how do you enable security?

Don't give access to those you don't trust to have access to Sonos to your private wi-fi.

So many people ask this question... if you don't want people messing with your Sonos devices, don't let them connect to your WiFi. If you still want to allow them access to the internet, look into if your router can set up a second network for guest use, which would be separate from your main network. Many routers have this capability. A separate WiFi network is created with a different range of IP addresses, and the router sets up a firewall between the two networks so people on the Guest network can't access your main network, but can still access the internet.

Some ISP-provided routers/gateways might instead allow access to the ISP's own hotspot service... some of those are even shared among multiple large ISPs, so even if your guest is from another part of the country, they may be able to log into their ISP's account to gain access to the hotspot network of your ISP. And even if logging into their own account isn't possible, most ISPs offer limited time free access to their hotspot (usually an hour or two at a time).

The thing that so many people overlook with giving others access to their WiFi is that those people could also then access your computers, NAS, and other devices on your network too! It's not just about Sonos... you're giving people the keys to your network and any data you might be storing on it if you let them connect!

I was afraid I might get an answer like that :-(

Wifi was not intended for security, so I don't subscribe to the "just keep people out" strategy.
I will set up a local IoT network for those devices, and, if possible, add an SSDP/upnp gateway to I don't have to shift between wifis.

Thanks for the swift replies.

If you're going to set up a separate network, why not make that network for your guests, and keep all of your devices on the network they're already on?

If you set up a second "IoT" network and put an SSDP/UPnP gateway between the two, that will still leave your Sonos system accessible to anyone on your main network.

well, in short.. I have children... so limiting who does what will not be shortlisted enough.

I expect to be able to make some basic network level security like limiting which IP/MAC/subnet may access certain devices. That will avoid most accidents (intended or otherwise...)

Also, my setup is fairly elaborate already, so an extra subnet will not add much in terms of complexity.

How about tell children not to do it. You don't "Accidentally" download the sonos app.

My kids have their own subnet, which not only keeps them away from my Sonos gear, but also forces opendns on them to make it harder for them to get to "bad" sites. Win/win.

@chris: the sonos app is not the main problem - it is more the DLNA part where you just choose which device to push to, and it will override whatever else is running on the device. This includes smart TVs.

@controlav: that is a good idea - this give a guest wifi, parent wifi and children wifi - very doable (and convenient) 🙂

This. I've come to realise that in this regard, Sonos is really backwards thinking. There's not a single thing on a Wifi that's NOT protected by a password these days apart from non-critical things like Printers. The servers, other computers, etc - they all have passwords.

You wouldn't expect to be able to access my Netflix account just becuase you're on my Wifi, surely? Or all the files on my little NAS in the closet? Or my iCloud-picture-stream?

No, this whole "keep them out of the wifi" might have worked 15 years ago but nowadays is completely obsolete.

What Sonos-fans usually say (like in this thread) is:
• Don't let anyone in on your Wifi (which is silly)
• Create a separate Wifi for Sonos (which is equally silly - Sonos can then not access any music library on any servers, nor can I connect to it without switching wifi on my phone).
• Change friends (yes, I've seen that answer several times).

The interesting thing here is: increasing security would not be that hard. Just a PIN-number on the app would suffice. Heck, make it optional - all the old-school Sonos fans can keep their Sonos-system wide open, but for all other new users, office-installations, etc this would solve everything.

Because, let's face it - this request comes up all the time. Seriosly, google "Sonos Security" and you'll find entries decade old posts requesting this. Yes, decades - I just stumbled on one from 2008.

So it's really a question of Sonos not wanting to implementing it. We're talking about a philosophy (which they have so far not managed to explain in any good way) and a group of developers simply not wanting it. And this makes me as a fairly new Sonos-user more than a bit sad.



I was afraid I might get an answer like that :-(

Wifi was not intended for security, so I don't subscribe to the "just keep people out" strategy.
I will set up a local IoT network for those devices, and, if possible, add an SSDP/upnp gateway to I don't have to shift between wifis.

Thanks for the swift replies.

@AndreasHy While I don't have a problem with password protecting Sonos, I don't think you're examples are all that fair. Your Netflix account, your NAS, your iCloud stream...are all accessible outside your wifi. Clearly password protections are needed. Most computers and servers are also available outside of your wifi network and/or mobile and capable of having multiple accounts on them. None of these products and services could possibly be protected by limiting access to your wifi.

And although you may not be interested in the latest tech for home audio, voice control is not password protected either. Ironically, I think voice control could ultimately push for password security on Sonos. It's caused Sonos to have a cloud presense so that Amazon Alexa (and probably others) can access your local Sonos. It's not hard that customers may soon be allowed to access this cloud presence directly....and that must be password protected. If you have to use a password when off your wifi, it should at least be optional to provide a password when on.