FCC taps ioXt for cyber labels
The FCC has chosen the ioXt Alliance to run its cyber‑labelling programme for connected devices, moving the initiative forward after the previous administrator stepped back. The selection sets a potential baseline for how cameras, sensors, intercoms and badge readers will be evaluated and communicated to buyers. (nextgov.com)
The Federal Communications Commission picked the ioXt Alliance on April 13 to run the U.S. Cyber Trust Mark, its cyber label for connected consumer devices. (fcc.gov) The program is voluntary and covers wireless consumer Internet of Things products, the category that includes smart home gear like cameras, doorbells, speakers, thermostats and baby monitors. Products that qualify can carry a shield logo and a quick-response code that links buyers to a public registry with security details. (fcc.gov) (federalregister.gov) The Federal Communications Commission created the label in March 2024, and the White House formally launched it on January 7, 2025 with backing from companies including Amazon, Best Buy, Google, LG Electronics, Logitech and Samsung. The label was pitched as an Energy Star-style signal for cybersecurity. (docs.fcc.gov) (bidenwhitehouse.archives.gov) A cyber label works like a nutrition label for software and hardware: it tells shoppers whether a device meets a minimum security baseline before they bring it into a home or office network. The Federal Communications Commission based that baseline on National Institute of Standards and Technology work covering basics like unique default passwords, software updates, data protection and incident detection. (csrc.nist.gov) (docs.fcc.gov) This appointment also restarts a program that stalled after its previous lead administrator, UL Solutions, withdrew in December 2025. That exit followed scrutiny from Federal Communications Commission Chairman Brendan Carr over alleged China ties tied to testing operations and other program participants. (nextgov.com) (fcc.gov) The lead administrator does not test every gadget itself. The job is to coordinate the system, recommend standards and testing procedures, manage the registry and work with Cybersecurity Label Administrators and accredited labs that review products. (fcc.gov) (docs.fcc.gov) ioXt was already in the program before this week. The group had been approved as a Cybersecurity Label Administrator, one of the entities allowed to authorize use of the mark after products are tested against the Federal Communications Commission’s criteria. (ioxtalliance.org) (fcc.gov) In its April 13 notice, the Federal Communications Commission said ioXt will serve as the new lead administrator for the program’s “operational integrity, coordination, and continued advancement.” Chairman Brendan Carr said the choice was meant to keep the label aligned with the program’s consumer-protection and national-security goals. (docs.fcc.gov) (businesswire.com) What happens next is less about logos than process. Manufacturers still need approved testing, authorization to use the mark and a live registry entry before a labeled device reaches store shelves. (fcc.gov)