MasaApps360
English
PrivacyScan

How to find hidden cameras connected to Wi-Fi with your iPhone

Join the room's Wi-Fi, open PrivacyScan, tap Scan Network. Eight seconds later you have a list of devices sorted by how much they look like an IP camera — one that advertises RTSP or ONVIF gets a High badge and is worth going to find in person. An empty list is not the same thing as a clean room.

4 min read · Updated 2026-09-16

Download on the App Store

Do hidden cameras use Wi-Fi?

A lot of them, yes. A camera streaming live video to someone's phone has to sit on a network, and in a rental that is usually the same Wi-Fi the host handed you at check-in. These cameras tend to announce themselves with services like RTSP, a video stream, or ONVIF, a camera control standard.

Plenty don't, though. Some only record to a memory card and never touch Wi-Fi at all. Some hosts quietly put cameras on a second network you are not on. Your phone can only ever see what shares the network it joined — that is the whole limit of this method in one sentence.

How PrivacyScan scans the Wi-Fi network for cameras

Under the hood it is Bonjour — the same discovery protocol your iPhone already uses to find a printer or an AirPlay speaker. It asks the network for 15 kinds of service: camera streams, video recorders, web interfaces, file sharing, SSH, AirPlay, printers, HomeKit. Whatever answers gets listed once, tagged with the first service it announced and its IP address when the app can resolve one.

Eight seconds and it stops on its own. Nothing leaves your local network while it runs.

Steps: scan the Wi-Fi in your room

  1. Join the room's Wi-Fi. In a rental, ask the host for the password; on hotel Wi-Fi, finish the login page first.
  2. Open PrivacyScan. On the Scan tab, under Quick Actions, tap Scan Network. Or open the Devices tab, keep the Wi-Fi segment selected and tap Scan at the top right.
  3. The first time, iOS asks for Local Network access. Allow it, or the scan finds nothing.
  4. Wait about 8 seconds until the status reads Scan complete with the number of devices found.
  5. Read the list from the top: it is sorted by camera score, highest first.
  6. Tap any device. The sheet shows Device Information (Hostname, IP Address, Risk Level, Camera Score), the Detected Services with their ports, and What does this mean?. Tap Done to close it.

How to read the camera score

Each device is scored on the single most camera-like service it announces. ONVIF and Axis video sit at 95, RTSP at 90, video recorders 88, a generic camera service 85; down at the other end, FTP is 15, SSH and web 10, file sharing and HomeKit 5, AirPlay and printers and music sharing a flat 2. A camera word in the name — cam, cctv, dvr, nest, ring, dome — tacks on another 40 points, capped at 95.

  • High Risk (60 or more): it announces services IP cameras typically use. Go and find the physical device.
  • Medium Risk (30 to 59): a service a camera could also use, or a camera word in the name. Not conclusive.
  • Low Risk (under 30): an ordinary network device such as a laptop, printer or TV box.
Example: nine devices on one Wi-Fi network, scored the way the app scores them
Device nameService advertisedBase scoreName bonusCamera ScoreBadge
IPCAM-3A7FRTSP stream90+40 ("cam", "ipcam"), capped95High
OfficeRTSP stream90none90High
Reolink-DoorbellONVIF95+40 ("reolink"), capped95High
Nest-HubHTTP10+40 ("nest")50Medium
BOSCH-DishwasherHTTP10+40 ("bosch")50Medium
NAS-BackupSMB + FTP15none15Low
MacBook-ProSSH10none10Low
Living Room Apple TVAirPlay + AirTunes2none2Low
HP-OfficeJet-ProPrinter (IPP)2none2Low

On the Scan tab this set of nine devices would show a Suspicious count of 5 — anything scoring 30 or above. Two of those five are nothing: a smart display and a dishwasher, both tripped up by a brand word in their name. The doorbell, meanwhile, scores identically to an actual hidden camera. That is the catch with this whole score: high does not mean confirmed.

Why the scan can miss a camera

  • Client isolation: many hotel networks stop guests from seeing each other's devices, so the list may be empty.
  • A separate network: a host can run cameras on a second Wi-Fi or on mobile data.
  • A neutral name: a camera called Office that only offers a web page scores 10, Low.
  • No Wi-Fi at all: cameras that record to a memory card, or are switched off, never appear.
  • Not every device: the list shows devices that announce one of the 15 services, not everything connected.

Common mistakes

  • Trusting the ring at the top of the Scan tab. In the current version it always shows 100 and does not reflect the scan. Use the list and the badges.
  • Treating an empty list as a clean room. Follow up with the Bluetooth scan and a physical check.
  • Unplugging a device you are unsure about. Photograph it and ask the host or hotel first.

Questions and answers

How do I find hidden cameras connected to Wi-Fi?
Join the same network, scan for devices announcing camera services like RTSP or ONVIF, then go physically look at whatever matches. In PrivacyScan that is Scan Network, then tapping anything with a High badge.
Can I see the IP address of a suspicious device?
When the app can resolve one, yes — it shows on the row and again under IP Address in the device sheet. Useful for matching a device on screen to a label on a box in the room.
Why does my smart speaker or doorbell show as Medium or High?
The score only looks at services and name words, not what a device actually is. Doorbells use the same video services cameras do, and a brand word like nest or ring adds a flat 40 points.
Does the Wi-Fi scan work on mobile data?
No, it only looks at whatever Wi-Fi network your phone is currently joined to.

You might also like

More PrivacyScan guides