To secure IoT devices, users should change default passwords, keep software up to date, segment IoT networks from critical systems, implement encryption, and regularly monitor suspicious activity.