| Eufy Security Indoor Cam
|
|
Security Grade
Calculator v
|
Eufy Security Indoor Cam
Release Date: 2021-06-01 • Status: End of sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
None
|
🔗 Proof
|
No hardware tampering reports
|
| Known vulnerabilities
|
Rare
|
🔗 Proof
|
2022 scandal: unencrypted cloud uploads despite "local-only" marketing
|
| Prior attacks
|
Rare
|
🔗 Proof
|
Class action lawsuit over misleading privacy claims
|
| Updatability
|
Very common
|
🔗 Proof
|
ufy (Anker) regularly pushes firmware updates
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
🔗 Proof
|
Claimed local-only but actually uploaded data to cloud
|
| Communications
|
Encrypted with obselete encryption
|
🔗 Proof
|
2022: thumbnails and video snippets uploaded unencrypted
|
| Storage
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
ISO 27001/27701 certified; improved encryption post-scandal
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Basic
|
🔗 Proof
|
Eufy account required
|
| Authentication
|
Basic
|
🔗 Proof
|
Basic account auth; 2FA optional
|
| Brute-force protection
|
Basic
|
🔗 Proof
|
Cloud account rate limiting
|
| Event logging
|
Partial logging
|
🔗 Proof
|
Event history in Eufy app
|
| Passwords
|
Require change after setup
|
🔗 Proof
|
User sets Eufy account password
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Embedded (Companion App: Eufy Security)
|
| Hardware (CPU / GPU)
|
CPU: • GPU:
|
| Memory & Storage
|
Memory: • Storage:
|
| Power, Battery & Charging
|
Battery: • Power: • Charging:
|
| Display & Camera
|
Display: • Camera:
|
| Sound & Connectivity
|
Sound: • Connectivity:
|
| Physical (Dimensions & Mass)
|
Dimensions: • Mass:
|
The Eufy Indoor Cam T8400 is marketed as a privacy-focused camera with local storage, and Eufy holds ISO 27001/27701 certifications. However, a 2022 scandal undermined these claims: security researchers and The Verge discovered that despite advertising "local-only" storage, Eufy cameras uploaded thumbnails and even video snippets to cloud servers without encryption. A class-action lawsuit documented that users could stream camera feeds through unencrypted public websites. Eufy subsequently improved encryption and privacy practices, and now claims end-to-end encryption for cloud-stored video. While the company has reformed, the documented gap between advertised and actual privacy practices warrants a cautious middle rating. Overall risk is moderat
