The U.K. government is proposing new legislation aimed at improving security of Internet of Things devices.
Digital minister Margot James MP revealed the draft law on Wednesday as part of the government’s efforts to protect millions of internet-connected devices from cyberattacks.
The law will mandate that internet-connected devices, like smart thermostats, appliances and webcams, must be sold with a unique password.
Botnets typically rely on default passwords that are hardcoded into devices when they’re built that aren’t later changed by the user. By selling a device with a unique password, it significantly slows down cybercriminals from scanning the internet and automatically logging into devices with a default password, often to launch distributed denial-of-service attacks.
On a massive scale, botnets operating thousands of hijacked Internet of