring Devices

Home Network Security Best Practices

Hide your network SSID

If you do not need to broadcast your SSID, hide it. Most routers allow an admin user to disable the network broadcast feature.

Change your network’s default SSID

Routers come with a default manufacturer WiFi name (SSID), often containing the manufacturer name. Broadcasting this manufacturer

name makes it easier for hackers to exploit the known vulnerabilities of the router. The SSID name should be changed immediately and

not include personal information (names, address, etc.). Do not make it easy for a hacker to guess which WiFi network is yours.

Use guest networks on your router

When possible setup a guest network with an SSID, password, and IP scheme different from the home’s current SSID. This allows guests

to connect to your home’s internet, but can be disabled or changed as desired.

For example – when changing the IP scheme from 192.18.1.0/24, set the guest account to 10.0.0.1/24. Make the scheme different. This

prevents access to on premises equipment isolating the network from guest access.

Note: If a guest network will not be used, disable the guest network option so that it cannot be exploited.

Strategically position your router

Set up your router as close to the center of your home as possible. This maximizes your signal coverage while minimizing the signal

strength outside of your house. A hacker can infiltrate your wireless network if it can be accessed from a neighboring house or outside

on the street.

Disable remote access

Some routers allow remote access from the internet. Disabling this feature helps prevent hackers from connecting to your router on a

device not on your wireless network.

Keep your router’s firmware/software up-to-date

Router firmware/software may contain exploitable flaws. Ensure your router is running the latest firmware/software to minimize

vulnerability to router exploits. Your router may support auto-updates, check for and enable the auto-update setting.

Use a firewall

Your router may include a network firewall. For added security, ensure that your network firewall is enabled.

Contact Information

Eaton

Electrical Sector

203 Cooper Circle, Peachtree City, GA 30269

www.eaton.com/wiringdevices

Call Technical Support (Eaton Care) at 866.853.4293 or email techsupport@eaton.com

Eaton

1000 Eaton Boulevard

Cleveland, OH 44122

United States

Eaton.com

Eaton’s Wiring Devices Division

203 Cooper Circle

Peachtree City, GA 30269

Eaton.com/wiringdevices

Printed in USA

Publication No. TD610080EN

November 2017

Eaton is a registered trademark.

All other trademarks are property

of their respective owners.