Hikvision ports explained: 80, 443, 554, 8000 and what to forward

Hikvision ports explained: a Hikvision NVR, DVR or camera uses port 80 for its web page, 443 for the secure web page, 554 (or 10554) for RTSP video, and 8000 as the server port that apps and iVMS-4200 connect to. For remote access by IP, Hikvision's US support says to forward the HTTP port for a browser, and the server and RTSP ports for its apps. You can avoid opening any of them with Hik-Connect or a VPN, which is the safer route. HikGrid (our app), a native Mac app for viewing Hikvision and HiLook cameras, can sign in through Hik-Connect with no port forwarding.

Updated November 2026.

Hikvision default ports at a glance

Source: Hikvision USA's network port list for DVRs and NVRs. Older Hikvision IP cameras also used the server port plus 200 (8200 by default), according to a 2012 Hikvision bulletin. HikGrid is independent and not affiliated with Hikvision or HiLook.

What each Hikvision port does

Port 80 and 443: the web page

Type the recorder's address into Safari or Chrome and you reach its web page on port 80, or 443 if HTTPS is set up. That page is where you change settings. On a Mac, its live view runs in plugin-free mode on supported firmware, and Hikvision's support table lists no playback or video download in that mode. See the best browser for Hikvision on a Mac.

Port 554 or 10554: RTSP video

RTSP carries the video itself. Hikvision's US support says the RTSP port defaults to either 554 or 10554, depending on the device, and both can be changed (Hikvision support). If you are building a stream address for VLC or another player, our guide to the Hikvision RTSP URL format covers channel numbers.

Port 8000: the server port

Port 8000 is the one that confuses people, because no browser uses it. It is the server port, sometimes called the service or SDK port, and Hikvision's software connects to it. Hikvision's support article lists it, together with the RTSP port, as what the mobile app and iVMS-4200 need for direct IP access.

The ports you can't change

Hikvision's port list also includes UDP ports 62000 to 65000 for live view over UDP, and ports 9010 and 9020 for its cloud platform, all marked as not configurable. You don't forward these for normal remote viewing.

Which ports to forward, according to Hikvision

Hikvision USA's support article on direct IP remote access splits it by how you connect:

• Web browser: the HTTP port, 80 by default.
• Hik-Connect app or iVMS-4200 on a PC, by IP: the server port, 8000 by default, and the RTSP port, 554 or 10554.

Each forward sends traffic arriving at your router's public address on that port to the recorder's local IP. The recorder needs a fixed local IP for this to keep working, and you need either a static public IP or a dynamic DNS name. If your internet provider uses CGNAT, as Starlink and most 4G and 5G services do, forwarding won't work at all: see Hikvision remote viewing behind CGNAT.

Why opening Hikvision ports is risky

Hikvision itself warned in a 2010 bulletin that port forwarding may reduce the security of your network (Hikvision technical bulletin). The clearest example since is CVE-2021-36260, a command injection flaw in the web server of some Hikvision products. Hikvision released a fix in September 2021 (Hikvision security notice). The US cybersecurity agency CISA added it to its Known Exploited Vulnerabilities catalog in January 2022. It was used by the Mirai-based Moobot botnet (Security Affairs), and researchers found more than 80,000 unpatched cameras exposed online in 2022 (BleepingComputer).

If you do forward ports:

• Update the recorder and camera firmware first.
• Use a long, unique admin password, and a separate lower-privilege user for viewing.
• Forward only the ports your apps actually need. The web page rarely needs to be reachable from the internet.
• Turn off UPnP on the router and the recorder, so nothing opens ports without you knowing.
• Changing the external port number cuts noise from scanners, but it is not real protection.

Remote access without opening ports

• Hik-Connect: the recorder connects out to Hikvision's cloud, so no forwarding is needed. Hikvision limits cloud live view to 5 minutes at a time. See the Hik-Connect 5-minute limit.
• A VPN or Tailscale: you join your home network securely, then connect to the recorder's local IP as if you were at home. Tailscale can run as a subnet router on a small computer or an Apple TV.

How to find or change the ports on your recorder

1. Log in to the recorder's web page from a computer on the same network.
2. Open the network settings. On many firmware versions the ports sit under Configuration > Network, on a Port tab, but menu names vary by model and firmware.
3. Note the HTTP, HTTPS, RTSP and server ports. Change one only if it clashes with something else, or if your installer asks you to.
4. If you change a port, update your router's forwarding rules and every app that connects to the recorder.

On Windows, Hikvision's SADP tool also shows device ports. The Mac version is old and Intel-only: see SADP tool on Mac.

Ports and Mac apps

On a Mac, the browser uses the HTTP or HTTPS port, VLC uses the RTSP port, and iVMS-4200 uses the server port. On macOS 15 Sequoia and later, any of them can also be blocked on your home network by the Local Network permission, even with every port correct. If an app can reach the recorder remotely but not at home, read our guide to the macOS Local Network permission.

HikGrid (our app) connects to Hikvision and HiLook recorders by local IP, by remote IP or domain, or through Hik-Connect. Its compatibility page says a remote-IP connection usually needs a port forward on your router plus a fixed IP or dynamic DNS name. Signing in with Hik-Connect needs no forwarding. It gives you live view, playback, recording search and footage download, natively on Apple silicon and Intel Macs.

FAQ

What is port 8000 on a Hikvision NVR?

It is the server port, also called the service or SDK port. Hikvision's software, such as iVMS-4200 and its mobile apps, connects to it when you add a recorder by IP. Browsers use port 80 or 443 instead.

Which ports does Hikvision say to forward for remote access?

Hikvision's US support says to forward the HTTP port (80) for browser access, and the server port (8000) plus the RTSP port (554 or 10554) for the Hik-Connect app and iVMS-4200 by IP. Hik-Connect's cloud connection needs no forwarding.

Is port 554 or 10554 the Hikvision RTSP port?

Either, depending on the device. Hikvision's support says the RTSP port defaults to 554 or 10554 and can be changed. Check the port settings on your recorder's web page.

Is it safe to port forward a Hikvision NVR?

It carries real risk. CVE-2021-36260, a flaw in the web server of some Hikvision products, is on CISA's list of actively exploited vulnerabilities. If you forward ports, update the firmware, use strong passwords and forward only what you need. Hik-Connect or a VPN avoid open ports altogether.

Do I need to forward ports to use HikGrid?

Not if you sign in with Hik-Connect, which needs no port forwarding. On your home network you connect by local IP. HikGrid's compatibility page says a remote-IP connection usually needs a port forward plus a fixed IP or dynamic DNS name.

Sources

• Hikvision USA: network port list for DVRs and NVRs
• Hikvision USA support: What port forwards are required for direct IP remote access?
• Hikvision technical bulletin: port forwarding (2012)
• Hikvision technical bulletin: port forwarding and router configuration (2010)
• Hikvision: security notification, command injection vulnerability (September 2021)
• CISA: Known Exploited Vulnerabilities catalog, CVE-2021-36260
• Security Affairs: Hikvision cameras vulnerability (2022)
• BleepingComputer: Over 80,000 exploitable Hikvision cameras exposed online (2022)
• LearnCCTV: Default ports for Hikvision DVR and NVR
• HikGrid: compatibility page