Amazon Ring doorbells exposed home Wi-Fi passwords to hackers

Security researchers have discovered a vulnerability in Ring doorbells that exposed the password for the Wi-Fi network it was connected to.

Bitdefender said the Amazon-owned doorbell was sending its owner’s Wi-Fi password in cleartext over the internet, allowing for nearby hackers to intercept the Wi-Fi password and gain access to the network to launch larger attacks or conduct surveillance.

Amazon fixed the vulnerability in all Ring devices in September, but the vulnerability was only disclosed today.

It’s another example of smart home technology suffering from security issues. As much as smart home devices are designed to make our lives easier and homes more secure, researchers keep finding vulnerabilities that allow them to get access to the very thing they’re trying to protect.

Earlier this year, flaws in a popular smart home hub allowed researchers to break into a person’s home by triggering a smart lock to unbolt the door.

Amazon has faced intense scrutiny in recent months for Ring’s work with law enforcement. Several news outlets, including Gizmodo, have detailed the close relationship Ring has with police departments, including their Ring-related messaging.

It was reported this week that Ring had bragged on Instagram about tracking millions of trick-or-treaters this Halloween.