Wyze security
Here you can find information regarding Wyze account and data security. At Wyze, we put immense value in our users’ trust in us. This site clarifies our security measures, shares best practices to help ensure your account remains secure, and hosts an FAQ section.
Since the founding of Wyze, we have existed for our users. The promise and dream to build a company serving our community is a core part of Wyze. This site helps advance that promise and we want to thank you for joining us.
Developed with layers of security
Our cameras, smart devices, and Wyze app are meticulously designed with multiple layers of security to help give you peace of mind. Your safety is our priority.
We participate in industry best practices to keep you safe. These best practices include the following:
- ioXt certified for iOS & Android, leading connected device security certification
- Certified by Google MASA for Android
- Passing NCC penetration testing
- Passing 3rd-party security testing for hardware with ReFirm Labs
- Bitdefender indepth pentesting for Camera V3
- Using AWS infrastructure (SOC2 & ISO compliance)
- Implementing Lacework to enhance the security of our cloud infrastructure
- Wyze mandated 2-factor authentication for all customers
- Wyze utilizes the latest Amazon security protections including AWS WAF, GuardDuty services.
This list continues to go on depending on our device. For example, we have UL/FCC/Energy Star certificates for our light bulbs.
Your data is never sold
We do not sell your data for money. Wyze does not sell your personal information in the conventional sense (i.e., for money). It’s that simple. Your privacy is a big deal for us – a key part of being friends with our customers.
Wyze may disclose certain data points about you such as your activities on our website or app to service that allow us to show you interest-based advertisements, or to our business partners. Making this information available to these companies may be considered a “sale” under the California Consumer Privacy Act (CCPA) or other state privacy laws. To learn more about how we collect, use and disclose your personal information, please review our Privacy Statement.
Live stream and video encryption security
The communication requests between your mobile device, your Wyze product, and the AWS Cloud Server are made via https (Transport Layer Security, also known as TLS) for Event videos.
We use symmetric and asymmetric encryption, consistent hashing, and other ways to help ensure users’ information cannot be stolen. Each camera has its own secret key and certificate so that we can validate its identity during handshake. The contents are encrypted via AES 128-bit encryption to protect the security of the live stream and playback data.
During the connection process, every device in the process has its own secret key and certification, so that we can validate their identity during handshake. Even if a hacker intercepts the data package, the data cannot be decrypted.
