California bans default passwords on any internet-connected device
 

In less than two years, anything that can connect to the internet will come with a unique password — that is, if it's produced or sold in California. The "Information Privacy: Connected Devices" bill that comes into effect on January 1, 2020, e...

https://www.engadget.com/2018/10/05/...-devices-bill/