The UK Bans Default Passwords

The report highlights the UK’s implementation of the Product Security and Telecommunications Infrastructure (PSTI) Act, which bans default guessable passwords on IoT devices and requires either user-selected or unique, non-guessable preset credentials, with transparency on support lifecycles. Citing California’s earlier precedent, it argues the change will likely have global effects as manufacturers align products to meet these standards.