The United States launches a security label for connected devices

On January 7, 2025, the Biden administration unveiled a voluntary cybersecurity certification program for connected devices, called the “US Cyber Trust Mark.” To obtain this label, manufacturers will need to meet strict standards set by the National Institute of Standards and Technology (NIST). These standards include:

• the use of robust and unique default passwords;
• security measures for software updates;
• incident detection and data protection features.

This label will be rolled out over the course of 2025. It will apply to consumer devices such as security cameras, televisions, fitness equipment, home automation systems, voice assistants, and baby monitors.

Each certified product will feature the “US Cyber Trust Mark” logo along with a QR code, giving customers access to a range of information. This will include instructions on changing default passwords, product configuration, details about automatic updates, and warranty duration.

The Biden administration is also considering an executive order that would require the US government to purchase only “US Cyber Trust Mark”-certified products starting in 2027. Furthermore, the label is expected to expand to consumer Soho routers, which are frequently exploited in botnet creation.