Is it allowed in the UK for smart devices like TVs or doorbells to be sold with default passwords like “admin” or “12345” any longer?

Last updated on October 4, 2025

NO — Under new UK regulations (which came into force 29 April 2024), manufacturers of internet-connected smart devices must stop using easily guessable default passwords. The law also requires transparency about how long the device will receive security updates, and bug/vulnerability reporting contact details. Consumers will see safer out-of-the-box security.

https://www.gov.uk/government/news/new-laws-to-protect-consumers-from-cyber-criminals-come-into-force-in-the-uk

4/29/2024