What does IoT stand for?
IoT stands for Internet of Things. Everyday devices with network connections: cameras, thermostats, smart speakers, light bulbs, locks. They often ship with default passwords and get few updates, so change credentials, keep firmware current and place them on a separate VLAN or guest network.
IoT is the name for everyday and industrial objects that have a network connection: cameras, thermostats, door locks, smart speakers, televisions, sensors. They are small computers, but they are rarely treated like computers. Many ship with default passwords, receive few updates and cannot run security software. The standard advice follows from that: change the default credentials, update the firmware, switch off services that are not needed and put the devices on their own network segment.
IoT in practice: an example
A small office installs four internet-connected cameras and leaves the factory password in place. Weeks later the cameras are part of a botnet. After a reset, the technician sets new passwords, updates the firmware and moves the cameras to a separate VLAN that cannot reach the office computers.
What IoT is confused with
IoT vs OT: what is the difference?
IoT covers connected devices in homes and offices. OT controls industrial and infrastructure processes. Connected industrial sensors sit in the overlap and are often called industrial IoT. What OT stands for
IoT vs IIoT: what is the difference?
The industrial internet of things is IoT technology used in factories and utilities, where the devices feed or control production and the consequences of failure are larger.
Which exams cover IoT?
IoT is on the official CompTIA acronym list for two of the four exams covered here.
- Network+ N10-009: 4.0 (Network Security).
- A+ 220-1201 and 220-1202: 220-1201 2.0 (Networking).
Each number is a CompTIA exam objective and the name in brackets is its domain. The exam puts the term in a scenario; it does not ask you to recite the expansion.
Check yourself: two practice questions
Written by CertSprint for this page. They are not taken from any exam.
1. A technician installs smart thermostats in an office. Which step most reduces the risk they pose to the rest of the network?
- Placing them on the same VLAN as the file server
- Placing them on a separate network segment
- Giving them static public addresses
- Disabling their firmware updates
Show the answer
B. Placing them on a separate network segment. Segmentation limits what a compromised device can reach. Sharing a network with servers or exposing the devices publicly does the opposite.
2. What should be changed first when a new IoT device is set up?
- The colour of the status light
- The default administrator password
- The language of the manual
- The length of the power cable
Show the answer
B. The default administrator password. Default credentials are published and are the first thing automated attacks try.
Sources: NIST IR 8259, Foundational Cybersecurity Activities for IoT Device Manufacturers; NIST glossary: Internet of Things. The acronym and its expansion come from CompTIA's official acronym lists, linked from each exam glossary above. The explanation, example and questions are CertSprint's own, checked against these sources on 11 November 2026.