PanicStation.org
UK USA
us Technology & digital loss

What to do if…
a smart device shows settings or account changes you did not make

Produced and maintained by PanicStation.org Published: Last reviewed: Editorial policy USA guide

Short answer

Treat the changes as possible unauthorized access. From a phone or computer you trust, secure the account and check any settings that could affect physical safety, privacy, purchases, or access to your home.

Do not do these things

  • Do not use a login link or phone number from an unexpected alert; open the official app or website yourself.
  • Do not give anyone your password, verification code, recovery code, or device PIN.
  • Do not reuse your new password on another account.
  • Do not delete the account or factory-reset the device before noting what changed, unless resetting it is necessary to address an immediate safety risk.
  • Do not rely only on an affected smart lock, alarm, camera, or other safety device until you have confirmed that it works and that you control it.
  • Do not confront someone you suspect if that could put you at risk.

What to do now

  1. Check for an immediate physical risk. If a smart lock, alarm, camera, thermostat, appliance, or medical device is behaving unsafely, use a manual or offline alternative where available. Move to a safer place and call 911 if anyone is in immediate danger.
  2. Use a phone or computer you trust to open the provider’s official app or type its website address yourself. If your email account controls recovery for the smart-device account and also shows unfamiliar activity, secure the email account first.
  3. Change the smart-device account password to a new, unique password. Use any available option to sign out other sessions or devices.
  4. Check the recovery email address, recovery phone number, authorized users, and household members. Remove or correct anything you do not recognize, then turn on multifactor authentication if the provider offers it.
  5. Before reversing the changes, take screenshots or photographs of unfamiliar settings, users, devices, alerts, purchases, and recent sign-in information. Note when you first noticed the problem.
  6. Review linked devices, shared access, voice-assistant connections, third-party services, routines, and automations. Revoke anything you do not recognize or no longer use.
  7. Restore settings that matter immediately. Check lock codes, alarm access, camera and microphone controls, notification recipients, location sharing, remote access, purchasing permissions, and device PINs.
  8. For a smart lock or alarm, confirm that your access works while keeping a physical key, backup code, or other safe alternative available so you do not lock yourself out.
  9. Install available updates for the device, its official app, and the phone or computer running the app.
  10. If router settings also changed or unfamiliar devices appear on your home network, open the router provider’s official instructions. Change the router administrator password and Wi-Fi password, update its software if an update is available, and reconnect only devices you recognize.
  11. Contact the manufacturer through its official app or website if you cannot regain control, the changes return, or someone else controls the device registration. Ask how to review account access and whether a factory reset is appropriate.
  12. Check the account’s purchase history, subscriptions, saved payment methods, and recent charges. Report an unauthorized charge directly to the card issuer or payment provider using its official app, website, statement, or the number on the card. Use IdentityTheft.gov if someone has misused your personal information.

What can wait

You do not need to identify who made the changes, replace every device, choose a different smart-home system, post about the incident, or make long-term household decisions now. Deciding whether to factory-reset the device can wait until you have secured the account, recorded the unfamiliar changes, and checked the manufacturer’s instructions.

Important reassurance

Unexpected changes do not by themselves prove that someone deliberately accessed the device. An update, synchronization problem, automation, shared user, or household member may be responsible, but taking prompt account-security steps is still reasonable.

Scope note

This guide covers immediate first steps only. Device replacement, detailed technical investigation, account ownership disputes, financial recovery, or technology-related abuse concerns may require help from the manufacturer or an appropriate specialist.

Important note

This is general digital-safety information, not cybersecurity, legal, financial, emergency, medical, or other professional advice. Available controls and recovery procedures vary by manufacturer and service.

Additional Resources

Closely connected guides that may be useful during the same situation or its immediate aftermath.

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us