Skip to main content

A Ring doorbell vulnerability lets people snoop even after a password change

Ring is promising to do better, and urges folks not to share login details

Bill Roberson/Digital Trends

Video doorbells may be cutting down on the amount of time you have to spend running to and from your front door, but they could also be cutting down on the amount of privacy you have in your home. As per a new report from The Information, a major security flaw in popular video doorbells from Ring, the company recently acquired by Amazon for $1 billion, does not require users to re-log into the doorbell app when a password has been changed.

That means that if you’d previously granted access to your Ring doorbell app to say, a significant other, but then wanted to revoke that access after your relationship went sour, he or she would still actually be able to monitor the activity taking place outside your front door. Worse yet, it didn’t matter how much time passed — the app never asked users to sign in again after a password change.

Recommended Videos

While Ring was notified of the issue beginning in January and claimed to have removed users who were no longer authorized, The Information tested this vulnerability and found that for “several hours,” users were still able to access the app after a password change. Ring’s CEO Jamie Siminoff has even acknowledged the ongoing issue, as kicking users off the platform apparently slows down the Ring app. That said, this window of time presents a serious problem — not only could someone be watching your front door, but he or she could also download videos, or otherwise control the doorbell as an administrator.

Please enable Javascript to view this content

This doesn’t bode particularly well for Amazon, which was planning to use Ring video doorbells as part of a secure solution for delivery programs like Amazon Key, which allows delivery personnel to drop off packages directly into someone’s home. But if Ring doorbells can’t even protect against an ex-boyfriend, it will be difficult for Amazon to convince customers that they’ll protect against other ill-intentioned actors.

Ring has since issued a statement with regard to the security exploit, noting that further security measures are on their way. In the meantime, you should do what you can to avoid giving unnecessary actors access to your doorbell.

“Ring values the trust our neighbors place in us and we are committed to the highest level of customer information and data security,” the company said. “We strongly recommend that customers never share their username or password. Instead, they should add family members and other users to their devices through Ring’s ‘Shared Users’ feature. This way, owners maintain control over who has access to their devices and can immediately remove users. Our team is taking additional steps to further improve the password change experience.”

Updated on May 13: Added statement from Ring. 

Lulu Chang
Former Digital Trends Contributor
Fascinated by the effects of technology on human interaction, Lulu believes that if her parents can use your new app…
Ring Video Doorbell buying guide: Which is best for you?
Ring Video Doorbell Wired

Ring makes some of the best video doorbells, and it's not uncommon to see many of the company's products during a quick stroll through your neighborhood. The company has come a long way over the past few years, and its catalog is now bursting with video doorbells for you to choose from. Along with traditional wired models, there's also a robust selection of battery-powered models -- some of which are rated to last well beyond six months before needing a recharge.

But which Ring Video Doorbell is best for you? From powerful, security-first devices to those with easy installation processes, here's a look at the best Ring Video Doorbells.

Read more
How to install a Ring Video Doorbell at your home or office
A Ring Video Doorbell 4 mounted near a home's front door.

One of the main reasons Ring Video Doorbells are so popular is their simple installation process. Installing the wired models requires a bit of DIY know-how, but getting its battery-powered models up and running doesn't require much more than a screwdriver and your smartphone. In fact, there's a good chance you can have your Ring Video Doorbell out of its box and onto your porch in less than 30 minutes.

The installation steps vary from product to product, though most walk you through the process via the accompanying mobile app. But if you're curious about the process, here's a look at how to install a Ring Video Doorbell. This guide largely relates to the Ring Video Doorbell 2, though you'll find that most products in the Ring catalog follow a similar procedure.
Prep
There are three things you need to get out of the way before installing your new doorbell.

Read more
Do you need a subscription for a Ring doorbell or camera?
The Ring Video Doorbell 3 installed near a door.

Anyone shopping for a DIY home security system has probably stumbled upon Ring. The company has an ever-growing lineup of cameras and video doorbells that are consistently ranked among the best available -- and since they're easy to set up and offer tons of functionality, it's no surprise they're so popular.

One thing to keep in mind when looking at Ring products is that you'll be on the hook for more than just the sticker price. Ring offers a monthly subscription service known as Ring Protect. Many of the best features for its cameras and video doorbells are locked behind this subscription plan, meaning owners who don't sign up will be missing out on important functionality.

Read more