FCC names ioXt Alliance to run the U.S. Cyber Trust Mark for IoT devices

The Federal Communications Commission announced on April 13, 2026 that it selected the ioXt Alliance as the new Lead Administrator of the U.S. Cyber Trust Mark program, replacing the previous administrator. The Cyber Trust Mark is a voluntary cybersecurity labeling program for consumer wireless Internet of Things products, overseen by the FCC's Public Safety and Homeland Security Bureau. ioXt, a U.S.-based nonprofit, will run consumer outreach and recommend additional cybersecurity standards, testing procedures and label design to the Commission. The FCC said it looks forward to working with ioXt to finalize implementation of the program, and noted a greater emphasis on national security under Chairman Brendan Carr.

The program targets consumer products, but small businesses buy many of the same devices: cameras, smart locks, thermostats, doorbells and wireless sensors. These devices are a common weak point because they often ship with weak defaults and receive few updates. A recognized label, once the program is fully running, gives buyers a simple way to favor products that meet a baseline.

Until labeled products are widely available, ask vendors or installers how long a device will receive security updates, whether default passwords must be changed at setup, and whether the device can be placed on a separate network from business systems. Keep an inventory of connected devices in your office, including who installed them and who maintains them.

Because the program is still being implemented, treat the label as one factor rather than a guarantee, and continue to apply basic network separation and update practices.