I installed my Qolsys IQ Panel 4 as a DIY and it’s working fine. I’m still using the default installer code and dealer code that shipped with it, and I’m just wondering, is there any reason why I SHOULD change these to only a code that I know?
When it’s armed, I checked and there is no option to enter advanced settings. So it’s not like a burglar could try to circumvent it with the default codes, they’d have to disarm it to do that.
Is there any security-related reason why I should change the dealer and installer codes, or am I safe to leave them as the defaults? Our disarm codes are set as different codes than any of the default codes on the unit.
When the system is disarmed, someone with an installer code can add or remove sensors, configure zones, and add & edit users.
However:
Dealer and Installer codes cannot disarm the system unless that code was used to arm it.
You can require the master password to be put in to access installer programming. You would unlock the screen with the dealer code, and it will prompt you to put in the Master password to authorize access. This does not work if screen lock is not enabled.
You can enable alerts in Alarm.com which will notify you if your panel enters programming.
Speaking as someone who does cybersecurity and IT for a living, I would definitely, 100% recommend changing both codes. However as the other commenter stated, it is up to you to not forget those codes.
Nicholas provided some of the tech details of some protections of the system if you have Lock Screen enabled.
However in general I do not believe you should keep the default codes for ease of troubleshooting. (Surety team please fact check me ).
I mean if you are up to the task of DIYing your home security system that keeps your family safe, I’m sure you are capable of remembering two additional codes (or writing them down and storing them in a safe place, etc)
You don’t want some random person at your house - a guest, handyman or other worker, etc - seeing your panel and realizing they can disable a sensor so later when its armed literally walk through that door or window to gain access. Geez - or even your tech savvy teenagers or their friends!! (Especially if you are monitoring the liquor cabinet with the system )
Why not just change it to be more secure and have a greater level of comfort? In my mind, once you change those codes the system is finally yours and you are in control. Until then it’s the same as having your luggage code set to. 12345. (Spaceballs reference lol)
Is there any security-related reason why I should change the dealer and installer codes, or am I safe to leave them as the defaults? Our disarm codes are set as different codes than any of the default codes on the unit.
From a security standpoint, I would always recommend changing default codes on the system to unique codes of your choice. Limiting potential access to settings which can disable/delete/change the behavior of your sensors and system is very important.
You can require the master password to be put in to access installer programming. You would unlock the screen with the dealer code, and it will prompt you to put in the Master password to authorize access. This does not work if screen lock is not enabled.
I would recommend that this is definitely enabled if you do not change one or both of the default programming access codes.
You don’t want some random person at your house - a guest, handyman or other worker, etc - seeing your panel and realizing they can disable a sensor so later when its armed literally walk through that door or window to gain access. Geez - or even your tech savvy teenagers or their friends!! (Especially if you are monitoring the liquor cabinet with the system
This is a big reason why I would always recommend changing them. While the system is armed you cannot manipulate settings. However, the people trying to access the panel for bad reasons (of varying degree) aren’t necessarily going to be coming in while the system is armed.
Great discussion, thanks for the sanity check. Since I do not want to lock the screen (kids aren’t old enough to mess with it yet, and unlocking it would annoy me), it sounds like I can’t hide the default installer/dealer codes behind the master code. I’m going to just manually update all three codes. If I run into trouble I’ll reply here, otherwise please assume that it worked. Thanks everyone.
I agree, great discussion. Just a couple minor points I’d add…
There isn’t a right answer to this question, IMO. I personally agree with others above and change my codes from the defaults but another major DIY Alarm.com provider explicitly recommends not changing your installer and dealer codes because:
They can’t be used to disarm the system, only to program.
You would get a notification from Alarm.com if someone went in and changed settings.
If you change them and forget them it can be difficult to get back in as an installer.
If you’re with Surety and you forget your dealer/installer codes you can always reset them using System Manager so forgetting them isn’t as big a risk.
If you are going to change them, you only really need to remember the dealer code. If you know the dealer code then it can do anything the installer code can do.
)