You want to check the shop from home, or the house from work. The question is how to do that without handing the same view to someone else. A security camera that is easy for a stranger to reach defeats its own purpose.
The principle
Remote access should be set up securely through the manufacturer's app and sensible network configuration. For Dahua systems that app is DMSS. What you should avoid is any setup that opens your recorder directly to the public internet.
Why port forwarding is the thing to avoid
Port forwarding is a router setting that makes a device inside your network reachable from outside. It used to be a common way to view cameras remotely. The trouble is that it exposes the recorder to the whole internet, where automated tools constantly scan for exposed devices and try common passwords.
If you are ever told that remote viewing requires port forwarding, ask for another method. Do not do it yourself from a forum post, and do not let an installer leave it in place. A properly configured system uses the app's own connection method instead.
A checklist for a safer system
1. Use strong, unique passwords
- Change every default password during setup. Default credentials are public knowledge.
- Make each password long, and different from any other account you hold.
- Use a password manager if you have one. It makes long passwords practical.
- Do not reuse the recorder password on your email, banking or Wi-Fi.
2. Keep the system updated
Manufacturers release firmware updates that fix security weaknesses. A recorder that has not been updated for years may carry known problems. Ask your installer how updates are handled and who is responsible for them. The phone app should also be kept current.
3. Turn on two-factor protection where it is offered
Some accounts and apps support a second step at login, such as a code sent to your phone. Where an option like that is available for your account, enable it. Whether a feature is available varies by app version and setup, so check rather than assume.
4. Share access carefully
DMSS supports device sharing with family members or staff. Treat it like handing out a key.
- Give each person their own access, not a shared login.
- Share only the cameras they need, where the setup allows it.
- Remove access when someone leaves the household or the business.
- Review who has access at least once or twice a year.
5. Secure the physical equipment
A recorder in an unlocked cupboard can be unplugged or removed. Put it somewhere out of sight and, ideally, lockable. Keep the router and switch out of public areas too.
6. Review and tidy your network
Sensible network configuration includes keeping the recorder and cameras on a part of the network you control, using a current router with its own updated firmware, and using a strong Wi-Fi password. Ask your installer how they approach it.
A worked example
A café owner has six cameras and a recorder. They want to check closing time from home. The installer registers the recorder in DMSS, sets a strong unique password, adds the owner's phone, and adds the manager as a second user. No router ports are opened. Six months later the manager leaves and the owner removes that user. The other login is unaffected. That is the whole process, and it is far safer than a router rule.
What remote viewing depends on
Even a secure setup will only work if a few things are in place.
- Internet at the site. If it drops out, remote viewing pauses while local recording usually continues.
- Enough upload speed. Several cameras in live view need more bandwidth than one. The bandwidth tool gives an estimate.
- A phone with a working data connection.
Limits and honesty
No system is perfectly secure. Good habits reduce risk. They do not remove it. If you notice unfamiliar logins, cameras behaving oddly, or the password no longer working, treat that as a prompt to change passwords and contact your installer.
Privacy law also applies to what you record and who can view it. Rules differ by state and territory. See the CCTV laws guide. This is general information, not legal advice, so check your own state's rules.
What an installer can reasonably explain
You should not need to understand routers to feel confident. A good installer can describe, in plain words, how your phone reaches the recorder, who holds the admin password, and what would need to happen if you replaced your router or changed internet provider. If the explanation is vague, or relies on opening ports, keep asking. Licence and insurance details are also fair questions for any installer, including us.
Questions to ask your installer
- How is remote access configured, and does it avoid port forwarding?
- Who knows the admin password, and where is it recorded?
- How are firmware updates handled?
- How do I add and remove users?
- What happens to the system if my internet is down?
If you would like remote access configured and explained properly, you can ask us about installation. The glossary explains terms such as firmware and router.
Frequently asked questions
Is it safe to view my cameras on my phone?
It can be, when the system uses the manufacturer's app, strong unique passwords, current updates and carefully managed sharing. The risks come mostly from default passwords and exposed routers.
Why does my installer say no to port forwarding?
Because it exposes the recorder to the public internet. A secure setup uses the app's connection method instead.
Should I use public Wi-Fi to check my cameras?
It is better to use your mobile data connection when you can. Public networks vary in quality, and you cannot control who else is on them.
How often should I change the password?
Choose a strong, unique password at setup and change it when you suspect it has been shared, or when someone with access leaves. Frequent forced changes matter less than uniqueness and length.
Can my installer see my cameras?
Only if access has been given to them. Ask any installer what access they hold and whether it can be removed after setup.