Nicholas TongUbiquiti UniFi Protect camera system

25 / 46

where the footage lives

5 min read 1,162 words

UniFi network cameras protecting a rack and a workspace

A police officer knocked on my door at 7pm on a Tuesday and asked for footage from the camera above my garage. Something had happened across the street around 4am and he needed eleven minutes of it. He handed me a USB stick, red, with a scratched plastic sleeve still on it, and I went inside to export the clip. The file that came off the system was named something like F2004-2_940_20260902_0412.mp4, 41 seconds long, and it took me four clicks and one failed attempt because the export dialog wants a time range and I gave it a guess. The officer got his footage. Then I sat down and thought about the chain between the sensor on my wall and that red stick, because that chain is the whole product.

The cameras are the visible part of UniFi Protect, but the cameras are not the product. Protect is Ubiquiti's surveillance platform: PoE cameras that talk to a recorder you own, a Dream Machine Pro or SE with a drive in the bay, a rackmount UNVR, or the UNVR-Instant that launched in September 2025 as the first consumer-sized Protect recorder. Cameras start around a hundred dollars and run to four hundred; the current G6 Turret, a 4K PoE camera with on-device AI, lists at $199, and the AI Dome, which does face and license plate recognition on the camera itself, is $399. My own setup, a recorder, a drive, and a handful of cameras, is well past the number where I should say plainly: this is not a purchase recommendation. I paid for it myself, and this is a report, not advice.

the part everyone gets wrong

People shop for cameras by resolution and night vision, and both of those numbers stop mattering the moment you look at where the footage goes. A 4K sensor streaming to somebody else's hard drive is a 4K way of handing your home over to a data broker. Every cloud camera system works the same way: motion happens, the camera uploads, and the vendor holds your footage for as long as you keep paying. Dong Knows Tech, who has reviewed more of these systems than anyone, put it plainly in August: most cloud cameras need a subscription, and the subscription is bad for your wallet, your privacy, and your bandwidth.

Here's the thing. With Protect, the footage never leaves your house unless you send it somewhere. The recorder sits on your network, the retention window is yours, and the export is a local file. That is a genuinely different threat model, and I want to be careful here, because local is not automatically private. Local means you are now the person who is responsible for the drive, the backups, the patching, and the power. The vendor's failures become yours. I accept that trade because I have read too many breach reports about clouds, but it is a trade, and people skip that part of the sales page.

the mechanics

One cable per camera. Power over Ethernet carries the feed and the electricity in the same run, which means a camera is a network device first, and you should treat it like one. Mine sit on the IoT VLAN, on PoE ports with their own profile, and they can reach exactly one destination: the recorder. RTSP, the streaming protocol that would let a camera feed a third-party recorder, exists on UniFi cameras but sits behind a toggle, because the platform wants you inside Protect.

Storage is the part nobody does the math on. A 4K camera at a real bitrate eats on the order of a terabyte every few weeks of continuous recording. With motion events instead, my four cameras and a 12TB drive give me a couple of months of retention, and the dashboard shows me the curve going down as the drive fills. Smart detections run on the camera on the newer models, person, vehicle, the AI Dome's face and plate recognition, so the recorder stores events instead of an ocean of empty frames. On-device detection also means the interesting telemetry, what your cameras see and decide, stays on your hardware. I price that absence of upstream traffic like I price the absence of a cloud account.

where it breaks

Lock-in first. A UniFi camera without Protect is a paperweight with a nice lens. There is no supported third-party NVR path, no HomeKit, no Google Home, no Alexa, and when the platform moves, your hardware moves with it. I knew that at purchase and I still flinched when a camera firmware update broke a detection setting and cost me a Saturday morning.

Then the failure I have actually lived. During a storm two summers ago the power blinked, the recorder came back dirty, and the recordings database came up inconsistent. Six hours of footage from that night became unplayable, which is the exact six hours I would have wanted, and rebuilding the database cost me one Tuesday evening and a slow backup restore. An unclean shutdown corrupts the database; that is a known shape of failure with this platform, and it is the reason a UPS on the recorder is not an accessory, it is the product. I got this wrong for about two years, by the way. My cameras lived on the main VLAN next to my laptop, because they worked and nobody made me segment them. The segmenting was me, late, on purpose.

And the cloud gravity. UniFi wants a cloud account for remote access, and after Ubiquiti's own 2021 cloud breach I decided the account that can see my network topology gets a unique password, hardware-backed two factor, and nothing else. Remote access on my system goes through a VPN I run, which costs me thirty seconds of connection time per use and buys back the question of who is watching the watcher. The AI Dome mostly watches a driveway where nothing happens except rain, and I paid full price for it, and I am at peace with that.

what to do

  1. Put the cameras on their own VLAN, and let them reach the recorder and nothing else.
  2. A UPS on the recorder, always. The recordings database does not survive dirty power.
  3. Decide the retention window on purpose, in days, and check that the drive math matches it.
  4. Export one clip, once, with the sound off, before you need to do it for real. You will learn the dialog costs four clicks and one guess.
  5. Unique password, hardware two factor, remote access over VPN if you need it. The cloud account that can see your cameras is the most valuable credential in the house.

The footage is the product. Everything else, the 4K, the night vision, the plate recognition, is the wrapping around the question of who holds the file when the officer shows up with the red stick.

Export one clip from your camera system tonight, once, on purpose, and notice how hard it was. That difficulty is your chain of custody.