California’s Internet of Things legislation, SB 327 (2018 | CA), requires consumer goods to:
- come with a unique password per consumer good
- passwords cannot be set to admin or password
- in the alternative, consumer goods can require a statup procedure that requires the consumer to set a password