Wanting to check the cameras at home from a laptop somewhere else is a reasonable thing to want, and it is easier than it was in 2022. What has changed is the advice about how to do it. The port-forwarding method that most older guides lead with puts a camera directly on the public internet, and that turns out to be how a great many cameras get taken over.
This covers three routes for reaching cameras you own — the manufacturer’s cloud app, a VPN back to your own network, and local network access — plus an honest account of why port forwarding is now the option of last resort.
This guide is for cameras you own or administer. Accessing a camera you do not control is unlawful in most jurisdictions regardless of how weak its password is. Everything below assumes the camera and the network are yours.
What’s Inside
- 1 – Why Exposing a Camera to the Internet Is a Real Risk
- 2 – Method 1: The Manufacturer's Cloud App
- 3 – Method 2: A VPN Back to Your Own Network
- 4 – Method 3: Viewing Cameras on Your Own Network
- 5 – Port Forwarding and DDNS: What the Old Method Involved
- 6 – Security Checklist for Any Camera Setup
- 7 – Final Thoughts on Viewing Your CCTV Cameras Remotely
Why Exposing a Camera to the Internet Is a Real Risk
Port forwarding tells your router to accept unsolicited connections from anywhere on the internet and pass them to a specific device inside your house. Once that rule exists, the camera’s login page is reachable by every automated scanner on the internet, and there are a great many of them.
Default passwords and old firmware are how cameras get taken. A July 2026 advisory from the Dutch intelligence services AIVD and MIVD describes a campaign against internet-facing cameras that worked by scanning for exposed devices and exploiting default passwords, outdated firmware and factory settings, with over 87,000 internet-connected cameras identified across the EU, NATO states and Ukraine running services with known-exploited vulnerabilities. The same reporting notes none of that access required a zero-day. Ordinary home cameras are on the same scanners’ lists.
Reducing what you expose is now formal guidance rather than an opinion. CISA publishes Internet Exposure Reduction Guidance aimed at getting devices and management interfaces off the public internet where they do not need to be there. A camera in a living room does not need to be there.
None of this means you cannot watch your cameras remotely. It means the connection should be initiated from inside your network outward, which is exactly what the two recommended methods below do.
Method 1: The Manufacturer’s Cloud App
This is the right default for almost everyone. The camera makes an outbound connection to the vendor’s service, and your laptop connects to that same service. No inbound rule on your router, nothing listening on your public IP address.
- Find the exact model on the camera body or in its manual. Vendors ship different apps for different product lines, and the wrong one will not see your camera.
- Get the software from the manufacturer’s own site or the official app store. Search results for camera viewing software are a well-known source of bundled malware.
- Create an account and turn on two-factor authentication. This account can see inside your home, so treat it as seriously as your email.
- Add the camera. Most systems use a UID or QR code printed on the device, and the camera has to be on your network — wired or wireless — for that first pairing.
- Change the camera’s own admin password if setup did not force you to. This is separate from your cloud account password.
- Check for a firmware update in the app and install it before you rely on the system.
Two real limits carried over from the original guide and both still apply. A vendor’s app only manages that vendor’s cameras, so a mixed set of brands means a set of apps. And many vendors offer only a phone app, with the laptop route being a browser portal — check whether yours has one before buying into the ecosystem.
The trade-off is that your video passes through a company’s servers. Read what the vendor says about encryption and retention. Some cameras also record to a local card or NVR, which is worth having regardless — cloud plans lapse and companies discontinue services.
Method 2: A VPN Back to Your Own Network
If you want remote viewing without a vendor’s cloud in the middle, this is the method. Your laptop joins your home network over an encrypted tunnel, then reaches the camera at its local address as though you were sitting in the house.
The security difference is the point. One service is exposed instead of one per camera, that service is built to be exposed, and it authenticates with cryptographic keys rather than a password on a web login page.
- Check whether your router already has a VPN server built in. Many consumer routers include WireGuard or OpenVPN, and enabling it is a page in the admin interface.
- If it does not, run a VPN or mesh service on a device that stays on at home — a small always-on computer or a NAS is the usual choice.
- Generate a client configuration or key for the laptop and install the matching VPN client on it.
- Connect from outside the house and confirm the tunnel is up.
- Open the camera’s local address in a browser or in your viewing software, exactly as you would at home.
This is more setup than installing an app, and it is a genuine step up in difficulty. What you get is remote access with no camera exposed to the internet and no third party holding your footage. Video over a home upload connection can be slow, so expect to drop the stream quality when you are away.
Method 3: Viewing Cameras on Your Own Network
When the laptop is in the same building, no internet exposure is involved at all. Find the camera’s local IP address and connect to it directly.
- Sign in to your router’s admin page and open its list of connected devices or DHCP leases. The camera appears there by hostname or MAC address.
- Give it a static or reserved address so it does not move next time the router restarts.
- Enter that address in a browser, or add it to viewing software such as an ONVIF-compatible client.
- Sign in with the camera’s admin credentials — changed from the factory default.
Many cameras will only stream in a browser through their own app or a plugin, since the browser plugin technologies older cameras relied on have been removed from every current browser. If a camera’s web interface loads but shows no video, that is usually why.
Putting cameras on a separate guest network or VLAN is a worthwhile addition here. It keeps a compromised camera away from your laptops and files. If your Wi-Fi is unreliable to begin with, sorting the network problems out first will save you diagnosing them again through a camera stream.
Port Forwarding and DDNS: What the Old Method Involved
This is documented here because plenty of existing installations still use it and readers need to recognize what they have, not because it is the recommended route. If you can move to a cloud app or a VPN, do that instead.
The method works like this. You find the camera’s local IP address, note the port its web interface uses, then create a rule in the router forwarding that port from the internet to the camera. Because most home connections get a public IP address that changes, you also register a dynamic DNS hostname so you have a stable name to type.
The result is a camera login page on the open internet. That is the exact configuration the AIVD and MIVD advisory describes attackers finding by scanning for internet-exposed devices, and neither a DDNS hostname nor a non-standard port number hides it — scanners sweep every port on every address.
If you have inherited a setup like this and cannot change it immediately, at minimum: change every default password to something long and unique, apply the latest firmware, remove forwarding rules for cameras you no longer use, and disable UPnP on the router so devices cannot open ports without asking you.
Security Checklist for Any Camera Setup
- Change the default admin password on the camera itself, not only on the app account.
- Turn on two-factor authentication wherever the vendor offers it.
- Keep firmware current — outdated firmware and factory default settings are named directly in the AIVD and MIVD findings.
- Disable UPnP on the router unless you have a specific reason to keep it.
- Delete port-forwarding rules you no longer use, in line with CISA’s guidance on reducing internet exposure. Old rules outlive the devices they pointed at.
- Put cameras on a separate network segment from the computers holding your data.
- Check whether the vendor still supports your model. A camera receiving no updates is a liability on any network.
How do I connect a CCTV camera to a laptop through the internet?
The safest route is the manufacturer’s cloud app: install it, create an account with two-factor authentication, and pair the camera using its UID or QR code while both are on your home network. For access without a vendor cloud, run a VPN into your home network and reach the camera at its local address.
Is port forwarding a security risk for security cameras?
Yes. It makes the camera’s login page reachable by anyone on the internet. The Dutch AIVD and MIVD advisory of July 2026 describes attackers finding internet-exposed cameras by scanning and getting in through default passwords and outdated firmware, without needing any novel exploit.
Can I view a CCTV camera on a laptop without a DVR?
Yes, if it is an IP camera. It connects to your router directly and streams over the network to a browser, the vendor’s software or an ONVIF client. A DVR or NVR adds recording and multi-camera management, but is not required for live viewing.
How do I find my camera’s IP address?
Open your router’s admin page and look at the connected devices or DHCP lease list, where the camera appears by hostname or MAC address. Set a static or reserved address afterwards so it does not change when the router restarts.
Do I still need a DDNS service?
Only for the port-forwarding method, where it papers over a changing public IP address. Cloud apps and VPN services handle this themselves, so the whole DDNS layer disappears with them.
Why does the camera’s web page load but show no video?
Older cameras relied on browser plugin technologies that every current browser has removed. Use the manufacturer’s desktop application, an ONVIF-compatible viewer, or a newer camera whose interface streams natively in a browser.
Can I use one app for cameras from different brands?
Not a manufacturer’s app — those only manage their own devices, which is why a mixed system means multiple apps. Third-party software supporting the ONVIF standard can bring several brands into one interface, provided each camera implements ONVIF.
Is a cloud camera app safe to use?
It is considerably safer than exposing a camera through port forwarding, because the camera connects outward rather than accepting connections from the internet. The trade-off is that footage passes through the vendor’s servers, so check their encryption and retention terms and enable two-factor authentication on the account.
Final Thoughts on Viewing Your CCTV Cameras Remotely
Use the manufacturer’s app if you want this working in ten minutes, and a VPN into your own network if you would rather no third party held the footage. Both keep the camera off the public internet, which is the single decision that matters most in a setup whose entire purpose is watching your own property.
