Is there any way to put a password on your sonos system?

This is most certainly needed. In fact you should go full out and on iOS take advantage of the touch-ID to authenticate users.
The fact that Sonos devices have NO security at all is somewhat worrying actually - it could theoretically be used as a vector for all sorts of other security issues - it runs Linux after all so is a fairly open platform underneath.

I'm confused by your statement. I use iOS almost exclusively to "control" my Sonos system. But all of my iOS devices are locked after a minute of non interaction, and the only things that you can do on the lock screen is start/stop, skip or replay a track. How does this indicate "no security"? While I can't look at the screen right now, not being at home, I'm 90% sure that I don't have access to the change the playlist / location of music. So to do anything else, I have to unlock my iOS device, using Apple's process. But maybe I'm not understanding your statement?

Please inform me on the theory as to how this could be used as a vector for security issues. I'd be most interested to know.

Anyone connected to your wifi network has full control of your Sonos. Might be ok for some, but the option of password/pin protecting access has been requested many times.

Sonos is a Linux system at heart. In theory it could be used as a vector to attack a local network or be used as a pawn in a botnet. I say in theory - this has not happened - but Sonos and all network appliance makers have to be vigilant. Google 'Brian Krebs ddos' - one of the largest ddos attacks in history was made against him using mostly unsecured internet appliances.

I see. Thanks for the explanation.

If that was an issue for me, I'd have the Sonos on the public side of my network, which would restrict access to all of my "secure" devices. But at the end of the day, if something is connected to the internet in any way, it's potentially accessible, no matter what "lock down" you implement.

But I have to chose between the internet of things, and security. So I'm somewhat rigorous in who I give access to my network to, and hence my sonos contorlling devices. It's not perfect, I'd agree, but I'm not sure how Sonos could make it much better. At the end of the day, it's my call as to whom I give access to, not Sonos'.

Anyone connected to your wifi network has full control of your Sonos. Might be ok for some, but the option of password/pin protecting access has been requested many times.


Doesn't this exist even now? How can anyone connect to the Wifi without the Wifi password? And if Sonos had a password, but the Wifi was accessed, how does the Sonos password offer any protection against such attacks? What is the incentive for a hacker to attack just the Sonos devices? Can someone access the WiFi via Sonos without having the WiFi password? Or hack into that somehow via Sonos as it is just now, with no password protection of its own?

Anyone connected to your wifi network has full control of your Sonos. Might be ok for some, but the option of password/pin protecting access has been requested many times.


Doesn't this exist even now? How can anyone connect to the Wifi without the Wifi password? And if Sonos had a password, but the Wifi was accessed, how does the Sonos password offer any protection against such attacks? What is the incentive for a hacker to attack just the Sonos devices? Can someone access the WiFi via Sonos without having the WiFi password? Or hack into that somehow via Sonos as it is just now, with no password protection of its own?

The problem comes when people have the password. Friends, or an office environment where people share the same network, family members. They have full control over your Sonos as it has no password. As for hacks, this is just a theoretical scenario. Access could be gained by using another compromised device inside your network. But my point is that Sonos needs to take security more seriously. For all I know, they do lot of work behind the scenes, but not having a password to authenticate a client device doesn't bode well.

Come on Sonos - just configure a password or pin that each device needs to enter once the first time it tries to connect to a device.

The problem comes when people have the password.
Ah..so that is the real issue, not the security one that was so strongly stated. Security is already blown by giving up the WiFi password, how would it help for Sonos to have one thereafter?
I don't give people my WiFi password in a hurry, and I am personally up to here with passwords and remembering them. I for one would be quite irritated to have one more in my life. My vote therefore is for no change on this count.

The problem comes when people have the password.
Ah..so that is the real issue, not the security one that was so strongly stated. Security is already blown by giving up the WiFi password, how would it help for Sonos to have one thereafter?
I don't give people my WiFi password in a hurry, and I am personally up to here with passwords and remembering them. I for one would be quite irritated to have one more in my life. My vote therefore is for no change on this count.

That may be fine for you but as you can see from this thread, it is not fine for others. It should most certainly be an option and not forced into the user. If you don't want a password, don't use the feature. Many people share their wifi passwords with friends and family or are in a shared network environment.

Don't confuse the two issues though. The password to access configuration and playlists, and any possible external threat are separate. I'm just requesting some sort of access control to the Sonos. Any possible external security threat should be something that I hope Sonos is mindful of. My point being that if they are unconcerned about access control, they may well be unconcerned with other security issues too.

Don't confuse the two issues though. The password to access configuration and playlists, and any possible external threat are separate. I'm just requesting some sort of access control to the Sonos.
No, I don't. I thought it was you that was confused, by using external threats as the justification for this need for passwords. I must have misunderstood your post.
I am curious though - how will these passwords work to stop a "friend" or a child from blasting music through the Sonos in your bedroom at 3 am if they are that kind of people?

1234Many people share their wifi passwords with friends and family or are in a shared network environment.

I really don't understand this... People hand out total access to their network, and then they're surprised that people (particularly kids) abuse it? Let's be kind and say that's just niave....

As previously suggested, put the Sonos kit on a private network and any untrustworthy people and children on a guest network - job done... Why on earth would you give access to your private network, which can hold all of your private data, to someone that you can't totally trust?