There's a public database with the default password to almost every device in your home. Most people have no idea.

It's called Shodan — and there are others like it.

Automated scanners crawl the internet 24/7 looking for open ports and devices with factory-default credentials still set. Your router, your security cameras, your baby monitor, your printer, your Wi-Fi extender — they all shipped with a default username and password. Those defaults are published online in searchable databases that anyone can access. No dark web required.

Here's the part most people miss: they change their Wi-Fi password and think they're done. The Wi-Fi password is not the same as the router admin password. Those are two different things. The admin panel — where you actually configure the device — still has the factory default sitting on it.

Same problem exists on every other connected device in your home. The Ring camera. The Nest thermostat. The cheap smart plug from Amazon. Every one of them.

The fix isn't complicated:

1. Find the admin page for each device (usually an IP address in your browser, or the manufacturer's app)
2. Change the admin username and password to something unique — not your Wi-Fi password, not "admin/admin"
3. Set up a guest network and put your IoT devices on it — this walls them off from your computers and phones even if they get compromised
4. Write the new credentials somewhere safe (a password manager, or even paper in a drawer — anything beats the factory default)

You don't need to be a security pro to do this. It's tedious, not technical. Most people just never do it because nobody told them to.