Anker Admits Eufy Cameras Did Not Offer End-to-End Encryption as Promised, Pledges to Do Better

Back in November, Anker's Eufy brand made headlines after security consultant Paul Moore discovered that Eufy security cameras were sending data to the cloud, even when cloud storage upload settings were disabled. Further, Eufy camera streams were allegedly able to be watched live through an app like VLC, which presented a glaring security issue.

eufy deal
That the Eufy cameras were uploading content to the cloud was problematic because Anker has long touted the security of its Eufy devices, claiming that they feature local-only storage and end-to-end encryption for those who want a more private camera solution. Following this debacle, The Verge began trying to get answers about Eufy camera security from Anker, and Anker was providing deliberately unclear and often misleading answers about how Eufy cameras worked.

The Verge was finally able to get answers from Anker by threatening to publish a story about the company's lack of communication, which has led to some clarification about Eufy security. Eufy cameras do not offer native end-to-end encryption, and they did indeed provide unencrypted video streams through the Eufy web portal, though Anker says this is an issue that has now been fixed. From Eufy:

Previously, after logging into our secure Web portal at eufy.com, a registered user could enter debug mode, use the Web browser’s DevTool to locate the live stream, and then play or share that link with someone else to play outside of our secure system. However, that would have been the user’s choice to share that link, and they would have needed to first log into the eufy Web portal to get this link.

Today, based on industry feedback and out of an abundance of caution, the eufy Security Web portal now prohibits users from entering debug mode, and the code has been hardened and obfuscated. In addition, the video stream content is encrypted, which means that these video streams can no longer be played on third-party media players such as VLC.

I should note, however, that only 0.1 percent of our current daily users use the secure Web portal feature at eufy.com. Most of our users use the eufy Security app to view live streams. Either way, the previous design of our Web portal had some issues, which have since been resolved.

Video stream requests originating from the Eufy web portal will be end-to-end encrypted going forward, as they are with the Eufy app, which Anker says is the primary way that Eufy users access camera streams. Anker says that every Eufy camera is being updated to use WebRTC, which is encrypted by default, and it will no longer be possible to play Eufy video streams through third-party apps.

Anker was regretful about its lack of communication, and said that it would do better in the future. The company is bringing in third-party security companies to audit the Eufy security products, and it is working on an official bug bounty program. Anker will also establish a security micro-site in February, and will provide customers with more information on the changes that have been implemented.

For those who are interested in the full details of what Eufy has to say, The Verge published its complete email communications with Anker spokespeople.

Top Rated Comments

erikkfi Avatar
16 months ago
Now that you've caught us in an out-and-out lie about the security of our products, please continue to use them and we promise this time we'll do better.
Score: 39 Votes (Like | Disagree)
TheYayAreaLiving ?️ Avatar
16 months ago
If this was Apple there would be a lawsuit instantly. They are lucky they are getting away with it for now.
Score: 25 Votes (Like | Disagree)
Leon Ze Professional Avatar
16 months ago
Simply not acceptable! Shouldn't need a disaster to get your house in order.
Score: 24 Votes (Like | Disagree)
now i see it Avatar
16 months ago
Its reassuring than Anker is a trustworthy company now
Score: 23 Votes (Like | Disagree)
antiprotest Avatar
16 months ago
"I should note, however, that only 0.1 percent of our current daily users use the secure Web portal feature at eufy.com."

Right. Those are the people hacking into the users' accounts.
Score: 23 Votes (Like | Disagree)
twistedpixel8 Avatar
16 months ago


Attachment Image
Score: 16 Votes (Like | Disagree)

Popular Stories

iPhone 15 Pro FineWoven

Apple Reportedly Stops Production of FineWoven Accessories

Sunday April 21, 2024 6:03 am PDT by
Apple has stopped production of FineWoven accessories, according to the Apple leaker and prototype collector known as "Kosutami." In a post on X (formerly Twitter), Kosutami explained that Apple has stopped production of FineWoven accessories due to its poor durability. The company may move to another non-leather material for its premium accessories in the future. Kosutami has revealed...
Provenance Emulator

PlayStation and SEGA Emulator for iPhone and Apple TV Coming to App Store [Updated]

Friday April 19, 2024 8:29 am PDT by
The lead developer of the multi-emulator app Provenance has told iMore that his team is working towards releasing the app on the App Store, but he did not provide a timeframe. Provenance is a frontend for many existing emulators, and it would allow iPhone and Apple TV users to emulate games released for a wide variety of classic game consoles, including the original PlayStation, GameCube, Wii,...
iOS 17 All New Features Thumb

iOS 17.5 Will Add These New Features to Your iPhone

Sunday April 21, 2024 3:00 am PDT by
The upcoming iOS 17.5 update for the iPhone includes only a few new user-facing features, but hidden code changes reveal some additional possibilities. Below, we have recapped everything new in the iOS 17.5 and iPadOS 17.5 beta so far. Web Distribution Starting with the second beta of iOS 17.5, eligible developers are able to distribute their iOS apps to iPhone users located in the EU...
apple vision pro orange

Apple Vision Pro Customer Interest Dying Down at Some Retail Stores

Monday April 22, 2024 2:12 am PDT by
Apple Vision Pro, Apple's $3,500 spatial computing device, appears to be following a pattern familiar to the AR/VR headset industry – initial enthusiasm giving way to a significant dip in sustained interest and usage. Since its debut in the U.S. in February 2024, excitement for the Apple Vision Pro has noticeably cooled, according to Bloomberg's Mark Gurman. Writing in his latest Power On...
top stories 20apr2024

Top Stories: Nintendo Emulators on App Store, Two New iOS 17 Features, and More

Saturday April 20, 2024 6:00 am PDT by
It was a big week for retro gaming fans, as iPhone users are starting to reap the rewards of Apple's recent change to allow retro game emulators on the App Store. This week also saw a new iOS 17.5 beta that will support web-based app distribution in the EU, the debut of the first hotels to allow for direct AirPlay streaming to room TVs, a fresh rumor about the impending iPad Air update, and...