Practical checks for your accounts, Wi-Fi, connected devices and security system. Explore VPN types and safer remote access. For households and small businesses in Perth and WA.
Expanded · Homes and small businesses
What would you like help with?
Choose your situation. Start with three checks, then explore the advice below.
The complete guide
Explore all 18 topics.
Browse practical advice for accounts, devices and security equipment.
Personal VPNs · public IP addresses
Proton VPN, Surfshark and similar VPN apps
VPN means Virtual Private Network. Services such as Proton VPN and Surfshark create an encrypted tunnel between your device and a provider-operated VPN server. Websites receiving traffic through that server see its public IP address—the internet-facing address of the connection.
Selecting a VPN location in another country can therefore change the country websites associate with your connection. This applies to traffic routed through the VPN; it does not change your device’s physical location.
Your devicePerth, Australia
You stay here.
VPN connectionUK VPN server
Traffic travels through the encrypted tunnel.
What the website seesA UK public IP address
It may estimate your location as the UK.
Your phone’s GPS still places you in Perth. A signed-in account or location permission can also identify you separately from the VPN’s IP address.
Explain VPNs and overseas IP addresses · step by step
Your public IP address is the internet address websites see when your connection reaches them. Without a VPN, this is normally associated with your internet or mobile provider. With a personal VPN, the traffic goes through the VPN provider first, so the website sees the VPN server’s address instead. The tunnel is the encrypted connection to that server; egress means where the traffic comes out.
Step by step
Decide whether you want a personal VPN for internet use or access to your own equipment. These are different tasks.
Check the provider’s supported devices, privacy information and plan limits, then install its official app.
Set up and protect the account using its supported sign-in options. Follow the provider’s prompts to connect.
If your plan supports location selection, choose a country—for example, the United Kingdom—and connect. A nearby server may offer a shorter network path; a distant server can add delay.
Use the provider’s IP-check tool to compare the public address before and after connecting. The address should reflect the VPN connection for that browser’s traffic. Check whether any apps or traffic are excluded.
Test the sites you use and learn how the app behaves if the VPN disconnects. Keep normal updates and account protection enabled.
More privacy on the connection. A correctly configured VPN limits what the local Wi-Fi operator or internet provider can see about traffic inside the tunnel. They can still see that you are connecting to a VPN. HTTPS remains important for protecting website traffic beyond the VPN server.
A different internet exit point. For example, you can be sitting in Perth while a website sees a UK VPN address. It may show a UK location or localised content based on that IP. Location databases can be inaccurate, and sites may also use account or device information, so a VPN does not guarantee that every service will show the chosen country.
Trade-offs and limits. You are trusting the VPN provider with your connection. Speed, device support, privacy practices and plan limits vary. Signed-in accounts and cookies can still identify you, and a VPN does not make scam websites safe or replace device updates and strong account protection.
Accessing your equipment is a different task. A remote-access VPN connects you to an approved home or business network. A personal VPN subscription on its own does not create that connection to your NVR. Manufacturer apps such as DMSS also have their own access methods and permissions.
Check the result: You know which traffic uses the VPN and can confirm it through the provider’s supported checks. Do not test it by visiting unsafe websites.
Review sign-in protection and recovery for your main email.Read the steps
Replace reused passwords on important accounts.Read the steps
Check supported updates on your phone and computer.Read the steps
01
Software patching and support lifecycle
Operating-system and application patches remediate known vulnerabilities and compatibility defects. Apply supported updates, complete required restarts and monitor end-of-support dates; embedded-device firmware requires a separate maintenance process.
For cameras, alarms and other installed security equipment, follow the manufacturer’s firmware instructions or ask West Protect before updating. Plan a replacement when a device no longer receives supported updates.
Explain in plain English · step by step
What this means
An update replaces parts of the software your device runs. Some changes fix faults; others close security weaknesses. A downloaded update may still need a restart before it is active. Your phone, its apps and your security recorder can each have their own update process.
Step by step
Identify what you are updating: the phone or computer itself, an app, or installed equipment such as a recorder. Use the appropriate instructions for that item.
Save open work and make sure important files are backed up. Connect portable equipment to power and allow time for the update to finish.
Open the device’s own settings and find its software-update section. Use the official app store or application update menu for apps, rather than links in unexpected messages.
Install the supported updates and restart if requested. Enable automatic updates where suitable for that device.
Reopen the update screen and check whether further updates or another restart are required. Open the applications you depend on.
Check whether the manufacturer still supports the device. If support has ended, plan a suitable replacement or obtain advice about managing its continued use.
For example
Before starting work, your laptop offers a restart to finish an update. Save your work and allow it to complete; plan an equipment update separately if it could interrupt recording.
Check the result
The update screen shows the expected installed version or completion status, no required restart is outstanding, and your important applications still work.
MFA combines independent authentication factors, such as knowledge of a password and possession of an authenticator or security key. Factor selection, enrolment, recovery and session revocation determine the effectiveness of the control.
Available authentication methods vary by service. Only approve sign-in prompts for activity you initiated.
Explain in plain English · step by step
What this means
MFA adds another way to prove it is you when signing in. For example, knowing your password may not be enough: the service can also require your security key or a code from your phone. Two different passwords do not count as two different types of proof. Recovery is how you regain access if your usual method is unavailable.
Step by step
Start with your main email account because other services may send password-reset messages there. Then work through your other important accounts.
Open the service directly using its official app or a trusted address. Find Security, Sign-in or a similarly named settings area.
Choose a supported authentication method and follow the enrolment instructions. If a security key is supported, check compatibility before relying on it.
Save recovery codes in a protected place you can reach without the device you might lose. Register a backup method where the service permits it.
Test a new sign-in while you still have access to the account. Complete only the authentication request you initiated.
Before replacing a phone or key, add and test the replacement. Remove the old method only when the new method and recovery arrangement are working.
For example
You replace your phone. Transfer your sign-in method and test it before erasing the old phone, so your email and supported accounts remain accessible.
Check the result
A fresh sign-in requests the intended protection, and you know how to recover access without sharing your codes or password.
Passkeys use public-key credentials bound to the relying service, providing phishing-resistant authentication. Credentials may be synchronised by a provider or remain device-bound; local user verification and recovery options depend on the implementation.
For work accounts, follow your workplace IT instructions. Supported methods, synchronisation and recovery vary by account provider and device.
Explain in plain English · step by step
What this means
A passkey lets your device prove it holds the correct digital key for a website. You normally approve this by unlocking your device or using a compatible physical security key. Your fingerprint or face is not sent to the website as a password. Some passkeys are available on your other devices through a protected account; others stay on one device or key.
Step by step
Open the account’s security settings and check whether it supports passkeys. Read which devices or security keys it accepts.
Decide where you want the passkey stored: on a supported device, in a compatible password manager or on a physical key.
Create the passkey using the service’s own prompts. Use a device or key you control, not a shared or borrowed computer’s saved credential.
If you use physical keys, register a second compatible key when supported. Give each key a recognisable name and store the spare separately.
Test signing in using the passkey. If you registered a spare key, test that separately too.
Check how account recovery works and whether the passkey will be available on a replacement device before erasing or replacing anything.
Where your passkey is stored
Some passkeys are shared between your devices through a password manager. Others stay on one device or physical key. Check which arrangement you are using so you know how to sign in from another device.
Do you need a separate security key?
You can often use a passkey on your phone or computer without buying a separate key. A physical key is another option for compatible accounts or workplace requirements. If you choose physical keys, register a second compatible key as a backup and keep it separately.
For example
You sign in to a supported account by unlocking your own phone. Before replacing it, check whether that passkey syncs to another device or needs a separate recovery method.
Check the result
The passkey works in a new sign-in, you know where it is stored, and any backup key or supported recovery method has been checked.
Backups provide recoverable copies distinct from production data. Define backup frequency, version retention and recovery requirements, then validate restoration. File synchronisation and a recorder’s rolling retention are not equivalent to an independent backup.
Cloud synchronisation is not always a separate backup. Check version history and deleted-file recovery. Disconnect a removable backup drive after use.
Explain in plain English · step by step
What this means
A backup is a spare copy you can recover when the original is missing, damaged or changed by mistake. Frequency means how often you make a copy. Retention means how long old copies remain available. A folder that syncs between devices may also copy an accidental deletion, so check whether it can restore older versions.
Step by step
List the files you would need if this device stopped working, such as documents, customer records and important photos.
Choose a separate backup location and check which files it includes. Protect the backup account or drive as carefully as the originals.
Set a copying schedule that matches how often your files change. Check how long deleted files and older versions remain recoverable.
Run a backup and check its completion report. Do not assume that connecting a drive or enabling sync has copied everything.
Restore one non-critical sample file to a separate folder. Open the restored copy and compare it with the expected file, leaving the original untouched.
If using a removable backup drive, disconnect it after the backup finishes and store it appropriately. Repeat the restore check when your setup changes.
For example
A document is deleted accidentally. A tested backup or retained earlier version lets you restore it; a synchronised folder may copy the deletion too.
Check the result
A sample file can be restored and opened, and you know the age of the latest usable copy and where it is kept.
Unique credentials limit the impact of password reuse across services. A password manager supports credential generation and storage; protect the vault’s authentication and recovery paths. Use supported passkeys where appropriate.
Keep multi-factor authentication (MFA) enabled where available and follow the account provider’s password requirements.
Explain in plain English · step by step
What this means
If two accounts share one password, a stolen password may put both at risk. A password manager remembers a different password for each account so you do not have to. Its vault is the protected collection of saved sign-ins. A passphrase is a longer password made from several words; it must still be unique.
Step by step
Choose a supported password manager and set up its own strong sign-in, additional authentication and recovery options.
Start with your main email and other important accounts. Open each service directly and find its password-change settings.
Have the manager generate a unique password that meets that service’s requirements. Save it against the correct website and account name.
Complete the change on the service, then check that the manager saved the new password rather than only the old one.
Test signing in before moving on. Keep a working recovery route while making changes.
Work through remaining reused passwords over time. Do not put passwords into ordinary notes, enquiries or shared spreadsheets.
For example
You use different passwords for email and online shopping. If the shop reports an exposed password, that same password will not unlock your email.
Check the result
Each reviewed account has its own working credential, and the manager’s recovery method is stored securely.
Device locking restricts local access; application permissions govern access to sensors and data. Maintain the operating system, review app privileges and protect account-recovery channels on phones used to administer security systems.
Before selling or giving away a phone, back it up and follow the manufacturer’s reset instructions to remove your accounts and personal information.
Explain in plain English · step by step
What this means
Your phone may hold email, saved sign-ins and access to cameras or doors. Its screen lock protects access to the device. App permissions decide whether a particular app may use the camera, microphone or other information. Removing a permission can stop a useful feature, so review the reason for it rather than switching everything off.
Step by step
Open the phone’s security settings and check that a screen lock is enabled. Choose an automatic locking delay appropriate to how you use the phone.
Install supported phone and app updates through the normal settings or official app store.
Open the privacy or permission settings and review which apps can use sensitive features. Menu names differ between phone models.
For each permission, check whether it supports a feature you use. For example, a video-intercom app may need the microphone for two-way conversation.
Remove permissions that are unnecessary, then test the affected app. Restore only the access required for an intended feature.
Before changing phones, verify backups and account recovery, transfer authentication methods and test the new phone before erasing the old one.
For example
An intercom app needs microphone access for a visitor call. Allow the permission for that task and review other permissions against the features you actually use.
Check the result
The phone locks as intended and essential notifications, camera viewing and authorised intercom features still operate after the review.
Phishing, impersonation and payment-redirection attacks exploit trust in messages, identities or workflows. Verify sensitive requests through an independently established channel before disclosing credentials, granting access or changing payment details.
If you have already made an unintended payment or disclosed banking details, contact your bank promptly. Official recovery resources are linked below.
Explain in plain English · step by step
What this means
A convincing name, logo or message does not prove the sender is genuine. Independent verification means checking through a contact method you already trust, rather than the phone number or link in the request. This is useful when someone asks for a payment change, login code, software installation or urgent access.
Step by step
Pause before acting on an unexpected request, particularly one involving money, sign-ins, access or urgency.
Leave the message’s links and attachments alone while you check. Do not provide a code or approve a sign-in you did not start.
Find a trusted contact route from your existing records, the organisation’s official app or a website address you already know.
Contact the organisation through that route and ask it to confirm the specific request. For payment changes, verify the new details before using them.
Proceed only after the request is independently confirmed. If it cannot be confirmed, stop and use the organisation’s official reporting process.
If you have already paid or disclosed banking details, contact your bank promptly through its official channel. Follow official recovery advice for any affected accounts.
For example
An invoice arrives with changed bank details. Call the business using a number already in your records before making the payment.
Check the result
The request has been confirmed independently; the original message’s appearance was not the only reason you trusted it.
Virtual private networks establish encrypted tunnels between endpoints. Personal, remote-access, site-to-site and mesh topologies serve different purposes. WireGuard, OpenVPN and IKEv2/IPsec are protocol choices; full or split tunnelling determines route coverage.
A VPN does not prevent scams, remove malware or make an account secure. A personal subscription does not provide access to your workplace, guarantee anonymity or change your device’s GPS location.
Explain in plain English · step by step
What this means
A VPN creates a protected connection between two points. What matters first is where that connection ends. A personal VPN sends traffic through a provider’s server. A remote-access VPN connects you to your own approved network. The protocol is the set of rules used to make the connection; routing decides which traffic goes through it.
Step by step
Write down your goal: browsing through a VPN provider, reaching your own recorder, connecting business premises or linking approved devices.
Use the comparisons below to choose the connection type that matches that goal. A personal subscription alone will not connect you to your NVR.
Check the supported router, phone and computer requirements. For business or equipment access, have the network administrator confirm the permitted connections.
Use the provider’s official setup instructions and protect the account. Check how a lost device’s access can be removed.
Check whether all internet traffic or only selected destinations should use the VPN. Follow workplace requirements rather than guessing this setting.
Test from outside the premises. Confirm the intended website or private device is reachable, then disconnect and check the expected behaviour. Keep normal updates, backups and account protection in place.
For example
You are in Perth and connect to a UK VPN server. A website receiving your traffic through that server sees its UK public IP address and may estimate you are in the UK. Your device remains in Perth; GPS, account information and IP-location databases can give different location results.
Check the result
You can explain what the VPN connects, which traffic it carries and how to revoke access; the intended connection has been tested.
Four common ways to use a VPN
Personal or commercial VPN
A client-to-provider tunnel carries selected device traffic to an internet egress server. Destination services generally observe the egress IP address rather than the client connection’s public address.
Plain English · benefits and steps
This is the type of service offered by Proton VPN and Surfshark. Your app connects to a server belonging to the provider, which passes your traffic on to websites. The encrypted part of the VPN connection runs between your device and that server.
Benefit
It adds privacy to traffic inside the tunnel. Connecting through a UK VPN location, for example, can make websites see a UK IP address while you remain in Perth.
Trade-off
You trust the provider. Signed-in accounts and cookies can still identify you. This does not automatically connect you to your home cameras.
Step by step
Choose a service that supports your device and review its privacy information and plan limits. Install its official app.
Protect the VPN account, then use the app to select a server and connect. Follow the provider’s instructions for connection settings.
Use the provider’s connection check and confirm normal browsing works. Check which apps or traffic are excluded from the tunnel.
Disconnect when appropriate and understand what happens if the connection drops. Continue to use HTTPS, updates and strong account sign-ins.
Check the result: The app reports the intended connection and its supported diagnostic confirms that the traffic you expect is using it.
Remote-access VPN
An authenticated client tunnel terminates at a private-network gateway. Routing and firewall policy constrain access to approved internal services; gateway and endpoint maintenance remain necessary.
Plain English · benefits and steps
Your phone or laptop connects back to an approved home or business network. This can let you reach a recorder or file service as permitted by the network owner, without making that internal service directly available to everyone on the internet.
Benefit
Provides controlled access to private equipment while you are away.
Trade-off
The gateway must be supported and maintained. Network access must be limited to what the user needs.
Step by step
Identify the equipment or service you need and ask the authorised network administrator which remote-access setup it supports.
Have the administrator create the permitted access and provide the supported connection instructions. Do not copy gateway settings from an unrelated network.
Install the official client or approved profile and configure the supported sign-in protection. Keep connection files private.
Test from mobile data or another external network: check the intended service works, then confirm how to disconnect and revoke a lost device’s access.
Check the result: The approved user can reach the required service from outside the premises, with only the intended permissions.
Site-to-site VPN
Gateway-to-gateway tunnelling links approved network prefixes at separate sites. Address planning, route selection and inter-site firewall policy define reachable services independently of the tunnel’s encryption.
Plain English · benefits and steps
Two premises have network equipment that maintains a connection between them. For example, selected devices at an office can reach a service at a warehouse. The link is managed by the gateways, so each camera does not need its own VPN app.
Benefit
Provides an ongoing connection between the locations for approved services.
Trade-off
Compatible gateways, address planning and rules are needed. Connecting the sites should not open every device to the other location.
Step by step
List the two sites and the exact services that need to communicate. Note who is authorised to use them.
Have the administrator check gateway compatibility, network addresses and the required traffic rules before configuration.
Arrange a suitable change window and a way to restore the previous setup. Let the administrator configure the supported tunnel and access rules.
Test required connections in each intended direction and check that unrelated access remains blocked. Record who will maintain the link.
Check the result: Approved services communicate between sites, and the connection does not grant broader access than planned.
Mesh or overlay VPN
An overlay joins enrolled endpoints using encrypted connectivity and an identity or control layer. Access policy governs peer communication; a subnet router may provide access to devices that cannot run the client.
Plain English · benefits and steps
A platform such as Tailscale creates a private network between approved devices over their existing internet connections. A supported device can act as a bridge to equipment, such as an NVR, that cannot run the VPN app itself.
Benefit
Can simplify connecting approved devices across different networks.
Trade-off
Provider features, management requirements and fees vary. Adding a device is not the same as restricting what it can reach.
Step by step
Identify the users and devices that need access and check the platform’s supported hardware and plans.
Protect the administrator account and enrol only the intended devices using the provider’s instructions.
If the equipment cannot run the client, have the administrator configure a supported subnet router and limit the equipment it exposes.
Test access as an ordinary approved user. Check that unauthorised access fails and learn how to remove a lost or retired device.
Check the result: Only intended devices are enrolled, permissions match the plan and any bridge to local equipment is explicitly controlled.
Protocols: how the tunnel works
Protocol selection is separate from network topology and access policy. Use a supported implementation and maintain its configuration; a protocol name alone is not a security rating.
WireGuard
A public-key VPN protocol using UDP. Peer configuration and key distribution are separate from the protocol; identity management and MFA require a supporting implementation or management layer.
Plain English · how to use it
WireGuard is one method the VPN software uses to create the protected connection. Its keys identify the devices at each end. It does not, on its own, supply a complete user-account or MFA system.
Step by step
Check that your approved VPN service or gateway supports WireGuard on the devices you use.
Use its official app or administrator-supplied setup. Treat exported configurations and private keys as secret.
Test the required destinations and confirm how the platform removes access when a device is lost.
Check the result: The tunnel works through the supported setup, and access management is understood separately from the protocol name.
OpenVPN
A TLS-based VPN with UDP or TCP transport and certificate or supported authentication integrations. Security and performance depend on configuration, endpoint capacity and network conditions.
Plain English · how to use it
OpenVPN is another method for making the protected connection. Certificates are digital credentials used to identify the connection’s participants. A profile is a settings file that tells the app how to connect; it can contain sensitive information.
Step by step
Obtain the official client and approved profile from the service or authorised administrator.
Follow the supplied authentication instructions. Do not switch transport settings or disable certificate checks to get around an error.
Connect and test the intended resources. If it fails, record the error without sharing the profile’s secrets and contact the provider.
Check the result: The approved profile connects with certificate checks intact and the intended services are reachable.
IKEv2/IPsec
IKEv2 negotiates authentication and security associations; IPsec protects traffic. Both peers need compatible authentication, cryptographic policy and routing configuration.
Plain English · how to use it
These two technologies work together: IKEv2 agrees how the connection will be secured, and IPsec protects the traffic. Both ends must agree on the required settings, so selecting the name alone does not create a working VPN.
Step by step
Confirm that your device and the approved VPN gateway support this connection method.
Use the profile and credentials supplied by the provider or administrator. Follow its certificate and server-identity instructions.
Test the required connection from the network you will actually use. Report errors rather than weakening the security settings.
Check the result: Both ends accept the approved configuration and the required destination is reachable.
Full tunnel or split tunnel?
Full tunnel
Default internet routes are directed through the VPN gateway. DNS and IPv6 coverage must be validated against the implementation; gateway capacity and policy affect the resulting connection.
Plain English · what to check
The setup is intended to send ordinary internet traffic through the VPN as well as traffic for private resources. This can let a business apply its internet controls, but it adds traffic to the gateway and may affect speed.
Step by step
Confirm that your workplace or provider intends all relevant internet traffic to use the VPN.
Use the approved full-tunnel profile. Ask the administrator to verify coverage for DNS lookups and both supported IP versions.
Test normal browsing and private resources using the provider’s supported checks, including the expected behaviour after disconnection.
Check the result: The intended traffic uses the VPN; a connected status alone has not been treated as proof of complete coverage.
Split tunnel
Only configured destination routes or applications traverse the VPN. Other traffic uses the endpoint’s normal internet path and does not inherit the VPN gateway’s filtering or access policy.
Plain English · what to check
Some traffic takes the VPN connection and other traffic goes directly to the internet. For example, access to your office recorder can use the VPN while other browsing uses your home connection. The bypassed traffic is outside the VPN’s protection.
Step by step
Identify which private services or applications must use the VPN and check that split tunnelling is permitted by your workplace.
Use the approved route or app settings. Do not exclude work applications simply to solve a connection error.
Test both a required private destination and ordinary browsing. Confirm with the administrator which path each should use.
Check the result: The traffic that needs the VPN uses it, and you understand which traffic remains outside it.
Apply least-privilege permissions to device accounts and supported cloud-sharing roles. Distinguish administrative configuration, live view and playback access; review ownership, shared users and enrolment identifiers separately.
Account roles and sharing options depend on your equipment and app. Keep device setup codes, sharing QR codes and configuration files private; they may be used during setup or sharing.
Explain in plain English · step by step
What this means
A camera owner can usually do more than a person who has only been given viewing access. Least privilege means giving someone only the functions they need. Your recorder login and the app account used to share it may be separate. Sharing a password can give more access than you intended.
Step by step
Identify the account that owns or manages the equipment. Confirm that its email, phone and recovery options are controlled by the intended owner.
Open the supported user or sharing settings for the exact device and app. Check the manufacturer’s instructions if the menu is unfamiliar.
Review each person who has access and decide which devices and functions they actually need.
Use individual users or supported sharing permissions where available. Give viewing or playback access without administration rights when that meets the need.
Remove access that is no longer required, including old app shares and device users where applicable. Treat setup and sharing codes as private.
Test with the intended recipient: confirm allowed functions work and restricted settings cannot be changed through that account.
For example
A family member needs to answer visitors or view an entrance. Use the supported sharing controls for those functions rather than handing over the main account password.
Check the result
The access list matches the people who need it, and a shared viewer has only the intended functions.
Wireless authentication and router administrative authentication protect different interfaces. Maintain supported router firmware, review associated clients and validate guest isolation before relying on network separation.
Changing Wi-Fi, network addresses or separation rules can interrupt cameras, intercoms and remote access. Check the required connections and recovery plan before making changes.
Explain in plain English · step by step
What this means
The Wi-Fi password lets a device join your wireless network. The router’s administration password lets someone change the network’s settings. They do different jobs. A guest network can provide internet access separately, but its actual isolation depends on the router and configuration.
Step by step
Identify the router model and obtain its official instructions. Make sure you have a working way to access its settings before making changes.
Check the router administration password and Wi-Fi password separately. Use suitable unique credentials and keep them securely recorded.
Review the connected-device list. Identify unfamiliar devices before changing anything; equipment names can be unclear or shortened.
Check the router’s supported update process and plan any restart around recording, intercom and internet use.
If guest access is needed, review the guest-network isolation options. Do not change VLANs or addresses without checking which devices must communicate.
After an approved change, reconnect affected devices and test normal internet access, camera viewing and intercom operation.
For example
A shop offers guest Wi-Fi. Keeping guest devices separate from business and security equipment can be useful, while still allowing the authorised recorder and cameras to communicate.
Check the result
Authorised devices reconnect and work, and the intended guest restrictions have been tested rather than assumed from the network name.
Delegated monitoring and time-limited configuration
Separate device-health telemetry authorisation from privileged remote configuration. DoLynk Care access depends on DMSS entrustment, compatible equipment and connectivity; scoped, revocable permissions do not constitute continuous video monitoring.
West Protect has no DoLynk Care access without your DMSS entrustment. Health reporting is authorised for 30–365 days and can be renewed by you. Remote configuration needs separate DMSS approval for 1–8 hours. You can revoke either permission at any time.
Explain in plain English · step by step
What this means
Giving permission to receive equipment-health reports is different from giving permission to change settings. A report might flag an offline device or storage fault; it is not the same as someone continuously watching your cameras. You control the permissions your supported system provides.
Step by step
If a support request is unexpected, contact West Protect using the details you already trust before granting anything.
Agree on the device, problem and work to be carried out. Make clear whether you need health reporting or a configuration change.
For supported health reporting, review and approve the DMSS entrustment and its duration. West Protect has no DoLynk Care access without that permission.
For configuration work, confirm the request by email or text and review the separate DMSS approval. Choose the agreed access window rather than leaving access open indefinitely.
After the work, test the affected function and review the result. You can revoke the permission using the supported app controls.
Review health-reporting permission when it expires or your needs change. Renew it only when you want the service to continue.
For example
A recording fault needs investigation. Existing health-report permission does not approve a configuration session; you separately decide on the requested access in DMSS.
Check the result
You know what was authorised, its expiry and how to revoke it. The affected equipment function has been checked after any configuration work.
Manage user access through onboarding, role changes and offboarding. Assign privileges to job requirements and review sessions, recovery channels, shared credentials and physical access separately; a password reset alone may not revoke every authorisation.
Available controls vary by system. Workplace IT policies still apply; a shared password change does not automatically remove every signed-in session or app permission.
Explain in plain English · step by step
What this means
People should receive the access they need for their current job. When a person leaves or changes duties, check every place they had access. Removing an email account does not automatically remove a camera share, door code or an already signed-in session on another service.
Step by step
List the systems the business uses and who is responsible for each: email, files, security apps, recorders and entry systems.
Give people individual accounts where supported and choose permissions appropriate to their role.
When duties change, review the person’s access in each affected system rather than assuming one change updates everything.
For someone leaving, transfer ownership of required work and recovery contacts before disabling the access that is no longer needed.
Revoke supported sessions and shares, recover physical keys or fobs and review shared codes or credentials. Follow each system’s own procedure.
Test remaining staff access and record who completed the review. Repeat when staffing or equipment changes.
For example
A staff member leaves a shop. Review their camera-app sharing and business accounts rather than assuming that returning a key removes digital access.
Check the result
Former or changed-role users no longer retain unintended access, while the business still controls its data, equipment and recovery methods.
Firmware maintenance must match the exact hardware model, regional variant and supported upgrade path. Review release notes, configuration backup and service interruption, then validate recording, networking and access-control functions after the change.
An equipment update may restart a device or temporarily interrupt a function. Confirm the correct firmware for the model and regional variant; do not install a file just because the product name looks similar.
Explain in plain English · step by step
What this means
Firmware is the software built into a camera, recorder or alarm device. Updating its phone app does not necessarily update the equipment itself. Similar product names can use different firmware, so choosing a file by appearance alone can cause problems.
Step by step
Record the full model, hardware or regional variant where relevant, and current firmware version from the device’s information page.
Check the manufacturer’s official support information for that exact equipment. Review any required update order and compatibility notes.
Arrange a suitable maintenance time and note the functions that may pause. For installed systems, ask West Protect if the correct update path is unclear.
Back up the configuration where supported and make sure the authorised person has the access needed to restore settings.
Follow the official update process with reliable power. Allow it to finish and do not interrupt a restart unless the manufacturer instructs you to.
Confirm the installed version, then test recording, playback, time settings, notifications and applicable intercom or entry-control functions.
For example
A recorder update is scheduled when a brief recording interruption can be managed. Once it finishes, check that new footage is being recorded and can be played back.
Check the result
The expected firmware is installed and the important system functions work; a successful upload message alone is not the whole check.
NVR retention is governed by storage capacity and recording policy. Preserve required footage through validated export with controlled access. Device transfer may require separate account unlinking, configuration reset and storage sanitisation.
Recording duration depends on storage, camera settings and recording schedules. Depending on configuration, a full recorder may overwrite older footage or stop recording. Resetting settings does not necessarily erase every drive or remove cloud-account links.
Explain in plain English · step by step
What this means
Your recorder has a limited amount of space. Depending on its settings, it may replace older recordings when the drive fills up. Exporting means saving a separate copy of a clip you need to keep. Resetting the recorder’s settings is not necessarily the same as erasing its drives or removing its app ownership.
Step by step
Check the oldest available recording and the recorder’s full-storage behaviour. Do not assume it keeps a fixed number of days.
When a clip is needed, identify the correct camera and date and check that the recorder’s time is accurate enough to locate the event.
Use the recorder’s supported export process and choose the required time range. Keep the source recording intact.
Open the exported copy on a suitable device or player and check that it contains the required camera and time period.
Store the copy in a protected location and share it only with authorised recipients through an appropriate method.
Before selling, returning or disposing of equipment, preserve required footage and follow model-specific instructions for ownership removal and storage erasure. Ask for help if those steps are unclear.
For example
A business needs a clip from last week. Export and verify that clip promptly, then protect the copy separately from the recorder’s ongoing recording cycle.
Check the result
The exported clip opens correctly and is stored safely; any handover plan treats stored recordings and account ownership separately.
VLANs establish logical Layer 2 network segments. Routed access between segments requires appropriate gateway and firewall policy. Validate permitted application flows and denied access; distinct subnets or SSIDs alone do not demonstrate isolation.
Plan the connections your recorder, intercom, apps and smart-home controller need before changing network rules.
Explain in plain English · step by step
What this means
Think of separate network groups for office computers, cameras and visitors. The network equipment decides which groups may communicate. A VLAN is one way to create those groups; firewall rules control the allowed connections between them. Cameras and their recorder still need the right paths to work.
Step by step
List the devices and their necessary connections, such as cameras to a recorder and an authorised phone to the viewing service.
Confirm the router, switches and wireless equipment support the proposed design. Keep a plan to restore settings if a change disconnects equipment.
Have the authorised network administrator create the groups and document which connections are allowed. Avoid copying unrelated VLAN settings from another installation.
Apply the required rules and assign devices to the intended groups. Do not assume a different Wi-Fi name proves separation.
Test both sides of the rule: required functions should work and access that should be blocked should fail.
Recheck recording, playback, intercom calls and approved remote access. Document the working arrangement for future maintenance.
For example
Guest Wi-Fi can provide internet access while rules prevent guests reaching the recorder or office computers.
Check the result
Required connections work and a guest or other restricted device cannot reach the protected functions it should not access.
A filtering DNS resolver applies policy to domain-name lookups. Coverage depends on resolver selection and enforcement; encrypted DNS transport does not itself provide filtering, and allowed domains can still contain harmful content.
Encrypted DNS protects the DNS connection; it does not automatically mean harmful domains are being filtered.
Explain in plain English · step by step
What this means
DNS is the lookup that helps your device find a website from its name. A filtering service can refuse a lookup for a domain it has classified as harmful or blocked. It cannot promise every allowed website is safe, and a device using another lookup service may bypass the intended filter.
Step by step
Identify the DNS service your router or device currently uses. On a managed work network, ask the administrator before changing it.
Review the filtering provider’s supported settings, privacy information and available blocking categories.
Follow its official setup instructions for the intended router or device. Keep a record of the previous settings so an authorised person can restore them if necessary.
Check that the relevant devices actually use the selected service. Browser or device settings can choose a different DNS service.
Use the provider’s harmless test page or diagnostic tool, if offered. Do not visit known malicious sites to test protection.
Test normal browsing and required security-device functions. Investigate a false block before allowing a domain, and continue checking messages and websites carefully.
For example
A known phishing domain may be blocked, but a new scam or a harmful page on an allowed domain can still require your judgement.
Check the result
The provider’s supported check confirms filtering, while required services still work. An allowed website is not treated as proof of safety.
Device or volume encryption protects stored data from unauthorised offline access. Windows Device Encryption and BitLocker availability varies. Secure recovery-key custody is essential; encryption does not replace backups or protect every operation in an unlocked session.
Encryption protects stored data; it does not replace backups or protect files from every threat while you are signed in.
Explain in plain English · step by step
What this means
Encryption scrambles files on the drive so they cannot simply be read by taking the drive or computer. Your normal sign-in often makes access feel unchanged. A recovery key is a separate way to unlock the drive when normal unlocking is unavailable. Losing both access and that key can leave you unable to recover the files.
Step by step
Check the computer’s supported encryption settings. On Windows, the available controls depend on the hardware and Windows edition.
Before changing encryption settings, confirm that important files have a separate usable backup.
Find the official instructions for locating or backing up the device’s recovery key. If it is managed by a workplace, follow the administrator’s process.
Keep the recovery key somewhere protected and accessible without that computer. Do not keep its only copy beside or solely on the device it unlocks.
Check the encryption status and let any authorised encryption process complete. Do not deliberately trigger recovery just to test it.
Confirm you can locate the correct recovery information from another trusted device or protected record, and keep the normal screen lock enabled.
For example
A lost work laptop contains customer documents. Encryption helps protect those files, while a separate backup lets the business continue working.
Check the result
Encryption reports the intended status and the correct recovery key is safely retrievable. A usable file backup also exists.
Document critical services, recovery dependencies, responsible contacts and restoration priorities. Validate recovery through non-destructive restore exercises and review the plan after account, staff, device or backup changes.
Keep recovery details private. A plan should not contain a shared list of passwords or be stored only on the device you may lose.
Explain in plain English · step by step
What this means
A recovery plan is a short set of instructions for when a phone, account or computer is unavailable. It tells you who to contact, where the protected recovery information is kept and what must work first. It should help you act without becoming an exposed list of passwords.
Step by step
List the services you rely on and decide which need to be restored first, such as email, customer records or authorised equipment access.
Record trusted support contacts and the person responsible for each service. Keep contact details somewhere available if your usual device fails.
Note where backups and recovery information are kept without copying secret passwords or codes into an ordinary shared document.
Choose a simple practice scenario, such as recovering one non-critical file. Do not disable a working account or wipe equipment to simulate a failure.
Perform the safe recovery check and record anything missing, outdated or unclear. Correct the plan while normal access still works.
Review the plan after changing staff, devices, accounts or backup services. Make sure the authorised person can find it when needed.
For example
If the office laptop fails, the owner knows who to contact and which tested backup contains the documents needed for current jobs.
Check the result
An authorised person can find the plan and complete the chosen recovery check without relying on the unavailable device.
Prioritise controls by exposure, dependency and service impact. Stage configuration changes and validate operation after each change.
Plain-English explanation and steps
Start with the accounts and devices you rely on most. Making one planned change at a time makes it easier to notice whether it helped or interrupted something.
Step by step
Choose one relevant starting action, such as reviewing your email sign-in protection.
Keep a working recovery method and follow the instructions for that account or device.
Test the result before starting another change. Schedule equipment changes when a temporary interruption can be managed.
Does this guide assess my equipment?
This page is an educational reference, not an authenticated assessment, vulnerability scan or configuration-validation service.
Plain-English explanation and steps
Reading or opening a dropdown does not connect to your camera, router or accounts. The page cannot tell whether your own setup is secure.
Step by step
Identify the exact device or service you want to check.
Compare the relevant advice with its official instructions and your actual settings.
For an equipment-specific review, contact the appropriate support provider and describe the issue without sending passwords or access codes.
Can I use MFA or passkeys on every security device?
Authentication capabilities differ between local device accounts, cloud identities and management applications. Controls are limited to supported methods on each authentication surface.
Plain-English explanation and steps
An app account may offer a security key or extra sign-in check even when the recorder’s own login does not. Turning a feature on for one account does not automatically add it to every connected device.
Step by step
List the separate sign-ins you use: the app account, the recorder and any administration service.
Check each provider’s supported security settings and enable suitable protection where available.
Test each sign-in separately and confirm its recovery method. Do not install unofficial modifications to add an unsupported method.
Does a VPN make me anonymous or stop scams?
VPN encryption protects the tunnel path. Application identifiers, authenticated sessions, endpoint compromise and social engineering remain outside that control’s guarantees.
Plain-English explanation and steps
A website can still recognise you when you sign in, and a scam can still arrive while your VPN is connected. A protected connection does not make the person or website at the other end trustworthy.
Step by step
Use the VPN for its intended connection purpose and understand which traffic it covers.
Check unexpected messages and payment requests through a trusted, separate contact method.
Keep device updates, account protection and backups in place whether the VPN is connected or not.
Do I need a VPN to use DMSS?
DMSS connectivity depends on the supported device, enrolment and access method. Manufacturer cloud connectivity and a separately administered VPN are distinct architectures.
Plain-English explanation and steps
A working DMSS connection does not automatically need a personal VPN subscription. The right approach depends on how your equipment is set up and who is allowed to use it.
Step by step
Check the exact model and its current approved remote-access method.
Review the manufacturer’s instructions and the owner’s sharing permissions.
Ask for support before changing a working connection. If a VPN is proposed, confirm the specific problem it is intended to solve.
Should I reset my equipment if I am unsure?
A configuration reset can disrupt services without sanitising storage or revoking cloud ownership. Recovery, account unlinking and data erasure are separate model-dependent procedures.
Plain-English explanation and steps
A reset may stop recording or remove settings you need, while leaving footage or app links in place. It should not be the first thing you do simply because a setting is confusing.
Step by step
Record the device model, the issue and any error message without exposing credentials.
Check its instructions or contact support to identify the appropriate next step.
If a reset is required, first confirm the backup, recovery and ownership procedures, then arrange to test the system afterwards.
Support for your installed system
Need help with the next check?
West Protect provides security consulting, installation and technical support for CCTV, alarms, intercoms, access control and compatible security-system integration. Jayke is also an ACMA-registered cabler providing structured network, data and coaxial cabling.
Tell us which equipment is affected and what you have noticed. Leave passwords, recovery codes, access credentials and private footage out of your enquiry.
