Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix NowHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk4 min

Are EV Chargers Vulnerable to Hacking? What the Evidence Shows

A study of 325 public CCS DC chargers in four European countries found that 12% implemented TLS. Here is what the finding does—and does not—show about charging security.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Yes, some electric-vehicle charging deployments have measurable cybersecurity weaknesses, but the evidence does not show that every charger is vulnerable or that a named charger model has been successfully hacked. A 2024 study of 325 public CCS DC chargers across four European countries found that 12% implemented TLS. That is a finding about a defined sample—not a global rate, a result for home chargers, or proof that every charger without TLS was compromised.

What the charger-security study found

In Current Affairs: A Security Measurement Study of CCS EV Charging Deployments, Marcell Szakály, Sebastian Köhler, and Ivan Martinovic examined 325 public CCS DC chargers from 26 manufacturers in four European countries. The chargers were manufactured between April 2013 and June 2023, and some were installed as late as May 2024. The authors report that 12% implemented TLS, a protocol used to protect communications.

As an Amazon Associate I earn from qualifying purchases.

The study also reports that most chargers used a decade-old firmware version for their HomePlug modems. Its findings describe the equipment and deployments measured; they do not establish the present-day security of every charger, identify a global prevalence rate, or apply automatically to residential AC chargers, other charging protocols, or U.S. deployments. The paper says the remainder were vulnerable to attacks demonstrated in earlier work, but that does not mean each unencrypted station was successfully compromised.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Where charging infrastructure can be exposed

A charging station is part of a connected system, not an isolated appliance. NIST’s October 2023 Cybersecurity Profile for Electric Vehicle Extreme Fast Charging Infrastructure describes an ecosystem spanning the vehicle, charging equipment, cloud or third-party operations, and utility or building networks. The Joint Office of Energy and Transportation likewise describes charging stations as both grid and transportation assets, connected to external services for maintenance, operations, and user features.

#1 Best Overall
ChargePoint HomeFlex Level 2 EV Fast Charger, J1772, Smart, Hardwired, 50A
  • Charge with Confidence: ChargePoint builds reliable, flexible EV charging stations for home, business, and fleets. Get 24/7 support and access to hundreds of thousands of North American charging locations.
  • Charge Smart: With the user-friendly ChargePoint Mobile App, you can control your electric car charger, manage reminders, connect to smart home devices, find stations, get data and charging info, and access the latest features. Note: WiFi is needed for certain functionalities and troubleshooting steps if connectivity issues arise.
  • Vast Network: Wherever you go, ChargePoint’s network includes 274k+ stations across North America and Europe and 565k+ roaming partner stations.
  • Safe & Durable: Rely on this UL-certified EV charger for safe home charging. It can be installed indoors or outdoors by an electrician and includes a cold-resistant cable.
  • Fast & Powerful: This EV charger charges 9× faster than a 120V outlet, delivering up to 45 mi/hr., dependent upon your vehicle. It features a J1772 connector for all non-Tesla EVs and requires a 20A or 80A circuit. For Tesla EVs, this will require an adapter.

Charger and vehicle communications

Connections between a vehicle and charger, and between the charger and its operator, need appropriate protection and authentication. Weakly protected communications can create opportunities for interference or unauthorized access, but a weakness in one interface does not by itself establish control of the vehicle or the wider network.

Operator accounts and backend systems

Charging networks depend on operator software, remote maintenance, and accounts that manage stations. Poorly controlled maintenance access or reused credentials can increase risk. A station’s security therefore depends partly on how its operator manages accounts, permissions, monitoring, and software updates.

Rank #2
EVDANCE Level 1&2 EV Charger, Electric Vehicle Portable Charger with 25FT Cable, ETL Listed J1772 EVSE for All EVs & PHEVs, 12A 120V/16A 240V(Black, 16A Max | NEMA 5-15&6-20(Standard Home Plug))
  • Flex Level 1 EV Charger - The EVDANCE Level 1 electric car charger is compatible with J1772 electric vehicles and plug-in hybrid vehicles (North American Standard). *Tesla requires a SAE J1772 adapter.
  • Convenient to Use - This charger has both NEMA 6-20 plug for 16A 240V charging (3.68kW, 10-12 mi/h) and a NEMA 6-20 to 5-15 plug adapter for 12A 120V charging (1.44kW, 2-5 mi/h). The included bag makes it easier to carry on the go. It also has a 25ft cable length, you can use it flexibly from anywhere in the garage or driveway.
  • Check Your Outlet Type -This charger works with standard 120V NEMA 5-15/5-20 outlets (2-5 mph charging speed) and 240V NEMA 6-20 outlets (10-12 mph) . It's not compatible with NEMA 6-15/10-30/14-30/14-50/6-50 outlets – you'll need a NEMA 14-50/14-30/10-30/6-50 to 6-20 adapter (sold separately) to connect.
  • Compatible EV Models -This EV charger works with most major electric vehicles, including Ford, Chevrolet, Hyundai, Audi, Nissan Ariya, Rivian R1S, Kia, and others. However, it's not compatible with Mini Cooper Electric Hardtop,Toyota Prus Prime/Z4X/RAV4Prime, Porsche Taycan Base/4S/Turbo/Turbo S or Tesla models (Tesla requires a J1772 to Tesla Adapter, sold separately). For a full list of compatible models, check out the Full Compatibility List on our product page.
  • Indication Displays - LED display that can tell you the status as well as indicate errors while charging your electric vehicle.

Payment, customer data, and connected sites

Charging services may handle user data and connect to site systems. The U.S. Department of Energy’s Office of Cybersecurity, Energy Security, and Emergency Response (CESER) says malicious actors could infiltrate devices or networks to access user data, interrupt charging, or potentially cause a grid blackout. CESER’s statement describes possible consequences, not a reported blackout or a demonstrated attack on a named charger.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What a weakness could mean—and what has not been established

The realistic concerns include exposure of user information and interruption of charging. Broader effects depend on how equipment is deployed and connected, what access an attacker obtains, and what safeguards an operator has in place. A vulnerable charger does not automatically provide a path to a utility network, and the evidence summarized here does not document a successful compromise of a named deployed charger model or a successful grid attack.

Rank #3
Sale
bokman Portable Level 1&2 EV Charger, 16A 20ft, NEMA 6-20P/5-15 Adapter
  • Road-Trip Ready & Apartment-Friendly: Comes with a 20ft heavy-duty cable that easily spans a standard parking space, plus a NEMA 5-15 adapter for plug and play convenience. Whether you're charging at home or hitting the highway, this portable EV Charger is your ultimate travel companion for weekend getaways and camping trips
  • Delay Timer & Adjustable Current: Use the built-in timer to delay your start by 1-12 hours and easily harvest off-peak energy savings. Then pick from 6/8/10/12/16A (Level 2) to match your garage grid. It automatically locks in your favorite setting and never forces you to re-adjust. No complicated apps or Wi-Fi needed, just straightforward, reliable control
  • Tactile Buttons & LED Screen: No glitchy smartphone apps or finicky touchscreens that lag, freeze, and misfire in winter. Our EV charger is engineered with a high-definition LED display that tracks critical real-time data, including live voltage and current. Tactile buttons deliver direct, satisfying click feedback that remains highly responsive even when wearing heavy winter gloves or operating in torrential downpours—conditions where standard touchscreens completely fail
  • ETL Certified Safety & IP65 All-Weather Shield: ETL certified to meet US safety standards for charging. Engineered with a certified IP65 dust-and-waterproof enclosure and a heavy-duty TPE cable that operates reliably across a wide -22°F to 130°F range. An intelligent multi-protection defense system (GFCI, over-voltage, over-current, surge, short-circuit, and over-temp) keeps a 24/7 watch for 100% safe, unattended overnight charging in any weather
  • J1772 Compatible + Dual-Level Charging: Works with all J1772 EVs (Tesla requires a separate J1772 adapter). Level 2: built-in NEMA 6-20 plug. Level 1: included NEMA 5-15 adapter fits any standard outlet. Please confirm your outlet is NEMA 6-20 or 5-15 before purchase

The 2024 study’s TLS finding is a warning about security practices in its sample, not proof that TLS alone makes a charger secure. Security also depends on such measures as authentication, access control, update integrity, patching, and network design.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

How operators and vendors can reduce risk

Sandia National Laboratories’ recommended practices focus on basic controls that apply to charging infrastructure operations. They are practices for operators and vendors, not a guarantee that any particular consumer charger is secure.

Rank #4
Sale
EVIQO Level 2 EV Charger J1772 40A NEMA 14-50 - 240V Wall Charging Station
  • WORKS WITH EVERY NON-TESLA EV: Standard J1772 connector plugs straight into Ford, Chevrolet, Hyundai, Kia, Nissan, BMW, Volkswagen, Audi, Rivian, Lucid and every other EV or plug-in hybrid sold with a J1772 port - no adapter needed. Tesla drivers can charge too, using the J1772 adapter that comes with the car.
  • PLUG IN, NO HARDWIRING: Level 2 charger delivers up to 40A to fully charge most EVs overnight. Plugs into a 240V, 4-prong NEMA 14-50 outlet (the RV/range type - NOT a dryer outlet) on a dedicated 50A circuit. The extra-long 25 ft cable easily reaches across a garage or driveway. Before ordering, check your car's port type and that you have the right outlet.
  • CONTROL & SAVE FROM YOUR PHONE: A stronger built-in antenna keeps the charger online even in a garage or basement. Use the free app to start/stop charging, set speed (6-40A), get reminders, and track energy use and cost. Schedule off-peak overnight charging to cut your electric bill. Requires 2.4 GHz WiFi.
  • SAFETY-CERTIFIED & WEATHERPROOF: Independently tested and certified (UL, ETL, FCC, Energy Star). A fully sealed IP66 / NEMA 4 housing stands up to rain, snow, heat and dust indoors or out, and internal steel shielding protects the electronics for years of reliable use.
  • GLOW-IN-THE-DARK HOLSTER: The included high-visibility holster glows in the dark so you can find and dock the plug easily at night. Holds the connector securely when not in use.
  • Use unique credentials rather than reusing passwords across devices or systems.
  • Limit maintenance accounts and grant only the access needed for each role.
  • Apply access controls and use multifactor authentication where supported.
  • Scan for vulnerabilities and unauthorized configuration changes.
  • Inspect tamper-evident seals where they are used.
  • Separate information-technology (IT) networks from operational-technology (OT) networks where appropriate.
  • Maintain a process for secure updates and timely remediation of vulnerabilities.

NIST IR 8473 is a risk-management profile intended to help organizations assess their security posture and supplement existing programs and standards; NIST explicitly says it is not a replacement for them.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Questions to ask when procuring charging equipment

The Joint Office provides sample cybersecurity procurement clauses and describes public-key infrastructure work related to secure Plug & Charge. Those resources make procurement and security design part of the response, but there is no universal checklist here that certifies a charger as secure. Operators and buyers can ask vendors for product- and deployment-specific answers on:

  • Whether communications use supported secure protocols and how certificates or other authentication are managed.
  • Whether credentials are unique and how administrative and maintenance access is controlled.
  • How software and firmware updates are authenticated and protected against unauthorized changes.
  • How the vendor handles vulnerability reports, patch timelines, and equipment that reaches end of support.
  • What security events are logged and how operators can monitor or investigate them.
  • How the charger and its management systems can be segmented from business, site, or utility networks.

Answers should be tied to the specific product, software version, operator configuration, and support commitment. A general statement that a product is “secure” does not resolve those questions.

What the U.S. figures do—and do not—say

In an April 10, 2024 article, DOE CESER reported more than 175,000 publicly available charging stations in the United States. That is the agency’s figure at that time, not a current station count or a measure of how many stations had security weaknesses. CESER also described a $2.4 million, three-year project on EV cybersecurity standards and testing, and more than $8 million in cybersecurity research projects planned or invested across 2022–2025. Those program figures indicate research activity; they do not measure security outcomes.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.