ONVIF Is a Handshake and RTSP Is the Video
Two different jobs hide behind these acronyms. ONVIF lets a camera and a recorder discover each other and agree on settings, and RTSP carries the video stream itself.
For a home buyer the practical rule is short. If you ever want the camera to record somewhere other than the maker app, look for a registered ONVIF profile and a documented RTSP path, usually on TCP port 554.
Profile T is the one to want now. ONVIF ends support for the older Profile S on 31 March 2027, and Profile T covers virtually the same features with better authentication.
What the Profile Letters Actually Promise
- ● S and T - live streaming, T adds H.265
- ● G - recording and local storage
- ● A, C, D - access control, not cameras
An ONVIF profile is not a quality rating. It is a fixed set of features that a conformant device and a conformant client must both support, which is what makes two brands work together.
The letters split into two worlds. Some cover video systems and some cover access control, and a camera listing that quotes an access control profile is telling you almost nothing useful.
| Profile | What it covers | Why a homeowner cares |
|---|---|---|
| S | Video streaming, the original video profile | Widest device support today, retiring in 2027 |
| T | Video streaming and playback, adds H.265 and analytics events | The profile to buy now, replaces S |
| G | Video recording and local storage | Needed when the camera or recorder stores footage on site |
| M | Metadata and analytics, video and access control | Person and vehicle events passed to other software |
| A and C | Access control systems | Door controllers and credentials, not cameras |
| D | Access control peripherals, also covers video | Doorbell and entry hardware in mixed systems |
Devices can hold more than one profile at once. ONVIF gives the example of a network camera with local storage conforming to both Profile T and Profile G.
That combination is the one to look for if you want footage kept on a card or a recorder rather than in a subscription. Our guide to a home security camera without a monthly fee covers the storage side of that decision.
Why Profile S Is Being Retired in 2027
ONVIF has published an end date for Profile S, and the reason is security rather than age. The authentication mechanisms specified in Profile S are no longer consistent with current cybersecurity recommendations.
The mechanics matter if you are buying this year. After 31 March 2027, manufacturers cannot submit new products, or older products carrying new firmware, for Profile S conformance.
There is an earlier deadline hiding inside that one. The June 2026 version of the ONVIF conformance test tools carries a 9-month validity period, and it is the last version that lets a manufacturer claim Profile S conformance.
Existing Profile S equipment keeps working. What changes is that a camera bought in 2027 with only a Profile S claim is standing on a certification nobody can renew.
Profile T is the stated replacement and contains virtually all of the Profile S features. Treat a Profile T listing as the safer buy for anything you expect to keep for five years.
Where the RTSP Stream Lives on Your Network
- ● Default is TCP port 554
- ● Stream path differs by manufacturer
- ● Never forward 554 to the internet
RTSP is the older and simpler half of the pair. It is a streaming protocol, it usually listens on TCP port 554, and it hands over H.264 or H.265 video to whatever asks correctly.
The address follows a predictable shape, and only the tail differs between manufacturers.
rtsp://username:password@192.168.1.42:554/stream1 # main stream
rtsp://username:password@192.168.1.42:554/stream2 # substream, lower bitrate
The path after the port is the part you cannot guess. TP-Link publishes the exact strings for Tapo cameras in its support articles, and most brands that support RTSP do the same.
Codec choice changes what your network has to carry. H.265 cuts the bandwidth of a stream by up to half compared with H.264, which is the difference between four cameras being watchable over Wi-Fi and not.
One rule has no exceptions. Do not forward port 554 through your router, because that publishes both the video and the camera login to anyone scanning the internet.
Reach it over a VPN back to your home network instead. If the camera lives on a separate network segment, our note on smart home devices on a guest network covers how that changes discovery.
What a Camera Without These Two Gives Up
A camera with no ONVIF profile and no RTSP path is one that only its own app can watch. That is fine until one of three things happens.
The first is a subscription change. Without a local stream you have no route to keep recording when the plan you relied on gets repriced or restructured.
The second is a recorder. Mixing brands on one network video recorder is exactly the problem ONVIF was written to solve, and a closed camera cannot join.
The third is the end of the product. When a brand shuts down its servers, an open stream is the difference between a working camera and a plastic shell, as described in our piece on what happens when a smart home brand shuts down.
None of this makes a closed camera a bad buy. It makes it a rental rather than a purchase, and the price should reflect that.
Which Camera Setup Fits Your House
- ● One camera, one app - support is optional
- ● Mixed brands on one recorder - Profile T
- ● Long retention on site - add Profile G
One camera watching a porch, viewed on a phone: Neither standard is required. Buy on image quality and alert accuracy, and treat ONVIF as a bonus that keeps your options open later.
Three or more cameras from different brands: Insist on a registered Profile T device. This is the case ONVIF exists for, and mixed brands without it turn into three apps and no unified timeline.
Footage kept on site rather than in the cloud: Look for Profile G alongside the streaming profile. Recording and storage are a separate conformance area from streaming, and a Profile T only camera may not expose recordings the way your recorder expects.
A wired system you expect to keep for a decade: Avoid a Profile S only listing from 2026 onward. The certification cannot be renewed after March 2027, so buy the replacement profile now.
Renters who may take the system with them: Prioritise RTSP with a documented path over profile depth. A camera you can point at any software moves house more easily than one tied to a hub.
Four Listing Claims That Do Not Survive Checking
The first is ONVIF compatible. ONVIF states that conformance to a profile is the only thing that ensures compatibility between products, so a compatibility claim without a registration is marketing language.
The second is a profile letter with no version behind it. Ask which profile, then look the model up rather than trusting the box.
The third is RTSP support that turns out to be firmware dependent. Several brands ship RTSP disabled, or removed it in an update, so check the current firmware notes and not an old review.
The fourth is a rating that belongs to a sibling model. Wired and battery versions of the same camera often differ here, because a battery camera streaming continuously would not last a day.
Battery models deserve a second look for that reason. Continuous RTSP and battery power pull against each other, which is part of the tradeoff in our comparison of wired and wireless security cameras.
The Client Side Needs Conformance Too
Half the ONVIF question sits on the recorder. A profile is a contract between a conformant device and a conformant client, so the software you record with has to hold up its end.
That is why a certified camera can still refuse to appear in a piece of free recording software. The camera met the standard and the client never claimed to.
Check the profile letters on both sides before assuming a mismatch is a camera fault. Most recorder projects and NVR makers publish the profiles they implement.
Stream choice is the other setting people miss. Cameras usually expose a high bitrate main stream and a lower bitrate substream, and recording the substream continuously while pulling the main stream for events keeps storage and Wi-Fi load sane.
Analytics travel separately again. If you want person or vehicle events handed to other software rather than reinvented by it, that is Profile M territory, not Profile T.
Check the Conformance Page Before You Buy
ONVIF runs a public list of conformant products, and it is the only place a claim can be confirmed. Searching the exact model number takes under a minute and settles the question the product page leaves open.
Do that check, note the profile letters, then find the manufacturer support article that prints the RTSP path. Two pages, two facts, and you know whether the camera will still be useful when its app is not.
If both come back empty, buy the camera on its merits as a closed appliance. Just do not pay a premium expecting an openness that was never certified.
Resolution claims deserve the same scepticism as protocol claims, since 2K carries no definition at all. Our guide to what 2K and 4K mean on a camera box converts the badges into pixel dimensions and the upload speed each one needs.
FAQ
What is the difference between ONVIF and RTSP?
ONVIF is the handshake that lets a camera and recorder find each other and agree on settings. RTSP is the protocol that carries the actual video once they have agreed.
Is ONVIF Profile S being discontinued?
ONVIF has announced that support for Profile S ends on 31 March 2027. Existing equipment keeps working, but manufacturers can no longer certify new products or new firmware against it after that date.
Does every camera expose RTSP on port 554?
Usually yes, on TCP port 554, which is the default for the protocol. The stream path differs by manufacturer, so check the support page for your exact model rather than guessing.
Can I open port 554 on my router to watch from outside?
No. Port forwarding 554 to the internet exposes the stream and the camera login to anyone scanning for it. Use a VPN back to your home network instead.
Does ONVIF support guarantee my recorder will work with the camera?
Only if a product is registered as conformant. ONVIF states that conformance to a profile is the only thing that ensures compatibility, so a listing that says ONVIF compatible without a registration is a weaker claim.
Sources
- NIST Cybersecurity for IoT — checked 2026-09-08
- ONVIF: ONVIF to End Support for Profile S; Recommends Profile T as Replacement — checked 2026-09-29
- ONVIF: Profile S Deprecation Q&A — checked 2026-09-29
Some links may be affiliate links. We may earn a commission at no extra cost to you.
This article was written with AI assistance. It is researched and fact-checked, not based on personal hands-on testing unless explicitly stated.
No comments:
Post a Comment