.png){kind=small}
CCTV Remote Viewing: How to Watch Your Cameras Safely
You can watch your CCTV from your phone, tablet or computer anywhere with an internet connection. The cameras or recorder connect to your home or business network, and a manufacturer’s app or web portal brings the live picture and recordings to you. The convenience is real. So is the risk, because the same connection that lets you in can let someone else in if it is set up carelessly. This guide covers what you need, how the setup works, how to lock it down and what UK law expects of you.
TL;DR
Remote viewing needs three things: cameras on a network, a recorder or cloud storage, and an app or web login on your phone or computer.
The biggest risk is a weak setup: default passwords, old firmware and router settings that expose the recorder to the internet.
The National Cyber Security Centre (NCSC) says that if you do not need remote viewing, you should switch it off.
If your cameras see beyond your own boundary, UK data protection law applies to you, even at home.
A professional install sets up remote access properly the first time, which is where most DIY systems fall short.
Table of Contents
What CCTV remote viewing actually is
The term “CCTV” comes from closed circuit television, when cameras ran over cables to a single monitor. The Surveillance Camera Commissioner’s Buyers Toolkit points out that the name has stuck even though most systems today are no longer closed circuit. The British Security Industry Association now uses “video surveillance systems” (VSS) for professional installations.
In practice, modern systems are network cameras. Each camera sends video over a cable or Wi-Fi to a recorder (an NVR) or to cloud storage. Remote viewing is simply the ability to reach that video from outside the building. The NCSC describes it as watching a live feed, receiving alerts when you are out and about, and sometimes recording footage, usually over your home Wi-Fi.
That is also what people mean when they search for how to view CCTV on a phone: an app, a login and a live picture on your screen.
What you need before you can view cameras remotely
Check each item on this list before you blame the app.
Network-capable cameras. Old analogue cameras can work through a hybrid recorder, but IP cameras are designed for remote access.
A recorder or cloud storage. The recorder stores footage on a hard drive and handles the remote connection. Without one, each camera usually has to be reached individually.
A router with a stable broadband connection. Remote viewing uses your upload speed. Several cameras streaming at full quality over a slow upload will buffer, so most apps offer a lower-quality stream for mobile data.
An app or web portal. This is the manufacturer’s own software for phone, tablet or computer.
An account with a strong, unique password. This is the part most people rush.
If you want to see how camera positions affect what you actually see on that screen, our guide to CCTV camera placement at home covers heights, angles and blind spots.
How remote viewing is set up, step by step
The exact screens differ by manufacturer, but the order is nearly always the same.
Connect the recorder to your router with an Ethernet cable. A cable is more reliable than Wi-Fi for a recorder that runs all day.
Let the router assign the recorder an address automatically (DHCP), then reserve that address so it does not change after a power cut.
Change the default password straight away. Do this before anything else touches the internet.
Update the firmware on the recorder and each camera.
Install the manufacturer’s app and add the device, usually by scanning a QR code on the recorder’s screen or label.
Test from outside your network. Turn off Wi-Fi on your phone and check that the live view loads over mobile data.
Set up alerts and user accounts. Give family members or staff their own logins rather than sharing one.
Many older guides tell you to open ports on your router so the recorder can be reached directly. We would steer you away from that, and the next section explains why.
The security risk nobody mentions in the app store
A camera that can be reached from anywhere by you can, in principle, be reached by someone else. The NCSC explains that live feeds from smart cameras can, in rare cases, be accessed by unauthorised users. The usual cause is that some cameras ship with a default password set by the manufacturer, which is often well known or easy to guess, such as admin or 00000.
The consumer group Which? tested budget cameras and found security flaws in cameras bought from a major online marketplace, including ones with plenty of positive reviews. Good reviews tell you about picture quality, not about security.
Port forwarding and UPnP
To make a recorder visible from outside, older setups ask you to use port forwarding or a router feature called UPnP. Both punch a hole in your router’s protection. A weak recorder password then becomes the only thing standing between the internet and your cameras, and potentially the rest of your home network. Modern apps normally connect through the manufacturer’s secure relay service, which avoids opening anything. If a guide tells you to forward ports, ask whether there is a safer route first.
Switch it off if you do not use it
The NCSC advice is plain: if you do not need the feature that lets you view footage remotely over the internet, turn it off. A camera that only records locally is much harder to attack. Ask yourself honestly whether you will ever open the app. If it is only for the odd check on holiday, that is a reason to keep it, but make sure it is locked down.
A security checklist for remote access
The NCSC guidance and Which? coverage of it boil down to a handful of habits.
Action | Why it matters |
Replace every default password | Default passwords are the most common way in |
Use three random words for the password | Easy to remember, hard to guess, as the NCSC recommends |
Keep camera, recorder and app updated | Updates fix known flaws; the firmware setting is usually in the app |
Turn on two-step verification where offered | A stolen password alone is no longer enough |
Disable UPnP and unused services | Fewer open doors on your network |
Remove accounts for people who no longer need access | Ex-staff and ex-tenants should not keep a view of your property |
The common failure is the “set and forget” install. A system fitted three years ago and never updated is a bigger risk than a newer, well-maintained one. Put a reminder in your diary to check for updates twice a year.
For wider home network hygiene, including keeping cameras on their own network segment, see our home office network setup guide.
Our perspective: remote viewing is a network job, not a camera job
We are an IT infrastructure and networking company that also installs security systems, and that mix shapes how we look at remote viewing. Most of the problems people bring us are not about the cameras. They are about the network the cameras sit on: a recorder reachable from the internet, a shared password written on the recorder, a router nobody has updated since the broadband provider fitted it.
So we treat the remote access side as seriously as the lens. When we supply, configure and install systems across Guildford and Surrey, the configuration step matters as much as the mounting. That means passwords set properly, accounts for each person who needs one, and remote access switched on only where the customer will use it.
Our honest advice to a homeowner is simple. Decide who really needs to see the cameras and from where. Give each of them their own login. Keep the firmware current. If that sounds like more than you want to manage, that is exactly the sort of work an installer should take off your hands.
— Andrii
What UK law says about the footage you can see
Remote viewing does not change the law, but it does make you more aware of what your cameras capture. The Information Commissioner’s Office (ICO) explains that data protection law applies when home CCTV, including fixed cameras and smart doorbells, captures people beyond your own property, such as a neighbour’s garden or the street.
In that case, you should expect to:
have a clear reason for the cameras, such as preventing crime, and be able to explain it;
display visible signs that CCTV is in operation;
store footage securely and delete it when you no longer need it;
respond if someone asks for a copy of footage of themselves, or asks for it to be deleted.
The practical fix is often physical. Angle cameras to cover your own door, drive and garden, and use privacy masking in the app to block out areas you do not need. If your cameras only watch your own land, the data protection rules for this kind of use do not generally apply in the same way, but the ICO page is worth reading against your own layout.
Businesses have further duties. The ICO’s CCTV guide for organisations says data protection must be considered even if you are only live-streaming and not recording. If you manage staff or customers on camera, read it before you switch remote access on, and speak to a data protection adviser if your situation is unusual.
Remote viewing on your phone versus a monitoring service
These two are often confused, and the difference matters when you choose what to buy.
Viewing it yourself | Professionally monitored | |
Who watches | You, through an app | A control room that responds to alerts |
Best for | Checking in, reviewing events, seeing who is at the door | Unattended commercial sites, out-of-hours risk |
Your responsibility | Keeping logins and firmware secure | Agreeing response procedures with the provider |
Set-up | Cameras, recorder and app | All of the above plus a monitoring contract |
Most homeowners need the first. If you are away from the property for long periods or run a business site with no one on it overnight, ask an installer about the second.
Troubleshooting: why you cannot see your cameras
If remote viewing worked and then stopped, or never worked, check these in order.
It works at home but not on mobile data. The recorder is probably not reaching the manufacturer’s relay. Check the recorder’s network status and that its firmware is current.
The picture is choppy. Switch the app to the lower-quality sub-stream, or check your broadband upload speed.
The recorder shows offline after a power cut. The router may have given it a new address. Reserving an address for the recorder avoids this.
The app rejects your password. Reset it through the recorder itself, then choose a new password made of three random words.
Only one camera is missing. Look at its cable, power and Wi-Fi signal before blaming the app.
If you have tried these and still cannot connect, stop changing router settings at random. Every setting you open is another route in for someone else.
Getting remote viewing set up properly
A good installation makes remote access an afterthought. You open the app, you see your cameras, and you do not think about the network behind them.
We supply, configure and install CCTV, video surveillance and Ajax security systems for homes and businesses across Guildford, Surrey and surrounding areas, including Woking, Cobham, Dorking, Farnham and Farnborough. If you are weighing up a new system, our page on CCTV and Ajax security systems shows what we offer, and our Ajax installation page explains how certified installation works. We do not publish prices for installation, so contact us with the property or site details and we will talk you through it. For a general idea of what UK installations cost and what compliance involves, read our CCTV installation cost guide.
If you are still choosing hardware, our article on turret versus bullet cameras covers mounting height and which suits a typical UK home. If you are weighing how much protection you need overall, the UK burglary statistics article puts the risk in context.
FAQ
Can you access CCTV footage remotely?
Yes, if your cameras or recorder are connected to the internet and you have the manufacturer’s app or web portal. You log in and see live video, and usually recorded clips too. Make sure remote access is secured before you rely on it.
Is it safe to view my CCTV on my phone?
It can be, provided the system is set up with care. Change default passwords, keep firmware and the app updated, and use two-step verification where it is offered. The NCSC also says to turn remote viewing off if you do not need it.
Do I need to open ports on my router to see my cameras?
Usually not with a modern recorder and app. Port forwarding and UPnP expose your device to the internet and are best avoided where the manufacturer offers a secure connection service. If an installer says they are needed, ask why and what protects the device.
Do I have to register my home CCTV or put up signs?
If your cameras capture areas beyond your property, such as a neighbour’s land or the street, data protection law applies and the ICO says you should display signs and be able to explain why you are filming. Read the ICO’s home CCTV guidance for your layout, and ask a data protection adviser if you are unsure.
Sources
Recommended
Comments