A hacked neighborhood camera system got me thinking about default passwords

Last week, someone on my block found their outdoor security cameras were streaming to a stranger's phone. They never changed the default login that came with the system. This made me check all my own devices, and I was guilty of the same on my router. It's a simple fix that takes minutes but makes a huge difference. I now change defaults immediately and add a second login step if I can. How does everyone else handle setting up new tech securely?