Printer security
Also known as: printer security, printer hacking, secure printing, multifunction printer security
Modern printers and multifunction devices are networked computers that store documents, connect to your systems, and can be attacked like any other device.
Printer security -- changing default passwords, updating firmware, securing stored data, and controlling access -- closes an often-overlooked gap that attackers exploit to steal data or gain a network foothold.
Printer security, explained at three levels
At home
Modern printers are basically computers -- they connect to your network, store copies of what you print or scan, and run software. That means they can be hacked. Securing them (like changing the default password) stops them being an easy way in for attackers or a source of leaked documents.
At work
For a business, an unsecured printer is a real risk: it may store sensitive documents, connect to your systems, and often gets ignored in security. Basic steps -- default passwords changed, firmware updated, access controlled -- close a gap attackers are happy to use.
At home
Printer security involves changing default admin passwords, keeping firmware updated, securing or encrypting stored data (many devices retain copies of jobs on internal storage), disabling unused services, and restricting who can print or access the device. Print jobs traveling unprotected across the network can also be intercepted.
At work
Networked printers should be treated as endpoints: segmented from sensitive systems where appropriate, patched, access-controlled, and monitored. Features like secure/pull printing (jobs release only when the user authenticates at the device) prevent sensitive documents sitting in output trays. Data on device storage should be wiped before disposal.
At home
Printers present multiple attack surfaces: management interfaces (often with default or weak credentials), firmware vulnerabilities, stored job data on internal drives, and network protocols. Hardening includes credential management, firmware updates, disabling unnecessary protocols, encrypting stored and in-transit data, and secure decommissioning that wipes internal storage.
At work
In a mature program, multifunction devices are inventoried and managed like other endpoints: network segmentation, patch/firmware management, hardened configurations, authenticated/pull printing, logging, and certified data destruction at end of life (internal drives often retain document images). They're included in vulnerability management and risk assessments, not treated as invisible appliances.
Real-world examples
At home
Thomas never thought about his office printer's security until his MSP pointed out it still had the default admin password, outdated firmware, and stored copies of scanned documents. They secured it -- new password, firmware update, storage encryption -- closing a gap he hadn't known existed.
At work
Nadia's firm handles sensitive documents, so their MSP treated printers as endpoints: segmented on the network, firmware kept updated, and secure 'pull printing' so confidential documents release only when the user authenticates at the device. When old printers were retired, their internal drives were wiped with certified destruction.
Common confusions
- Printers are just output devices with no security risk — Modern printers are networked computers that store data, run software, and can be hacked. They're a genuine attack surface and a potential source of data leaks if left unsecured.
- Printers don't store any of the documents they handle — Many printers and multifunction devices retain copies of print, scan, and copy jobs on internal storage. This data must be protected and wiped before the device is disposed of or returned.
- Printer security isn't worth worrying about for a small business — Attackers exploit overlooked printers to access networks and harvest sensitive documents. Basic hardening is low-effort and closes a real gap, regardless of business size.
For analysts
Treat networked printers as the computers they are -- an overlooked one with default passwords and stored documents is a genuine breach risk. Basic steps (change defaults, update firmware, control access, secure and wipe stored data) are low-effort, and secure/pull printing protects confidential documents.
History & origin
Printers evolved from simple output devices into sophisticated networked multifunction machines with hard drives, operating systems, and internet connectivity. Security, however, often lagged, leaving many with default passwords, outdated firmware, and unprotected stored data. As attackers began exploiting these overlooked devices to access networks and harvest documents, printer security emerged as a recognized part of business cybersecurity.