Quarantine an Unsupported Smart-Home Device Before Replacing It

If a connected household device no longer receives security updates, remove its internet and network access until you can replace it. Do not keep an unsupported camera, hub, plug, or appliance online merely because its local controls still work.

“Unsupported” means more than an old-looking product. Confirm the exact model, hardware revision, firmware version, and vendor support status. A functioning device can still be unable to receive fixes for newly discovered vulnerabilities.

Verify support status and device identity

Read the label and capture the model and revision without publishing the serial number. In the vendor app, record the installed firmware version and the date of its last successful update. Then check the manufacturer’s official support or end-of-life notice.

Be careful with products that share a marketing name across several generations. A support notice for version 1 may not apply to version 2. Likewise, an app that says “up to date” only means no newer update is being offered. It does not prove that the product is still supported.

CISA describes end-of-support devices as products that no longer receive timely vendor-supported patches, security updates, fixes, or defect corrections. Its 2026 guidance focuses on organizational edge equipment, but the underlying household decision is useful: unsupported internet-facing technology should not remain indefinitely exposed.

Record the evidence and date. If the vendor’s status is unclear, ask the vendor directly and keep the response. Do not rely on a marketplace seller’s listing as a support promise.

Contain the device without creating a safety problem

Disconnect the device from Wi-Fi, Ethernet, cellular service, and any hub that gives it a network path. Block it at the router as a backstop if that feature is available. Simply closing the phone app does not disconnect the hardware.

Before unplugging it, identify any life-safety, accessibility, heating, refrigeration, entry, or caregiving function that depends on it. Replace that function first with a safe manual process or supported equipment. Never disable a smoke alarm, medical device, required security system, or critical temperature control as an improvised cybersecurity measure.

If the product works locally without a network, label it “offline only” and document which controls remain safe. Do not reconnect it temporarily for convenience without reopening the risk decision. Guest Wi-Fi is not a cure for unsupported software. Segmentation can reduce some exposure, but the device remains unpatchable and may still communicate with cloud services.

Change credentials that were unique to the device account if compromise is suspected. Review authorized users, integrations, voice-assistant links, and cloud automations. Containment of the hardware does not revoke tokens or copies of data already held by the vendor.

Replace and retire it deliberately

Choose a replacement with a published support period, automatic security updates where practical, a clear vulnerability-reporting process, and controls that match the household’s needs. Save the receipt, model, warranty, and expected support date in the household inventory.

Remove the old device from automations and vendor accounts. Export only records the household truly needs. Follow the manufacturer’s reset and disposal instructions, then verify that the device returns to initial setup state when that can be done safely.

HomeCo’s guide to disable smart-device remote management can reduce unnecessary exposure on a supported product. It is not a substitute for replacing hardware that can no longer receive fixes.

After replacement, scan the router list for the old device. A stale entry may remain in history, so compare the hardware address and last-seen time before declaring that the device reconnected.

FAQ

Is an old device unsupported if it still gets app updates?

Not necessarily. The mobile app and device firmware have separate support cycles. Verify the hardware model’s own firmware support.

Can I safely keep it on a guest network?

A guest network may isolate it from personal devices, but it does not repair known or future flaws. Offline use or replacement is the safer default.

What if there is no supported replacement yet?

Disconnect network features and preserve the essential function through a safe manual alternative. If the device supports a critical need, involve its manufacturer or a qualified professional before changing it.

How HomeCo helps

Create a HomeCo incident card with the exact model, support evidence, containment owner, affected household function, and replacement deadline. Keep serial numbers, passwords, and reset codes out of broadly visible notes.

Assign separate checks for safe shutdown, account unlinking, replacement setup, and disposal. This keeps an edge case from becoming a permanent exception hidden behind the phrase “we will replace it later.”

Source: CISA, Reducing the Attack Surface for End-of-Support Edge Devices