Smart TV and streaming box security basics

Smart TV security mostly comes down to keeping the TV updated, reviewing its voice and privacy settings, and securing the accounts signed in on it. A smart TV is really a computer with a big screen. It connects to the internet, runs apps, signs in to accounts and often has a microphone in the remote for voice search. Streaming boxes and sticks do the same for older TVs. That makes them useful, but it also means they need updates and a look at their privacy settings, just like a phone. This guide explains why, and walks through the common smart TV security and privacy settings on Samsung TVs, Google TV devices and Apple TV, based on each maker’s own instructions.

The Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) lists smart TVs among “internet of things” (IoT) devices, and its IoT guidance applies to them as well as to other smart devices.

Why it matters

Three things make a smart TV worth a few minutes of attention:

• It runs software that needs fixing. The ACSC says: “It is important that companies offer updates to fix device vulnerabilities as they are discovered.”
• It’s signed in to accounts. A TV is often signed in to the maker’s account and several streaming services, some with payment details saved.
• It can collect data. Depending on the brand and settings, a TV can record what’s watched, what’s searched for and what’s said to its voice assistant. The ACSC’s guidance describes checking what data a device collects and who it’s shared with.

TVs also tend to stay in a home for many years. The ACSC says manufacturers must publish an end of support period, and describes considering a replacement once updates stop.

How to update a Samsung TV

Based on Samsung Australia’s instructions (checked October 2026). Samsung’s guide Update the Software on your Samsung TV has the latest steps.

1. Check the TV is connected to the internet.
2. Open Settings, then All Settings.
3. Select Support, then Software Update. If this option is greyed out, Samsung says to switch the TV’s source to Live TV and try again.
4. Select Update Now.
5. If an update is found, select Yes to install it.

Samsung says the update takes “at least 10 minutes” and the TV restarts by itself afterwards. For a TV that isn’t connected to the internet, Samsung describes downloading the update file from its Manuals & Downloads page onto a USB drive, with the files at the top level of the drive rather than inside a folder. It warns: “Do not turn off the TV or remove the USB flash drive until the update is complete.”

How to update a Google TV device

Based on Google’s instructions (checked October 2026). Google’s Google TV help page Fix a slow or laggy Google TV device has the latest steps.

Google TV runs on TVs and streaming devices from several makers, so menus can look a little different from one model to the next.

1. On the Google TV home screen, select the profile icon in the top-right corner.
2. Choose Settings.
3. Select System, then About, then System update.
4. If an update is available, follow the prompts to install it.

Apps on Google TV update separately. Google describes opening the Google Play Store on the TV, going to its Settings, and turning on Auto-update apps.

How to update an Apple TV

Based on Apple’s instructions (checked October 2026). Apple’s guide Update your Apple TV has the latest steps.

1. Open Settings and select System.
2. Select Software Updates.
3. Turn on Automatically Update, so new updates install when they’re available.
4. To update straight away, select Update Software, then choose to download and install the update if one is listed.

Apple says to “Keep your Apple TV connected and plugged in to power” until the update finishes. It restarts while it installs.

How to review voice and privacy settings

Smart TVs from different makers handle data differently, so the settings have different names. These are some examples of what the makers describe.

Samsung TVs with Bixby. Based on Samsung Australia’s instructions (checked October 2026). Menus differ between model years; Samsung’s guide How to use Bixby on a Samsung Smart TV has the latest steps, and the TV’s user manual has the details.

1. Open Settings, then All Settings.
2. Select Advanced Features (on models before 2025, General and Privacy), then Voice, then Bixby Settings.
3. Open Privacy. Samsung says this controls whether audio recordings can be reviewed and whether Bixby is personalised.
4. To stop the remote’s microphone listening for the wake phrase, open Voice Wake-Up in Bixby Settings and turn off hands-free wake-up.

Samsung says Bixby can’t be turned off completely, and can still be used by holding the microphone button on the remote.

Google TV. Based on Google’s instructions (checked October 2026), from How Google TV uses your data. Google describes these steps for the Google TV app:

1. To delete watch history, open My Activity in a web browser, signed in to the same Google Account.
2. Search for Google TV or Play Movies.
3. Select More, then Delete.

Google says Google TV uses watch activity, watchlists and chosen streaming services to make recommendations. It describes turning off location under Settings > Privacy > Location on the TV, and notes that Google and third parties may still estimate general location from the device’s IP address while it’s connected to the internet. Voice searches made through Google Assistant are covered by the Google Account’s activity settings. Google’s guide to managing audio recordings says the setting that saves voice and audio recordings, “Include voice and audio activity”, is off unless it’s turned on.

How to look after the accounts on the TV

The TV’s own settings are only part of the picture. The accounts signed in on it matter too. If one of them shows activity nobody recognises, our guide to what to do if an account has been hacked explains where official guidance says to start.

• Change default passwords. The ACSC warns that “default usernames and passwords are collected and posted online, leaving your device vulnerable.” It describes checking that a device’s password can be changed, and says a device with good security “should have a long, unique, and unpredictable password.”
• Turn on multi-factor authentication (MFA) where it’s offered. The ACSC’s Easy Steps guide describes turning on MFA, starting with the most important accounts, such as email and accounts with stored payment details. Our guide to how to secure your online accounts explains how MFA works.
• Remove unused services. The ACSC describes turning off features and linked services that are no longer used, such as voice assistant integrations or remote access. In the Google TV app, Google describes removing streaming services through the profile picture or menu, then Manage services.
• Review the companion app. The ACSC says to “always consider the information collected by the online app or mobile app” as well as by the device.

How to keep the TV on a separate network

A TV also depends on the home network it’s connected to. The ACSC’s smart device guidance describes:

• securing the home Wi-Fi and router with a strong password (see home Wi-Fi and router security)
• setting up “an additional Wi-Fi network on your router for IoT devices only” (see how to set up a guest network)
• setting remote administration to the local network only, unless remote access is needed.

The ACSC’s router guide notes a trade-off: “If guests require access to network-connected devices, such as your smart TV, they will need to join the same network that is used by those devices.”

Things to watch for

• No more updates. The ACSC describes checking whether a device is still receiving updates and for how long, and considering a newer device once it isn’t.
• Turning the TV off mid-update. Samsung warns against this, and Apple says to keep the Apple TV powered and connected.
• Update files from other websites. Samsung describes downloading USB updates from its own Manuals & Downloads page, for the country where the TV was bought.
• Apps from unfamiliar sources. For phones, the ACSC describes downloading apps “only from an official app store”. Smart TVs and streaming boxes also have their own official app stores.
• Microphones and cameras. The ACSC describes disabling features such as cameras or microphones that aren’t needed, where possible.
• Selling or giving away a TV. The ACSC describes erasing personal data, deleting online accounts that are no longer needed, doing a factory reset and unpairing the device from phones. Our guide to selling, giving away or recycling a device covers this.

Common questions

How do I secure my smart TV?

Most of it comes down to updates, privacy settings, the accounts signed in on the TV and the home network it uses. The ACSC lists smart TVs among internet of things devices, and its guidance describes changing default passwords, turning on MFA where it’s offered, turning off unused features and linked services, and putting smart devices on a separate Wi-Fi network. Steps for Samsung, Google TV and Apple TV start at how to update a Samsung TV.

How do I update my Samsung smart TV?

Through the TV’s Support menu. Samsung describes going to Settings > All Settings > Support > Software Update, then selecting Update Now. Samsung says the update takes “at least 10 minutes” and the TV restarts by itself, and warns against turning it off or removing a USB drive until the update is complete. For a TV that isn’t online, Samsung describes a USB update from its Manuals & Downloads page. Steps: how to update a Samsung TV.

Is my smart TV listening to me?

It depends on the brand and the settings. For Samsung TVs, Samsung describes a Voice Wake-Up setting that stops the remote’s microphone listening for the wake phrase, and says Bixby can’t be turned off completely. For voice searches through Google Assistant, Google says the setting that saves audio recordings is off unless it’s turned on. The ACSC describes disabling microphones and cameras that aren’t needed, where possible. See how to review voice and privacy settings.

Can smart TVs be hacked?

A smart TV runs software, and the ACSC says: “It is important that companies offer updates to fix device vulnerabilities as they are discovered.” Its guidance also warns that “default usernames and passwords are collected and posted online, leaving your device vulnerable.” That’s why it describes keeping smart devices updated, changing default passwords and keeping them on a separate network. See why it matters and how to look after the accounts on the TV.

How do I delete my viewing history on Google TV?

Through Google’s My Activity page. Google describes opening My Activity in a web browser, signed in to the same Google Account, searching for Google TV or Play Movies, then selecting More > Delete. Google says Google TV uses watch activity, watchlists and chosen streaming services to make recommendations. Other makers explain their options in their privacy policies and help pages. See how to review voice and privacy settings.

What do I do when my TV stops getting updates?

The ACSC describes checking whether a device is still receiving updates and for how long, and considering a newer device once it isn’t. It says “Manufacturers are required to publish the end of support life (EOSL) period for their smart devices”, so the maker’s website is the place to check. Before a TV is sold or given away, the ACSC describes erasing personal data, doing a factory reset and unpairing it from phones. See things to watch for.

Where to get official help

• The ACSC’s IoT device guidance is the official version of the smart device points above.
• Samsung Australia support, Google TV Help and Apple Support describe the exact steps for their own devices. Other brands publish their own help pages and manuals.
• For voice assistants on speakers and displays, see our guide to securing smart speakers, home cameras and video doorbells.