VerkkorauhaSuomeksi. Lue tämä sivu suomeksi

Glossary

Short definitions for terms used in connected devices, security and consumer guidance. Alternative names help you recognise the same subject in different instructions.

35 words

A

ACR

Short for automatic content recognition, a smart television feature that works out what you are watching.

The shorter name is content recognition. In Finnish, the same feature is called sisällöntunnistus.

Also known as: content recognition, automatic content recognition, sisällöntunnistus

AP isolation

The same setting as client isolation. Manufacturers label it differently, and this is one of the labels you will meet most often.

Look for it near the guest network settings. It may also appear as device isolation, or as asiakaseristys on a menu written in Finnish.

Also known as: client isolation, device isolation, asiakaseristys, AP-eristys

B

Botnet

A crowd of broken-into devices, run from one place without their owners knowing. They are used for attacks and for covering the tracks of other crimes.

An unpatched security flaw or a shared default password can give a criminal access to a device at home.

A compromise may not be obvious during ordinary use. Unusual network traffic or faults can still reveal it.

Also known as: bottiverkko, bottiverkosto, zombie network

Bottiverkko

The Finnish word for a botnet. It is the word you will meet in Finnish news reports and on Finnish-language pages.

Bottiverkko and botnet mean the same thing.

Also known as: botnet, bottiverkosto

C

CE marking

The manufacturer's own declaration that a product meets EU requirements. It is not a security test, and nobody outside the company issued it.

The marking is compulsory, and a product without one is a serious warning sign. A product with one tells you almost nothing about quality.

Radio equipment has had to meet security requirements since 1 August 2025, and those requirements sit under this marking. You will only see the effect in new devices.

Also known as: CE, CE mark, CE-merkintä

Client isolation

A router setting that stops devices on the same network from seeing each other. Every device still reaches the internet, just not the device next to it.

The setting may be under the guest-network or wireless-network settings. Its name varies by manufacturer.

This does not stop a device sending data to the internet. It restricts connections to other devices on the same network.

Also known as: AP isolation, device isolation, asiakaseristys, AP-eristys

Cloud service

A remote service operated by a provider, where a device can store data over the internet.

Cloud-storage security depends on account protection, operation of the service and retention settings.

Check who can access the data, how to delete it and what happens when the subscription ends.

Also known as: the cloud, cloud storage

Content recognition

A smart television feature that works out what is on the screen and sends that to the manufacturer for advertising. It covers anything plugged into the television's HDMI socket as well.

The default and the name of the feature vary by manufacturer. You can switch it off in the television’s settings.

Switching it off stops the television recognising screen content for this purpose. Check the manual to see whether the same setting affects recommendations or other optional features.

Also known as: ACR, automatic content recognition, sisällöntunnistus, viewing data collection

CRA

Short for the Cyber Resilience Act, the EU regulation that sets security requirements for digital products. It applies in full from 11 December 2027.

The Finnish name is kyberkestävyyssäädös.

Also known as: Cyber Resilience Act, kyberkestävyyssäädös

Cyber Resilience Act

An EU regulation that sets security requirements for digital products across their whole life, updates included. It applies in full from 11 December 2027.

In practice it means the manufacturer has to tell you how long the product will be supported.

It is also why the old advice to look for the Finnish Tietoturvamerkki label on the box no longer holds.

Also known as: CRA, kyberkestävyyssäädös

D

Default password

The password a device comes with from the factory. If it is the same on every unit of that model, it is not a password, it is public knowledge.

Default passwords are published on the internet in model-by-model lists. Large criminal networks of devices have been built on exactly that.

Newer devices increasingly ship with a unique password on a label underneath. It is still worth changing if the device lets you.

Also known as: factory password, factory setting

DHCP

The router feature that hands out network addresses to devices by itself, as they join the network.

It is why a new device gets online without anybody setting numbers by hand.

The router settings list devices that have received an address. The list may also contain devices connected earlier, and their names may be unclear.

Also known as: automatic address assignment, automaattinen osoitteenjako

DNS

The service that turns a web address into the numbers a browser needs to find the right server. It is the phone book of the internet.

By default your queries go to your internet provider. That is how the provider knows which sites you visit, even though what is on those sites is encrypted.

You can point the lookups somewhere else. That hands the same information to a different company; it does not make the information go away.

Also known as: name service, domain name system, nimipalvelu

F

Firewall

A set of rules that decides what traffic gets into and out of a network. Your home router has one switched on already.

By default your router’s firewall blocks connections coming in from outside. Traffic going out from inside passes through.

A device can therefore start a connection to the manufacturer’s servers without the firewall blocking it. A firewall alone does not stop a smart device from sending data to the internet.

Also known as: packet filter

Firmware

The software inside a device that makes it work. When the manufacturer closes a security hole, the fix arrives as a firmware update.

Some devices update themselves. Others wait for somebody to press a button.

Once the manufacturer stops shipping updates, newly found holes may remain unpatched. Settings can reduce exposure, but they do not repair the software.

Also known as: laiteohjelmisto, device software, firmware update

G

Guest network

A second wifi network on your router that reaches the internet but not the other devices in your home. It is a free way to keep smart devices apart from your computers and phones.

Most current routers already have one, and it takes a few minutes in the settings to switch on.

A guest network does not protect the device itself. It limits the damage to the one device that turns out to be insecure.

Also known as: guest wifi, visitor network

H

HTTPS

An encrypted connection between your browser and a website. It makes the connection's contents harder to read or alter in transit, but it does not prove that the site is trustworthy.

The browser shows connection status beside the address and warns when a connection is not private. Do not dismiss that warning on a sign-in or payment page.

Encryption protects content, but not necessarily every connection detail. Check the site address too: HTTPS can protect a connection to a genuine site or to a scam site.

Also known as: encrypted connection, SSL, TLS

I

IoT

The umbrella name for everyday things that are connected to the internet: cameras, bulbs, plugs, vacuums, televisions. The letters stand for internet of things.

Two things link these devices. They are cheap, and they are online all the time.

That is why how long they get updates matters more than what features they have.

Also known as: internet of things, smart device, connected device

IP address

The string of numbers that says where on the network traffic should be delivered. The devices in your home have their own internal addresses, and your connection has one that faces outwards.

The outward-facing address gives away roughly the city and the internet provider. It does not give away your name or your street.

The address is not a secret. Every site you visit sees it, unavoidably.

Also known as: network address, IP

L

Laiteohjelmisto

The Finnish word for firmware. It turns up in a device's settings menu whenever that menu is in Finnish.

If the settings offer something called laiteohjelmiston päivitys, that is where updates get installed.

Also known as: firmware, laiteohjelmiston päivitys

M

MAC address

An identifier for a network interface that is visible on the local network. A router uses it to tell devices apart, but a phone can use different identifiers on different wifi networks.

Many phones use a private address on each wifi network. This reduces tracking from one network to another.

Restricting access by this address is not a security measure. The address can be changed in software.

Also known as: hardware address, physical address

Malware

Software built to damage, to spy or to extort. It usually reaches a computer because somebody installed it, not on its own.

The commonest way in is an attachment, or an installation somebody asked you to run over the phone or in a message.

Your operating system’s own protection and its updates cover a large part of this.

Also known as: virus, ransomware, haittaohjelma

N

NAT

The technique that lets many devices in a home share one outward-facing address. As a side effect, somebody outside cannot reach an individual device directly.

This is not a firewall, even though it looks like one. It was not designed as protection.

The protection disappears if a port is opened to the device, or if the device opens a connection outwards itself.

Also known as: network address translation

P

Password manager

A program that remembers your passwords for you and makes new ones. Your browser has one built in, and you do not have to pay for it.

A password manager creates and stores different passwords for your accounts. You protect the manager itself with one strong password.

A paid version is mainly worth it when passwords have to be shared within a family.

Also known as: password vault, password app

Phishing

A message or a call that claims to be your bank, an authority or a service you use, and tries to get you to hand over your credentials or to pay.

The markers are urgency, fear and a request to do something right now. The language can be flawless and the number can look right.

Do not use the link or number in the message. Open the service’s own app or website yourself and check there.

Also known as: scam message, fraudulent message

Port

A number that says which service on a device a piece of traffic belongs to. Opening a port on your router lets somebody outside reach that service directly.

Port forwarding can be used for remote access to a camera or recorder. It also makes the service directly reachable from the internet.

If you do not know that you opened a port, do not open one on the strength of instructions you do not understand.

Also known as: port forwarding

R

Remote access

Software that lets another person watch your screen and use your computer as if they were sitting at it. Do not open a connection because of an unexpected call or message.

The programs themselves are legal and useful. The problem is who is asking, and why.

If you opened access for a scammer, disconnect the computer and close the software. Change any credentials exposed during the session from another device.

Also known as: remote support, remote control, etäyhteys, etätuki

Router

The box that shares your internet connection with the rest of your devices and decides what traffic goes where. It is your home network's door to the outside world.

In most homes the same box handles the connection, the wifi and the routing. The internet provider has often supplied it with the contract.

The router directs traffic between the home network and the internet. Its updates, password and remote-management settings therefore affect the whole home network.

Also known as: modem, access point, wifi box

S

SSID

The name of a wifi network, as it appears in the list of networks on your devices.

You can change the name freely. It is neither a secret nor a protection.

Hiding the name does not make the network safer. The password and the encryption are what decide that.

Also known as: network name, wifi name

T

Two-factor authentication

A login that needs one more thing besides the password: a code from an app, a text message or a physical key. A leaked password alone is then not enough to get in.

A code from an app is safer than a text message, because a phone number can be hijacked. A text message is still far better than nothing.

Turn it on for your email first. Many other account passwords can be reset through it.

Also known as: 2FA, MFA, multi-factor authentication, two-step verification

U

Update support

The period for which the manufacturer promises to fix the device's security holes. When support ends, the holes that are found stay in the device permanently.

The support period helps you assess the device’s secure working life. You may need to find it on the manufacturer’s support site.

If the manufacturer does not state the support period, you cannot assess the availability of future fixes before buying.

Also known as: support period, end of life, security updates

V

VLAN

A way of splitting one physical network into several separate networks that cannot see each other. It is the same idea as a guest network, with finer control.

A VLAN needs a router or a switch that supports it. Not every home device does.

For most people a guest network is enough. A VLAN exists for those who want finer control, not because a guest network falls short.

Also known as: virtual LAN, tagged network

VPN

A service that routes your internet traffic through another company's server first. It does not make the traffic safer; it moves your trust from your internet provider to that company.

The term originally meant a remote connection into a company’s internal network. The VPN sold to consumers is a different product with the same name.

Also known as: virtual private network, VPN service, VPN tunnel

W

WPA2

A wifi encryption method, in use since 2004, and still adequate with a strong password.

If your router offers a newer option, use it. If it does not, this is not a reason to replace the device.

Older WEP is a different matter. It is broken and should not be used.

Also known as: wifi encryption, WPA2-PSK

WPA3

The newer version of wifi encryption, which protects a weak password better than its predecessor did.

It only works if both the router and the device support it. Many older devices do not.

Most routers have a mixed mode, where new devices use the new method and old ones use the old.

Also known as: wifi encryption, WPA3-SAE

Checked