Choosing between P2P cloud and VPN access
The P2P/cloud method is easiest to set up and works well for most households, since the camera never accepts direct inbound connections from the internet β it only reaches outward to the manufacturer's server. A VPN approach takes a bit more upfront setup but avoids relying on a manufacturer's cloud infrastructure entirely and keeps the camera fully invisible from the public internet, which is the stronger choice if security is your top priority or if you're uncomfortable trusting a third-party cloud service with your camera feed.
Why exposing a camera directly to the internet is a real risk
Search engines exist that specifically scan the internet for exposed devices, including cameras, and index them by manufacturer, location, and open ports. Combined with the fact that many people never change a camera's default password, direct exposure via port forwarding has led to well-documented cases of strangers viewing live feeds from other people's homes. If you must expose a camera directly, at minimum change the default password, restrict it to a video-stream port only (not the full admin interface), and require HTTPS.
Frequently Asked Questions
Are there cameras that require port forwarding?
Yes β some older cameras and professional-grade NVR systems don't support cloud apps and require port forwarding or a VPN. In that case, forward only the camera's video stream port rather than its admin interface, and pair it with a strong password and HTTPS.
My camera app shows 'P2P' β is that actually safe?
A legitimate P2P cloud service run by the camera's manufacturer doesn't expose the camera directly to the internet, so it's generally safer than manual port forwarding. That said, not every service is equally trustworthy β stick to well-known manufacturers and their official apps.