Dahua Product Security White Paper v3.0

Without the prior written permission of Zhejiang Dahua Technology Co., Ltd. (hereinafter referred to as "Dahua"), no one may copy, transmit, distribute or store any content of this document in any form. The products described in this document may contain software copyrighted by Dahua and other third parties. No one shall copy, distribute, modify, extract, decompile, disassemble, decrypt, reverse engineer, lease, transfer, sublicense or otherwise infringe the copyright of the software in any form except with the permission of the relevant owner.

Initialization and Password reset for Networking Cameras V1

In order to strengthen device security and ensure the safety of user information, new firmware on Dahua devices will feature initialization and password reset functions. When using networking cameras for the first time, users will need to initialize the device with a strong password. Users who have forgotten their password can reset it through email verification. Initialization:At the first time to use the device, a compulsory strong password setting is needed, and an user email address setting for password reset is recommended.The password ranges from 8 to 32 digitals. It can contain letters, numbers and special characters (excluding “'”,“"”,“;”,“:”,“&”) . The password shall contain at least two categories. The operation steps refer to attachment. Password Reset: If password is forgotten, users can reset the password by the following method（for admin only）: QR code: Use Easy4ip or DMSS to scan the reset QR code and your email set before will receive the security code. Input the security code to reset the password of admin.

Best Practices

Cybersecurity is more than just a buzzword: it’s something that pertains to every device that is connected to the internet. IP video surveillance is not immune to cyber risks, but taking basic steps toward protecting and strengthening networks and networked appliances will make them less susceptible to attacks. Below are some tips and recommendations from Dahua on how to create a more secured security system.

Initialization and Password Reset for Storage Devices V3

In order to strengthen device security and ensure the safety of user information, new firmware on Dahua devices will feature initialization and password reset functions. When using networking cameras for the first time, users will need to initialize the device with a strong password. Users who have forgotten their password can reset it through email verification. Initialization:At the first time to use the device, a compulsory strong password setting is needed, and an user email address setting for password reset is recommended.The password ranges from 8 to 32 digitals. It can contain letters, numbers and special characters (excluding “'”,“"”,“;”,“:”,“&”) . The password shall contain at least two categories. The operation steps refer to attachment. Password Reset: If password is forgotten, users can reset the password by the following alternatives（for admin only）: a) QR code: Use Easy4ip or DMSS to scan the reset QR code and your email set before will receive the security code. Input the security code to reset the password of admin. b) Security questions: Answer the pre-set security questions to reset the password of admin. Only the local GUI of NVR/DVR support this method.