Regulatory Compliance News

Korea Issues New IP Camera Password Security Rules under RRA Notice No. 2025-659

The Korean National Radio Research Agency (RRA) has published Public Notice No. 2025-659, introducing new mandatory password security requirements for IP cameras. This update is part of a joint government effort to enhance cybersecurity and prevent unauthorized access to video surveillance devices.

The proposed regulation is scheduled for adoption on November 26, 2025 and will enter into force six months later, on May 26, 2026.

Key Requirements for IP Camera Manufacturers

All IP cameras must include secure password features to meet the updated standard. Devices must implement the following:

• Passwords must be:
  • At least 8 characters with 3 combinations (uppercase, lowercase, numbers, symbols), or
  • At least 10 characters with 2 combinations
• Login attempts must be temporarily locked after 5 consecutive incorrect entries (lockout duration between 30 seconds and 60 minutes)

These requirements apply to all IP-based video surveillance devices capable of transmitting or accessing video or device controls over wired or wireless networks.

Exceptions for Cloud-Connected Devices

IP cameras that operate through cloud services may be exempt from the above password rules if they comply with the national standard KS X 3078, which outlines alternate testing methods for network-connected terminal equipment.

Implementation Timeline

- Adoption Date: November 26, 2025
- Effective Date: May 26, 2026 (6 months after adoption)
- Transitional Provision: Devices submitted for conformity assessment before the effective date will remain subject to the previous rules.

Manufacturers intending to sell IP camera products in South Korea should review their current password implementation and prepare product updates as necessary to remain compliant with the new standard.