No Password Needed: What Exposed Flock Cameras Mean for You

The video above raises a simple but unsettling question: if some Flock Safety license plate readers have been found online without even basic password protection, how much should any of us trust these systems with the record of where we drive every day?

Why a missing password is a big deal

Automated license plate readers like Flock’s cameras are not just taking a picture of your plate. They are building a timestamped, location-tagged log of your movements that, over weeks and months, can reveal where you live, work, worship, get medical care, or visit a friend. That is often called a “pattern of life.” When a device collecting that kind of sensitive data is left exposed online with no password, it is not a small technical glitch. It is a door left wide open to anyone curious enough to look, whether that is a hobbyist, a stalker, a data broker, or someone with worse intentions.

Security problems are not hypothetical

We do not know, based on the video alone, how many cameras were affected, where, or for how long. What we do know, from general, well-established facts about networked devices, is that any camera connected to the internet is only as safe as its weakest configuration setting. A password left blank or a default login never changed is one of the most common ways surveillance equipment gets compromised. That risk does not disappear just because the company running the system is well funded or widely deployed. If anything, scale makes the stakes higher: a single misconfiguration can expose data flowing from many communities at once.

Why this matters even if you have nothing to hide

Supporters of ALPR networks often frame them as crime-fighting tools, and sometimes they are. But the privacy risk is not about guilt or innocence. It is about who controls the record of your movements and how carefully that record is protected. A camera with no password undermines the basic promise that this data is handled responsibly, and it raises fair questions about oversight, audits, and accountability for the companies and police departments deploying this gear.

What you can do

Start by finding out whether ALPR cameras are already operating near you using our community map. Learn the basics of how these systems collect and store data on our Learn page. And if you want to push your local government for transparency, clear retention limits, and real security audits, our Take Action page has concrete steps you can use at a city council meeting or in a public records request.