Anker Admits Eufy Cameras Did Not Offer End-to-End Encryption as Promised, Pledges to Do Better

Back in November, Anker's Eufy brand made headlines after security consultant Paul Moore discovered that Eufy security cameras were sending data to the cloud, even when cloud storage upload settings were disabled. Further, Eufy camera streams were allegedly able to be watched live through an app like VLC, which presented a glaring security issue.

eufy deal
That the Eufy cameras were uploading content to the cloud was problematic because Anker has long touted the security of its Eufy devices, claiming that they feature local-only storage and end-to-end encryption for those who want a more private camera solution. Following this debacle, The Verge began trying to get answers about Eufy camera security from Anker, and Anker was providing deliberately unclear and often misleading answers about how Eufy cameras worked.

The Verge was finally able to get answers from Anker by threatening to publish a story about the company's lack of communication, which has led to some clarification about Eufy security. Eufy cameras do not offer native end-to-end encryption, and they did indeed provide unencrypted video streams through the Eufy web portal, though Anker says this is an issue that has now been fixed. From Eufy:

Previously, after logging into our secure Web portal at eufy.com, a registered user could enter debug mode, use the Web browser’s DevTool to locate the live stream, and then play or share that link with someone else to play outside of our secure system. However, that would have been the user’s choice to share that link, and they would have needed to first log into the eufy Web portal to get this link.

Today, based on industry feedback and out of an abundance of caution, the eufy Security Web portal now prohibits users from entering debug mode, and the code has been hardened and obfuscated. In addition, the video stream content is encrypted, which means that these video streams can no longer be played on third-party media players such as VLC.

I should note, however, that only 0.1 percent of our current daily users use the secure Web portal feature at eufy.com. Most of our users use the eufy Security app to view live streams. Either way, the previous design of our Web portal had some issues, which have since been resolved.

Video stream requests originating from the Eufy web portal will be end-to-end encrypted going forward, as they are with the Eufy app, which Anker says is the primary way that Eufy users access camera streams. Anker says that every Eufy camera is being updated to use WebRTC, which is encrypted by default, and it will no longer be possible to play Eufy video streams through third-party apps.

Anker was regretful about its lack of communication, and said that it would do better in the future. The company is bringing in third-party security companies to audit the Eufy security products, and it is working on an official bug bounty program. Anker will also establish a security micro-site in February, and will provide customers with more information on the changes that have been implemented.

For those who are interested in the full details of what Eufy has to say, The Verge published its complete email communications with Anker spokespeople.

Popular Stories

Generic iOS 19 Feature Mock Light

iOS 19 Leak Reveals All-New Design

Friday January 17, 2025 2:42 pm PST by
iOS 19 is still around six months away from being announced, but a new leak has allegedly revealed a completely redesigned Camera app. Based on footage it obtained, YouTube channel Front Page Tech shared a video showing what the new Camera app will apparently look like, with the key change being translucent menus for camera controls. Overall, the design of these menus looks similar to...
2024 App Store Awards

Apple Explains Why It Removed TikTok From the App Store in the U.S.

Sunday January 19, 2025 6:58 am PST by
Apple on late Saturday removed TikTok from the App Store in the U.S., and it has now explained why it was required to take this action. Last year, the U.S. passed a law that required Chinese company ByteDance to divest its ownership of TikTok due to potential national security risks, or else the platform would be banned. That law went into effect today, and companies like Apple and Google...
iPhone SE Dynamic Island Majin Bu

iPhone SE 4 Leak Shows Dynamic Island, Casts Doubt on Rumored 'iPhone 16E' Name

Monday January 20, 2025 9:01 am PST by
A new iPhone SE is widely rumored to launch this year, and the device has potentially been confirmed today by known leaker Evan Blass. In a private social media post, Blass shared an image of what appears to be source code mentioning an iPhone SE (4th Gen), which casts doubt on the alternative "iPhone 16E" name rumored for the device. However, the name in the source code could be a...
iOS 19 Roundup Feature

iOS 19 Rumored to Be Compatible With These iPhones

Saturday January 18, 2025 10:28 am PST by
iOS 19 will not drop support for any iPhone models, according to French website iPhoneSoft.fr. The report cited a source who said iOS 19 will be compatible with any iPhone that can run iOS 18, which would mean the following models: iPhone 16 iPhone 16 Plus iPhone 16 Pro iPhone 16 Pro Max iPhone 15 iPhone 15 Plus iPhone 15 Pro iPhone 15 Pro Max iPhone 14 iPhon...
airtag 4 pack blue

AirTag 2 Launching This Year With These 3 New Features

Sunday January 19, 2025 8:11 am PST by
After a four-year wait, a new AirTag is finally expected to launch in 2025. Below, we recap rumored upgrades for the accessory. A few months ago, Bloomberg's Mark Gurman said Apple was aiming to release the AirTag 2 around the middle of 2025. While he did not offer a more specific timeframe, that means the AirTag 2 could be announced by the end of June. The original AirTag was announced...
iPhone 17 Air Size Feature

'iPhone 17 Air' With Rear Camera Bar Allegedly Shown in Leaked Photo

Tuesday January 21, 2025 12:46 pm PST by
A leaker known as "Majin Bu" today shared an alleged image of a component for the rumored, ultra-thin "iPhone 17 Air" model. The blurry, pixelated image shows a pair of rear iPhone shells with a pill-shaped, raised camera bar along the top. On the left side of the bar, there is a circular cutout that appears to be for a single rear camera. On the right side of the bar, there appears to be an ...
apple power beats pro 2

Powerbeats Pro 2 Coming Soon: Apple to Announce Them 'Imminently'

Sunday January 19, 2025 8:25 am PST by
In September, Apple said that it would be launching Powerbeats Pro 2 in 2025, and it appears the wireless earbuds are coming very soon. Powerbeats Pro 2 images found in iOS 18 code In his Power On newsletter today, Bloomberg's Mark Gurman said the Powerbeats Pro 2 are "due imminently." In addition to Apple filing the Powerbeats Pro 2 in regulatory databases last month, Gurman said Apple is...
Generic iOS 18

Everything New in iOS 18.3 Beta 3

Thursday January 16, 2025 12:39 pm PST by
Apple provided the third beta of iOS 18.3 to developers today, and while the betas have so far been light on new features, the third beta makes some major changes to Notification Summaries and also tweaks a few other features. Notification Summary Changes Apple made multiple changes to Notification Summaries in response to complaints about inaccurate summaries of news headlines. For...

Top Rated Comments

erikkfi Avatar
26 months ago
Now that you've caught us in an out-and-out lie about the security of our products, please continue to use them and we promise this time we'll do better.
Score: 39 Votes (Like | Disagree)
TheYayAreaLiving ?️ Avatar
26 months ago
If this was Apple there would be a lawsuit instantly. They are lucky they are getting away with it for now.
Score: 25 Votes (Like | Disagree)
Leon Ze Professional Avatar
26 months ago
Simply not acceptable! Shouldn't need a disaster to get your house in order.
Score: 24 Votes (Like | Disagree)
now i see it Avatar
26 months ago
Its reassuring than Anker is a trustworthy company now
Score: 23 Votes (Like | Disagree)
antiprotest Avatar
26 months ago
"I should note, however, that only 0.1 percent of our current daily users use the secure Web portal feature at eufy.com."

Right. Those are the people hacking into the users' accounts.
Score: 23 Votes (Like | Disagree)
twistedpixel8 Avatar
26 months ago


Attachment Image
Score: 16 Votes (Like | Disagree)