Glossary

The shorter name is content recognition. In Finnish, the same feature is called sisällöntunnistus.

Look for it near the guest network settings. It may also appear as device isolation, or as asiakaseristys on a menu written in Finnish.

An unpatched security flaw or a shared default password can give a criminal access to a device at home.

A compromise may not be obvious during ordinary use. Unusual network traffic or faults can still reveal it.

Bottiverkko and botnet mean the same thing.

Do not buy a product that should carry a CE marking but does not. Not every product should carry one. The marking does not compare product quality or support periods.

Security requirements apply to certain radio equipment placed on the EU market from 1 August 2025. You will therefore see only a limited effect on products that entered the market before that date.

The setting may be under the guest-network or wireless-network settings. Its name varies by manufacturer.

Client isolation can break local control or automatic device discovery. Use it only when devices on the same network do not need to communicate with one another.

Cloud-storage security depends on account protection, operation of the service and retention settings.

Check who can access the data, how to delete it and what happens when the subscription ends.

In the Samsung and LG models tested by researchers, recognition also covered pictures from devices connected by HDMI. That result does not describe every smart television.

The feature’s name and default vary. Check your model’s instructions to find where to switch it off and whether that choice also affects other optional features.

The Finnish name is kyberkestävyyssäädös.

In practice it means the manufacturer has to tell you how long the product will be supported.

Default passwords are published online in model-by-model lists. Change a shared default password during setup.

Newer devices increasingly ship with a unique password on a label underneath. It is still worth changing if the device lets you.

It is why a new device gets online without anybody setting numbers by hand.

The router settings list devices that have received an address. The list may also contain devices connected earlier, and their names may be unclear.

A DNS query tells the resolver which domain a device or app is trying to look up. It does not usually reveal the exact page, and one query does not prove that you opened the site.

A device often uses the resolver supplied by the network or internet provider. A browser, operating system, VPN or your own setting may choose another service instead.

Encrypted DNS, such as DoH or DoT, encrypts queries between your device and the selected resolver. The network in between cannot read them directly, but the resolver operator still processes them.

By default your router’s firewall blocks connections coming in from outside. Traffic going out from inside passes through.

A device can therefore start a connection to the manufacturer’s servers without the firewall blocking it. A firewall alone does not stop a smart device from sending data to the internet.

Some devices update automatically. Others must be updated manually from the settings.

Once the manufacturer stops shipping updates, newly found holes may remain unpatched. Settings can reduce exposure, but they do not repair the software.

Many routers include a guest-network setting. Check separately that access to the local network is not allowed for guests.

A router can build the boundary with a separate IP network and firewall rules. A system with several access points may also carry guest traffic inside its own VLAN.

The browser shows connection status beside the address and warns when a connection is not private. Do not dismiss that warning on a sign-in or payment page.

Encryption protects content, but not necessarily every connection detail. Check the site address too: HTTPS can protect a connection to a genuine site or to a scam site.

The term does not tell you a device’s price, features or support period.

The outward-facing address gives away roughly the city and the internet provider. It does not give away your name or your street.

A web service sees the IP address that connects to it.

If the settings offer something called laiteohjelmiston päivitys, that is where updates get installed.

Android 10 and later and current Apple devices use a private address on Wi-Fi networks. This reduces tracking from one network to another.

Your router may therefore show a familiar phone as a new device. Normally leave the private address enabled and first check whether the router recognises the phone by that address.

Restricting access by this address is not a security measure. The address can be changed in software.

Malware can arrive in an attachment or an installation. A scammer may ask you to install it over the phone or in a message.

Your operating system’s own protection and its updates cover a large part of this.

NAT makes a direct outside connection to an individual IPv4 device harder. With IPv6, a device may have its own public address.

A router’s stateful firewall blocks unsolicited incoming connections on both IPv4 and IPv6, unless a setting has created an exception.

A passkey is bound to the real service domain. A phishing page therefore cannot use it like a password or a manually entered code.

Passkeys use the FIDO2 family of standards. Websites access them through the WebAuthn API, but FIDO2 and WebAuthn are not other names for a passkey.

Add a second passkey or another recovery method to an important account. Keep the recovery codes provided by the service too.

A password manager creates and stores different passwords for your accounts. You protect the manager itself with one strong password.

A paid version is mainly worth it when passwords have to be shared within a family.

The markers are urgency, fear and a request to do something right now. The language can be flawless and the number can look right.

Do not use the link or number in the message. Open the service’s own app or website yourself and check there.

Port forwarding can be used for remote access to a camera or recorder. It also makes the service directly reachable from the internet.

Open a port only when you know which service needs it and how the connection is protected.

The programs themselves are legal and useful. The problem is who is asking, and why.

If you opened access for a scammer, disconnect the computer and close the software. Change any credentials exposed during the session from another device.

In most homes the same box handles the connection, the wifi and the routing. The internet provider has often supplied it with the contract.

A modem, router and wireless access point are different functions even when one device performs all three. In bridge mode, a device can stop routing while it continues to pass the connection on.

The router directs traffic between the home network and the internet. Its updates, password and remote-management settings therefore affect the whole home network.

You can change the name freely. It is neither a secret nor a protection.

Hiding the name does not make the network safer. The password and the encryption are what decide that.

A code from an app is safer than a text message, because a phone number can be hijacked. A text message is still far better than nothing.

A passkey can replace both the password and code. It is therefore not always the second factor in two-factor authentication.

The support period helps you assess the device’s secure working life. You may need to find it on the manufacturer’s support site.

If the manufacturer does not state the support period, you cannot assess the availability of future fixes before buying.

A VLAN tag tells network equipment which logical network the traffic belongs to. An ordinary end device does not usually handle the tag itself.

A VLAN separates traffic at the switching layer. A router can still forward traffic between VLANs, so firewall rules decide which connections are allowed.

The term originally meant a remote connection into a company’s internal network. The VPN sold to consumers is a different product with the same name.

Choose a strong password and AES if the router shows the cipher as a separate setting.

Avoid WPA/WPA2 mixed mode and any setting with TKIP in its name. WEP and open networks are outdated too.

It only works if both the router and the device support it. Many older devices do not.

Most routers have a mixed mode, where new devices use the new method and old ones use the old.