Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

Yes, some electric-vehicle charging deployments have measurable cybersecurity weaknesses, but the evidence does not show that all chargers are vulnerable or that a named charger model has been successfully hacked in the field. A 2024 study found that only 12% of 325 public CCS DC chargers sampled across four European countries implemented TLS. That is a warning about a defined sample—not a global rate, a finding about home chargers, or proof that the other stations were compromised.

What did the charger security study find?

In Current Affairs: A Security Measurement Study of CCS EV Charging Deployments, Marcell Szakály, Sebastian Köhler, and Ivan Martinovic examined 325 public CCS DC chargers from 26 manufacturers across four European countries. The chargers were manufactured between April 2013 and June 2023, and some were installed as late as May 2024. The authors reported that 12% implemented TLS and that most used a decade-old firmware version for their HomePlug modems.

TLS is a security protocol used to protect communications. The study’s result indicates limited TLS adoption in that sample; it does not establish that every station without TLS was compromised, nor does it measure the current security of every charger or network. The authors said the remainder were vulnerable to attacks demonstrated in earlier work, but that is not evidence of successful intrusions into each sampled station.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The finding applies to public CCS DC deployments in the study’s four European countries. It should not be generalized to residential AC chargers, other charging protocols, all current equipment, or U.S. deployments. The study was published as a 2024 preprint.

#1 Best Overall
ChargePoint HomeFlex Level 2 EV Fast Charger, J1772, Smart, Hardwired, 50A
  • Charge with Confidence: ChargePoint builds reliable, flexible EV charging stations for home, business, and fleets. Get 24/7 support and access to hundreds of thousands of North American charging locations.
  • Charge Smart: With the user-friendly ChargePoint Mobile App, you can control your electric car charger, manage reminders, connect to smart home devices, find stations, get data and charging info, and access the latest features. Note: WiFi is needed for certain functionalities and troubleshooting steps if connectivity issues arise.
  • Vast Network: Wherever you go, ChargePoint’s network includes 274k+ stations across North America and Europe and 565k+ roaming partner stations.
  • Safe & Durable: Rely on this UL-certified EV charger for safe home charging. It can be installed indoors or outdoors by an electrician and includes a cold-resistant cable.
  • Fast & Powerful: This EV charger charges 9× faster than a 120V outlet, delivering up to 45 mi/hr., dependent upon your vehicle. It features a J1772 connector for all non-Tesla EVs and requires a 20A or 80A circuit. For Tesla EVs, this will require an adapter.

Where can weaknesses expose a charging network?

Charging security is not just a question of whether a charger itself has a flaw. NIST’s October 2023 Cybersecurity Framework Profile for Extreme Fast Charging Infrastructure treats the ecosystem as interconnected domains: the vehicle, charging equipment, cloud or third-party operations, and utility or building networks. The profile helps organizations assess and manage risk; NIST says it supplements, rather than replaces, existing cybersecurity programs and standards.

  • The charger: Its firmware, local interfaces, and maintenance access can create opportunities for unauthorized access or tampering.
  • Charger-to-backend communications: The station exchanges information with operator systems used for operations and maintenance.
  • Operator systems and accounts: Weak access controls can put service management, logs, or customer information at risk.
  • Payments and customer data: Connected services can handle personal or transaction-related information.
  • Site and utility networks: A charging site may connect with building or energy systems, but a charger weakness does not automatically give an attacker control of the grid.

The U.S. Joint Office of Energy and Transportation describes charging stations as both grid and transportation assets, connected to external services for maintenance, operations, and user features. Each connection needs to be considered in its own context; a weakness in one layer does not prove the others are exposed.

Rank #2
EVDANCE Level 1&2 EV Charger, Electric Vehicle Portable Charger with 25FT Cable, ETL Listed J1772 EVSE for All EVs & PHEVs, 12A 120V/16A 240V(Black, 16A Max | NEMA 5-15&6-20(Standard Home Plug))
  • Flex Level 1 EV Charger - The EVDANCE Level 1 electric car charger is compatible with J1772 electric vehicles and plug-in hybrid vehicles (North American Standard). *Tesla requires a SAE J1772 adapter.
  • Convenient to Use - This charger has both NEMA 6-20 plug for 16A 240V charging (3.68kW, 10-12 mi/h) and a NEMA 6-20 to 5-15 plug adapter for 12A 120V charging (1.44kW, 2-5 mi/h). The included bag makes it easier to carry on the go. It also has a 25ft cable length, you can use it flexibly from anywhere in the garage or driveway.
  • Check Your Outlet Type -This charger works with standard 120V NEMA 5-15/5-20 outlets (2-5 mph charging speed) and 240V NEMA 6-20 outlets (10-12 mph) . It's not compatible with NEMA 6-15/10-30/14-30/14-50/6-50 outlets – you'll need a NEMA 14-50/14-30/10-30/6-50 to 6-20 adapter (sold separately) to connect.
  • Compatible EV Models -This EV charger works with most major electric vehicles, including Ford, Chevrolet, Hyundai, Audi, Nissan Ariya, Rivian R1S, Kia, and others. However, it's not compatible with Mini Cooper Electric Hardtop,Toyota Prus Prime/Z4X/RAV4Prime, Porsche Taycan Base/4S/Turbo/Turbo S or Tesla models (Tesla requires a J1772 to Tesla Adapter, sold separately). For a full list of compatible models, check out the Full Compatibility List on our product page.
  • Indication Displays - LED display that can tell you the status as well as indicate errors while charging your electric vehicle.

What could an attacker do—and what has been demonstrated?

The U.S. Department of Energy’s Office of Cybersecurity, Energy Security, and Emergency Response (CESER) said on April 10, 2024, that malicious actors could infiltrate devices or networks to access user data, interrupt charging, or potentially affect the grid. These are possible consequences, not a report that a grid blackout or a particular charger compromise occurred.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The measurement study documents security configurations, not a count of successful attacks. The agency and research sources cited here do not identify a named charger model that was successfully compromised in a deployed network. A weak security configuration increases risk; it is not the same as proof of an attack or its impact.

Rank #3
Sale
EVIQO Level 2 EV Charger J1772 40A NEMA 14-50 - 240V Wall Charging Station
  • WORKS WITH EVERY NON-TESLA EV: Standard J1772 connector plugs straight into Ford, Chevrolet, Hyundai, Kia, Nissan, BMW, Volkswagen, Audi, Rivian, Lucid and every other EV or plug-in hybrid sold with a J1772 port - no adapter needed. Tesla drivers can charge too, using the J1772 adapter that comes with the car.
  • PLUG IN, NO HARDWIRING: Level 2 charger delivers up to 40A to fully charge most EVs overnight. Plugs into a 240V, 4-prong NEMA 14-50 outlet (the RV/range type - NOT a dryer outlet) on a dedicated 50A circuit. The extra-long 25 ft cable easily reaches across a garage or driveway. Before ordering, check your car's port type and that you have the right outlet.
  • CONTROL & SAVE FROM YOUR PHONE: A stronger built-in antenna keeps the charger online even in a garage or basement. Use the free app to start/stop charging, set speed (6-40A), get reminders, and track energy use and cost. Schedule off-peak overnight charging to cut your electric bill. Requires 2.4 GHz WiFi.
  • SAFETY-CERTIFIED & WEATHERPROOF: Independently tested and certified (UL, ETL, FCC, Energy Star). A fully sealed IP66 / NEMA 4 housing stands up to rain, snow, heat and dust indoors or out, and internal steel shielding protects the electronics for years of reliable use.
  • GLOW-IN-THE-DARK HOLSTER: The included high-visibility holster glows in the dark so you can find and dock the plug easily at night. Holds the connector securely when not in use.

CESER reported more than 175,000 publicly available U.S. charging stations in its April 10, 2024 article. That is a dated agency figure, not a current station count. CESER also described more than $8 million in cybersecurity research projects planned or invested across 2022–2025, including a $2.4 million, three-year project on EV cybersecurity standards and testing. Those figures describe research activity, not measured improvements in charger security.

How can charging operators reduce risk?

Sandia National Laboratories’ recommended practices focus on operational controls as well as technology. They are guidance for vendors and operators, not a guarantee that any particular charger is secure.

Rank #4
Sale
EVIQO Level 2 EV Charger J1772 48A - Hardwired 240V Wall Charging Station
  • WORKS WITH EVERY NON-TESLA EV: Standard J1772 connector plugs straight into Ford, Chevrolet, Hyundai, Kia, Nissan, BMW, Volkswagen, Audi, Rivian, Lucid and every other EV or plug-in hybrid sold with a J1772 port - no adapter needed. Tesla drivers can charge too, using the J1772 adapter that comes with the car. The extra-long 25 ft cable easily reaches across a garage or driveway.
  • HARDWIRED - PROFESSIONAL INSTALL: This Level 2 charger is hardwired (not plug-in), so a licensed electrician installs it per National Electrical Code. It delivers up to 48A on a dedicated 60A, 240V circuit - enough to charge most EVs fully overnight. Want more speed? You can set DIP switches 4 and 5 to unlock 50A on a dedicated 70A circuit. Before ordering, check your car's port type and that your electrical panel can support the circuit.
  • CONTROL FROM YOUR PHONE: A stronger built-in antenna keeps the charger online even in a garage or basement. Use the free app to start and stop charging, set the charging speed (6-48A), get reminders, and track how much energy and money each charge uses. Requires a 2.4 GHz home WiFi network.
  • SAFETY-CERTIFIED & WEATHERPROOF: Independently tested and certified (UL, ETL, FCC, Energy Star). A fully sealed IP66 / NEMA 4 housing stands up to rain, snow, heat and dust indoors or out, and internal steel shielding protects the electronics for years of reliable use.
  • GLOW-IN-THE-DARK HOLSTER: The included high-visibility holster glows in the dark so you can find and dock the plug easily at night. Holds the connector securely when not in use.
  • Use unique credentials instead of reusing passwords, and restrict maintenance accounts to the people and tasks that require them.
  • Apply access controls and multifactor authentication where supported.
  • Scan for vulnerabilities and unauthorized configuration changes, and maintain a process for applying security updates.
  • Inspect tamper-evident seals as part of physical security checks.
  • Separate information-technology networks from operational-technology networks to limit how far an intrusion can spread.

Network operators also need to consider the service behind the charger: account security, monitoring, incident response, and how quickly vendors disclose and remediate vulnerabilities. A device-level safeguard cannot compensate for unmanaged operator accounts or an exposed backend.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What should buyers and public agencies ask vendors?

The Joint Office provides sample cybersecurity procurement clauses and describes public-key infrastructure work related to secure Plug & Charge. These resources can help shape due diligence, but the questions below are not a universal certification checklist, and no single answer proves a product secure.

Best Value
NexCyber Level 2 EV Charger(WiFi APP/Plug-Play), 48A Nema 14-50p, 25ft Cable ETL Certified, Home Level 2 EVSE Car Charger w/ J1772 Connector, Electric Vehicle Charging Stations (46)
  • [Up to 9x Faster Charging Speed]: Provides up to 46 miles/hour charging speed via hardwired connection (48 amp - up to 9x faster than a standard wall outlet) or up to 38 miles/hour via the NEMA 14-50 plug (40 amp). Professional installation recommended for optimal safety and performance. [Install The Power Outlet Cord]: No smaller than 8AWG if charge 40-48A, we suggest 6AWG cord.(1.The input side is belongs to the electrician electric automobile regulation scope, need to use three 6AWG cable wires for 48A; 2.The charging cable belongs to the automotive connector certification standard, so the 8AWG cable can meet the 48A.)
  • [DESIGNED WITH J1772 Connector for All North America j1772 Connector EVs/PHEVs. Not fits for Tesla/Nacs Connector Cars(j1772 to Tesla adapter needed)]: Compatible with Tesla cars (Adapter needed, not included), Ford, GM, Audi, Kia, Honda, Kia, Hyundai, Gmc, Chevrolet Bolt, VW ID 4, Nissan Leaf, Ford Mustang Mach-E, IONIQ 5 2024 and before, BMW i3, i4, iX, Jeep Wrangler 4xe, etc. [Not fits for Nac connector cars-Kia EV6 2025/EV9,Ariya 2025&2025 loniq 5(J1772 to Tesla adapter needed)]
  • [Safety & Faster Charging with ETL, FCC, Energy Star Certified]: Meets the Safety Criteria Defined by: SAE J1772, UL2231-1/-2, UL 991, UL 2231, UL 2251, UL1998 and UL 2594. (ETL and FCC certified EV car charger with 3-year Warranty)
  • [Plug-play Mode(The Default Setting), Smart Touch Screen, No APP Needed]: Clearly show the charging amperage, charging speed, input voltage, delay time, etc. For the touch buttons: 1. Pull out the charging gun before press the buttons, otherwise no respond; 2. Long press "Ⓐ" or "Time" button to enter the setting interface, then you can adjust the amperage from 16A to 48A freely or Set the charging start time; 3. You can do "factory reset" if doesn't charging.
  • [Smart WIFI APP, You can Set the Charging Period]: By APP, you can wirelessly check the charging cost, history, fully-charged notification, track the charging status, during off-peak period, etc. [Wi-Fi Reset/Factory Reset Function, Add New Device Quickly]: If you can't find your device or you have replaced a new phone, just pull out the charging latches, simultaneously long press the Ⓐ button and time adjustment button on the product screen until it shows "Factory Reset", then wait 3-5 seconds and re-start your device.
  • Does each device have unique credentials, and how are credentials provisioned, rotated, and revoked?
  • Which communications are protected, and what authentication and certificate-management mechanisms are supported?
  • Are software and firmware updates signed or otherwise protected against unauthorized modification?
  • How are vulnerabilities reported, assessed, and patched, and what timelines does the vendor commit to?
  • Can the operator apply least-privilege access, multifactor authentication, logging, and network segmentation?
  • How long will the vendor support the product, and what happens when it reaches end of support?

For Plug & Charge, ask specifically how the public-key infrastructure and certificate lifecycle are managed. Security depends on implementation and ongoing operations, not simply on whether a feature or protocol is listed in a product description.

What should an EV driver make of this?

The available measurement is about public charging infrastructure, not a consumer ranking of home chargers. It does not establish that a particular residential model is safe or unsafe. Drivers can use charging networks while recognizing that charging cybersecurity is a shared responsibility involving equipment makers, network operators, and the organizations that connect stations to other systems.

For organizations buying or operating stations, the practical response is to evaluate the whole deployment—device, communications, operator accounts, backend services, and network connections—rather than treating a charger’s brand or one security feature as a complete security assessment.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.