That forgotten security camera or smart plug may still be working—even when you never open its app. If an unused Internet of Things (IoT) device stays powered and connected, it can remain reachable through your network or its cloud service. Inventory your devices, identify what you no longer need and disconnect those extras safely.
This is more than digital housekeeping. A joint FBI, CNMF and NSA advisory documented a botnet containing over 260,000 compromised devices as of June 2024, including routers and IoT equipment. That does not mean your gadgets are infected, but it shows how criminals can recruit ordinary connected hardware.
Why can an unused smart device still pose a risk?
“Unused” describes your habits, not the device’s network activity. A camera might keep contacting its cloud service. A forgotten hub might keep running outdated software. Weak passwords, unpatched vulnerabilities and unnecessary remote access can leave opportunities for attackers.
A compromised device may expose information it handles or help criminals launch attacks against others. Depending on network protections, it could also provide a foothold toward other equipment. Disconnection removes that device’s active network connection; it does not repair an existing compromise elsewhere.
How do you find dormant devices on your network?
Start with your router’s official app or administration page. Look for “Connected devices,” “Clients” or a similar list. The FTC recommends checking connected devices, updating their firmware and disconnecting older equipment you no longer use.
Walk through your home and match the list to actual hardware. Include cameras, speakers, TVs, plugs, sensors and hubs—not just phones and laptops. Keep a simple inventory with:
- Identity: Device name, model and location.
- Purpose: What it does and who still needs it.
- Connection: Wi-Fi, Ethernet or a connection through a hub.
- Support: Firmware version and manufacturer’s update-support status.
- Decision: Keep, disconnect temporarily or retire.
Investigate unfamiliar entries before blocking them. Device names can be vague, and a hub may serve several accessories. Never disconnect medical equipment, alarms or other safety-critical systems without checking the manufacturer’s guidance and arranging a safe alternative.
How do you disable an unused IoT device safely?
Use this sequence for a nonessential device you have confirmed you no longer need:
- Check dependencies. Review schedules and automations first so removing a plug or sensor does not unexpectedly stop another household function.
- Save what matters. Export recordings or settings you need before removing access or resetting anything.
- Disconnect the device. Follow its instructions to disable networking, unplug its Ethernet cable or power it down fully. Check battery-powered equipment, too.
- Remove lingering access. Review linked cloud accounts, integrations and remote-management settings. For permanent retirement, follow the manufacturer’s account-removal and factory-reset instructions.
- Verify and record. Confirm the router no longer shows an active connection. Some routers retain offline entries. Mark the device’s status in your inventory.
Is deleting the app or using standby mode enough?
Do not assume so. Removing an app does not necessarily disconnect its hardware, and standby may leave networking active. Likewise, blocking Wi-Fi alone may miss an Ethernet or alternative connection. Verify the device’s actual connection status rather than relying on a dark screen.
What should you check before reconnecting a stored device?
Check the manufacturer’s support page first. Install available firmware updates using its approved process, replace default passwords and enable multifactor authentication on the associated account when available. Retire equipment that no longer receives necessary security updates rather than reconnecting it out of habit.
For devices you keep, consider a separate IoT or guest network with isolation from your primary devices. Check what your router actually isolates and whether essential features still work. The FTC’s home Wi-Fi guidance recommends a guest network, router updates and disabling unnecessary remote management.
Close one forgotten connection today
Review your inventory monthly and after adding or replacing equipment. Fewer connected devices mean fewer updates to track and fewer potential entry points to overlook. Start with one forgotten gadget: confirm its purpose, disconnect it safely and record the change. Keep convenience where you need it—not connections you have forgotten.
