Official statements or reports from UK regulatory bodies

UK Enacts First Law Banning Weak Default Passwords on Smart Devices

Apr 29, 2024, 11:37 AM

The UK has introduced a groundbreaking law that bans the use of weak default passwords such as '12345' and 'admin' on smart devices. This legislation, which is the first of its kind globally, aims to bolster cyber security by setting minimum security standards for Internet of Things (IoT) devices. The new regulations apply to a range of consumer products including voice assistants and smart speakers, providing enhanced protection against cyber threats. The law was enacted to prevent scenarios like the 2016 Mirai botnet attack, which exploited weak passwords to create massive disruptions.