A Ring doorbell vulnerability lets people snoop even after a password change

Ring is promising to do better, and urges folks not to share login details

ring video doorbell 2 box
Bill Roberson/Digital Trends

Video doorbells may be cutting down on the amount of time you have to spend running to and from your front door, but they could also be cutting down on the amount of privacy you have in your home. As per a new report from The Information, a major security flaw in popular video doorbells from Ring, the company recently acquired by Amazon for $1 billion, does not require users to re-log into the doorbell app when a password has been changed.

That means that if you’d previously granted access to your Ring doorbell app to say, a significant other, but then wanted to revoke that access after your relationship went sour, he or she would still actually be able to monitor the activity taking place outside your front door. Worse yet, it didn’t matter how much time passed — the app never asked users to sign in again after a password change.

While Ring was notified of the issue beginning in January and claimed to have removed users who were no longer authorized, The Information tested this vulnerability and found that for “several hours,” users were still able to access the app after a password change. Ring’s CEO Jamie Siminoff has even acknowledged the ongoing issue, as kicking users off the platform apparently slows down the Ring app. That said, this window of time presents a serious problem — not only could someone be watching your front door, but he or she could also download videos, or otherwise control the doorbell as an administrator.

This doesn’t bode particularly well for Amazon, which was planning to use Ring video doorbells as part of a secure solution for delivery programs like Amazon Key, which allows delivery personnel to drop off packages directly into someone’s home. But if Ring doorbells can’t even protect against an ex-boyfriend, it will be difficult for Amazon to convince customers that they’ll protect against other ill-intentioned actors.

Ring has since issued a statement with regard to the security exploit, noting that further security measures are on their way. In the meantime, you should do what you can to avoid giving unnecessary actors access to your doorbell.

“Ring values the trust our neighbors place in us and we are committed to the highest level of customer information and data security,” the company said. “We strongly recommend that customers never share their username or password. Instead, they should add family members and other users to their devices through Ring’s ‘Shared Users’ feature. This way, owners maintain control over who has access to their devices and can immediately remove users. Our team is taking additional steps to further improve the password change experience.”

Updated on May 13: Added statement from Ring. 

Smart Home

Cops go after porch pirates with dummy Amazon boxes and GPS trackers

Amazon is helping police in Jersey City to catch thieves who steal delivered packages from outside people's homes. Within just minutes of the operation's launch this week, cops nabbed their first porch pirate.
Deals

Best deals on smart locks so you’ll never have to worry about unlocked doors

Is your front door locked? We found the best deals on smart home door locks that take the worry out of wondering if your home is secure. You can lock or unlock your doors remotely and some models let you control locks with voice commands.
Smart Home

Porch pirate problems? Keep them away with these tips and tricks

The holiday season is fast approaching and the packages are arriving on our doorsteps. Are you worried about porch pirates stealing your gifts this holiday season? Here are some tips to help protect your purchases.
Deals

Best deals on home security cameras to save you from package thieves

Home security camera systems can help keep your home and your family safe. Amazon's deals on Blink security cameras and Ring Video Doorbells also help you save money on devices you can access regardless of your current location.
Smart Home

A couple’s recalled dishwasher caught on fire — and now they’re warning others

A Wisconsin couple has been using the dishwasher in their house for a year, unaware that it was recalled in 2009. Then the appliance caught fire. Now they are warning others to check appliances for risks when buying or renting a home.
Smart Home

Amazon has some killer deals on vacuums through the holidays

Whether you're buying for someone else or for yourself, Amazon has some great deals on vacuums running through the holidays. Score them while you can and keep your home cleaner than ever.
Smart Home

Amazon sent me a Christmas tree. Did it leave me pining for more?

Is driving to a Christmas tree lot or farm to get some fresh pine a daunting task that you dread every year? Good news: Amazon is now selling real Christmas trees with free shipping. We decided to order one to see how it went.
Smart Home

Got an Emerson thermostat? 135,000 of them are being recalled due to fire risk

Most recalls are relatively benign but if you own an Emerson-branded thermostat, we encourage you to check your model number because the company has alerted consumers to the potential of the device starting a fire.
Deals

You don't want to sleep on these red-hot bedding deals

We've rounded up some of the best discounts and sales happening right now, so you can buy yourself (or your loved ones) new bedding without breaking your budget. Trust us when we say these are deals worth losing sleep over.
Deals

Best deals for smart home plugs that control your lights and appliances

Smart hubs and speakers play central communication and management roles in your home, but smart plugs let you add lights and appliances to your system. Any smart plug you buy must support one feature or anything you plug in stays dumb.
Mobile

G’day, Google: U.S. users can now give Assistant a British or Australian accent

U.S. Google Assistant users can give their Assistant a different voice. Google has updated Assistant with the ability for users to give it either a British or Australian accent, which could make it a little more personal for some.
Smart Home

Knock, knock. Who's there? With a video doorbell, you'll never have to guess

When it comes to knowing who's at your door before you actually open it, there's nothing better than a video doorbell. Plus, you can "answer" the door even if you're not home. Here are some of our favorites.
Smart Home

The best air fryers deliver fried food with a fraction of the calories

What is this magical mechanism? It's an air fryer, and when used correctly, it can mimic the effects of frying while using just a little bit of oil. You still get that crispy, golden exterior and the fluffy center.
Smart Home

These wireless security cameras are a wire-free way to protect your home

Home security cameras can give you piece of mind, but if they have wires, are limited in where you can put them. We've rounded up the best battery-operated home security cameras to give you flexibility along with your security.