How to secure your Alexa device

Do you know if your Alexa device is always listening? Do you know if a hacker got into your device? Do you know what information your Echo is storing? It’s not just your computer or your smartphone that needs to be secured — your Echo needs to be secured, too.

There are a few steps you can take to enhance safety and protect your privacy when using Alexa devices. Choosing a strong password and using a pin for voice purchases are a few examples of security measures you can take.

Delete your Alexa voice recordings every day

On the same day Amazon unveiled the Echo Show 5, it also announced a new privacy feature that allows customers to delete all of their recordings from their Alexa device for a specific day.

Step 1: If you simply say, “Alexa, delete what I said today,” your Alexa-enabled device will delete your daily voice recordings.

Step 2: Perform this action at night before you go to bed to keep your Alexa recordings cleared out.

Delete your Alexa voice recordings history

Even if you go through and delete your recordings each night, you may still have an archive of past recordings (prior to when you started deleting them daily).

Step 1: Go into the Alexa app and select Settings > Alexa Account > History.

Step 2: Go through and manually delete all of your past recordings.

Turn off your microphone and camera when you’re not using the device

Some users worry about a random creep hacking into their Echo and listening in on them, or even worse, they worry someone may be watching them through an Echo device that has a camera. You can minimize this risk by turning off your microphone if you don’t plan on using your Echo.

Step 1: Press the microphone on/off button located on top of the device, and Alexa will stop listening.

Step 2: Turn off the camera on all Alexa devices by either using your voice (say, “Alexa, turn camera off”), or you can go to Settings > Device Options and then turn off the Enable Camera option.

In newer Echo models with screens, like the Echo Show 5, Amazon went an extra step and included a physical camera shutter that you can put over the camera lens. This was done to help assuage fears that digital privacy methods could be overwritten — and also because more new Echo devices were designed for more private areas, like the bedroom.

Be mindful of where you place your Alexa devices

Avoid placing your Echo near a window or in a location that's easily accessible from outside your home. In addition to reducing the risk of someone accessing your Echo from outside, this also reduces the risk of people outside of your home listening to your calls and other Alexa interactions.

Change your wake word

Change your wake word to a word you seldom (if ever) use in conversation. Also, make sure your wake word doesn't sound too similar to other words you frequently use in conversation. This way, if you have a friend named Alexis, Alexa doesn’t start recording your conversations when you say your friend's name.

Step 1: To change your wake word, you can simply say, “Alexa, change the wake word.”

Step 2: You can also open the Alexa app.

Step 3: Go to Devices > select your device > select Wake Word > select a new wake word from the list.

Step 4: Select OK.

Use a strong Amazon password and two-factor authentication

Sometimes, people forget that their Alexa devices are secured and protected by their Amazon password. If someone has your Amazon password, they have access to your Alexa recordings, your smart devices like security systems and cameras, your daily routine, the ability to make purchases, and much more.

Digital Trends' own Trevor Mogg recently reported on a study by the U.K.’s National Cyber Security Center (NCSC) that looked at public databases of breached accounts and found that 23.2 million accounts globally used the password “123456.”

If you're using a weak password, or if you're using the same password for multiple accounts, you may want to think about increasing your password security by updating and using different passwords.

Increase your network security

A secure home network is key to securing your Alexa devices and smart-home devices as well. This means having a strong network password. You can read more about how to secure your Wi-Fi network here.

Step 1: Avoid using default passwords.

Step 2: Avoid giving your password to friends and neighbors (use a "guest" network instead).

Step 3: Use two-factor authentication when possible.

Manage smart-device connections

Alexa can connect to smart devices all over your house — in fact, she's one of the best voice assistants for giving commands to smart devices. But all that smart-home compatibility also comes with some security concerns. Alexa will receive data about your smart devices and how they are used throughout your home.

Fortunately, just like with Alexa voice commands, there is a way to delete this history of your smart-device connections.

Step 1: Log on to your Amazon account.

Step 2: Go to Manage Your Content and Devices.

Step 3: Select Manage Smart Home Devices History. Here you will see an option to delete your devices' history with just one button.

Set up a pin for voice purchases

One concern a lot of people had with Alexa devices was that kids would accidentally purchase thousands of dollars worth of merchandise, and that we’d all go broke and have piles of Amazon boxes in our living rooms. While you must have voice purchases "enabled" and you must have a one-click payment method set up to make those voice purchases, it’s still a good idea to take extra precaution and add a purchase code. This requires the purchaser to say a four-digit confirmation code before making any voice purchase.

Step 1: Open the Alexa app.

Step 2: Go to Settings > Alexa Account > Voice Purchases.

Step 3: When you enable voice purchases, it will give you the option to set up your purchase code.

Read privacy policies and adjust your privacy settings

Amazon publishes info on its security practices, terms of use, and privacy policies. Review this information so you thoroughly understand Alexa privacy and security, and what type of concerns you should have.

Step 1: Open the Alexa app.

Step 2: Go to Settings > Alexa Account > Alexa Privacy.

Step 3: Adjust your privacy settings.

For instance, you can review your smart-alert history, manage which info is sent to Amazon about your smart-home devices, and manage your skills permissions (which is kind of like managing app permissions on your phone). Specific Alexa devices have additional privacy settings. For instance, the Echo Look lets you choose whether you want your photos to be submitted for style suggestions.

Manage third-party skills carefully

In terms of privacy, third-party Alexa skills are in a fascinating position. As you may already know, Amazon won't share any personally identifiable information for any skill without directly acquiring your permission first. On the other hand, many skills automatically require the transfer of some information. For example, if you start a quiz skill, Alexa will send your quiz answers to the skill without asking permission because that's what the skill is for.

You have to enable a skill for Alexa to share specific contact information, like your email.

Step 1: Open the Alexa app.

Step 2: Review your skills to secure and adjust your permission settings.

Don’t create and share skills that contain your personal information

Many Alexa users can build customized skills and then distribute and publish them using Alexa Blueprints. Although this can be a convenient feature to work with, these skills, like babysitting or even individual tests, can include sensitive data about you or another person.

If you want to develop a skill, we recommend outlining it first and thinking it all the way through to ensure that you won’t share too much of your private information. Evaluate the skill before you make it public and share it with people. Steer clear of comments in babysitter skills like, “Susie just turned 1 on May 5, so she’s not sleeping through the night yet,” and instead say, “The baby isn’t sleeping through the night yet.” In quizzes, avoid including questions like, “When is Aunt Jen’s birthday?” or “What is Uncle Bill’s middle name?” Try your best to keep all your questions and answers vague and general, so you don't spread or track other people's information.