The cameras record, the customer can watch at home, and now they want the same picture on their phone at work. Knowing how to view NVR remotely is less about the app and more about the path the video takes from the recorder to the internet. There are three common paths, and one of them opens the recorder to anyone who finds it. This guide compares them and covers the setup that keeps the system private.
How do you view an NVR remotely?
To view an NVR remotely, use one of three paths: the maker’s app with its P2P cloud service, a VPN that puts the phone on the home or business network, or port forwarding. Prefer a VPN or the maker’s service, avoid open port forwarding, and change default passwords and update firmware before the recorder goes online.
Three ways to view an NVR remotely
Every remote viewing setup answers one question: how does a phone outside the building reach a recorder inside it? The router blocks unsolicited inbound traffic by default, so something has to make the connection.
| Method | How the phone connects | Exposure to the internet | Best fit |
|---|---|---|---|
| P2P or cloud relay | Through the maker’s server, using a device ID or QR code | No open inbound port; relies on the maker’s service | Homes and small sites that want simple setup |
| VPN | Phone joins the site network through an encrypted tunnel | Only the VPN endpoint is reachable | Businesses, multi-site clients, anyone who wants control |
| Port forwarding | Directly to the recorder’s ports, often by a DDNS name | The recorder’s own login faces the whole internet | Avoid it |
If the recorder is not yet chosen, the network side of the decision is covered in our DVR vs NVR comparison. What follows applies to both.
Maker apps and P2P cloud relay
Most recorders ship with a P2P option. The recorder makes an outbound connection to the maker’s server, the app logs in to the same service by the recorder’s ID or a scanned QR code, and the server brokers the session. Nothing on the router has to be opened, which is why it is the default in most setup wizards.
The trade-off is trust. Access now depends on the maker’s servers, their security and their continued support for the model. Installer forums are split: some members consider current P2P services acceptable, others turn P2P off entirely and use a VPN instead. A reasonable rule is to use P2P only on a recorder still receiving firmware updates, with a strong unique password on the recorder and on the app account.
VPN for security cameras: the private route
A VPN puts the phone on the site network through an encrypted tunnel. The app then connects to the recorder by its local address, exactly as it would on site, and nothing about the recorder is visible from outside. This is the usual answer on installer forums to NVR remote access without port forwarding.
Router VPN or a dedicated device
- VPN server on the router or firewall: many business routers include one. It is the cleanest option because the router is already the network edge.
- Dedicated VPN device or always-on computer: used when the router has no VPN server. It needs its own updates and a reliable power source.
- Overlay VPN service: an agent on a local device joins a private network the phone also joins, which works where the internet connection blocks inbound traffic.
A VPN is only as safe as its endpoint. The CISA and NSA guidance on selecting and hardening VPNs warns that remote access VPN servers are entry points attackers target, and recommends standards-based products, prompt patching and a hardened configuration. Use strong credentials, keep the VPN firmware current and give each user their own login.
Why to avoid port forwarding on a recorder
Port forwarding tells the router to pass outside traffic on chosen ports straight to the recorder, usually paired with a DDNS name so the address survives IP changes. It works, but look at what it exposes.
- The recorder’s login page and service ports become reachable by anyone scanning the internet, not just the owner.
- Forwarding bypasses the router’s firewall, so security now rests on the recorder’s own firmware, which is rarely written to face the open internet.
- Recorders often go years without updates once installed, so any flaw stays exposed.
Watch for UPnP as well. Many recorders ask the router to open ports automatically, with no one seeing it happen. CISA’s home network security guidance advises disabling UPnP unless there is a specific need for it, because malicious software can use it to get past the router’s firewall.
Secure the recorder before it goes online
Whichever path you choose, harden the system on the bench, not after a problem. The same CISA guidance tells users to change default usernames and passwords, to keep software and firmware updated, to turn off remote management on the router and to keep a firewall at the network edge.
- Change every default password: recorder admin, each camera and the router.
- Create a separate, limited user for each person who views remotely; keep the admin account for the installer.
- Update recorder and camera firmware at handover, and note the version on the job record.
- Put the cameras on the recorder’s own PoE ports or on a separate camera VLAN, so a camera cannot reach the rest of the network.
- Turn off UPnP on the router and on the recorder, and turn off P2P if you are using a VPN.
For a separate camera network, plan the switch side first; our guide to PoE injector vs PoE switch helps choose the hardware, and Cat5e vs Cat6 for security cameras covers the cable.
Phone viewing: substreams and upload bandwidth
Remote viewing is limited by the site’s upload speed, not its download speed, and by the phone’s connection. Most recorders keep two streams per camera: a high-resolution main stream for recording and a lower-resolution substream for grids and remote viewing. Set the app to the substream by default and switch to the main stream only for one camera at a time.
The same substream logic drives multi-camera layouts on a wall display, explained in how to show security cameras on a TV. Viewing live does not change what is recorded; retention is a separate sum, worked through in how much storage for security cameras.
Test remote access and hand it over
Test from outside the network. A phone on the site Wi-Fi connects locally and proves nothing, so turn Wi-Fi off and use mobile data.
- Live view loads on the substream, and one camera opens on the main stream.
- Playback of an earlier clip works remotely.
- Push notifications arrive, since some need outbound access from the recorder.
- An online port scan of the site’s public address shows no recorder ports open.
Leave the customer a written record: the access method, the user accounts created, the firmware versions and who to call for changes.
Where to find NVRs and network recorders
The recorders category lists DVRs and NVRs, and network switches are in the Broadband and WiFi division. Both sit alongside cameras in the Security, Surveillance and Control division. For pricing and availability, ask your sales representative through the Bursma contact page, or open a Bursma dealer account.
Frequently asked questions
Can I view my NVR remotely without port forwarding?
Yes. Use the maker’s P2P service or a VPN. Both reach the recorder without opening an inbound port to it, and a VPN keeps the recorder invisible from outside.
Is P2P safe for security cameras?
It avoids open ports but depends on the maker’s servers and support. Use it on a recorder that still gets firmware updates, with strong unique passwords. Where that is in doubt, use a VPN.
Why can I see my cameras at home but not away?
At home the app connects locally. Away, it needs the P2P service, the VPN or a working route through the router. Test on mobile data, and check that the app points to the right address or device ID.
Does remote viewing use a lot of data?
It depends on the stream. Viewing the substream uses far less than the main stream, so set the app to the substream for everyday checks.