Super Live Plus App
Support & Repair in
New York City

How the building changes the method

Basements and cellars. Many outer-borough recorders sit below grade next to the gas meter, where a phone has no signal and the router is two floors up. We test the cable from the recorder to the router before blaming the app, because a single damaged run through an old floor joist produces exactly the “sometimes online” behavior owners describe in reviews. And we always run the final test from the sidewalk on mobile data.

Shared and bulk internet. In buildings where one provider serves every apartment, or where a NYCHA resident is on Big Apple Connect, the resident does not control the upstream router. Port forwarding is either impossible or not ours to ask for. The SuperLive Plus manual’s QR method, with the recorder’s NAT setting on, needs only an outbound connection, so it is the method we use there. If a building’s network blocks even that, we say so instead of leaving a half-working setup.

5G and hotspot connections. More city shops and apartments run on 5G home gateways or a spare phone as a hotspot. These connections sit behind carrier-grade NAT, so any setup built on a public address and an open port fails silently. They also carry less upload bandwidth than a cable line, which is why live view may work while multi-channel playback struggles. We set the recorder’s substream so the phone asks for less, and we tell the owner plainly what the connection can carry.

Old wiring and leaks. A water-stained ceiling over a camera, a coax run that shared a chase with a steam pipe, a power supply on a shared outlet — the older the building, the more often an “app problem” turns out to be a camera that is not reaching the recorder at all. We check every channel on the recorder’s own monitor before we touch a phone.

Connection method and the city’s internet

We switched the shop to 5G home internet and Super Live Plus went dark the same week — what changed?

The recorder did not change; the road to it did. If your phones reach the recorder by a public IP address or a dynamic domain name with a port number on the end, they depend on a port forward on your router. On a cable or fiber line that works because the router has a public address. A 5G home gateway sits behind carrier-grade NAT, which means the router never receives a public address, and, as users of T-Mobile’s service point out, a port forward on your own router cannot open the matching port at the carrier’s layer. Nothing from outside ever arrives.

The fix is to stop depending on inbound connections. The SuperLive Plus manual describes adding a recorder by scanning its QR code, which identifies it by MAC address or serial number and connects through the maker’s peer-to-peer service; it notes the recorder must support QR and have NAT enabled when the phone and the recorder are on different networks. We turn NAT on at the recorder, re-add the device to each phone by QR, delete the old address entry and remove the dead port forward from the router so it stops being a risk.

Can a recorder in a NYCHA apartment on Big Apple Connect, or a building on a bulk internet deal, reach Super Live Plus at all?

Usually yes, by the QR route rather than the address route. Big Apple Connect, which the city launched in September 2022, gives NYCHA residents free home internet through Optimum or Spectrum depending on the development, and the city’s agreements run until 2028. The resident gets a working connection but does not manage the provider’s network beyond their own equipment, and in bulk-served private buildings the same is often true. Anything that needs a port opened upstream is out of reach.

Peer-to-peer access needs only an outbound connection from the recorder, so it normally works on these services. Our job is to plug the recorder into the resident’s own router or gateway with a cable, give it a fixed local address, switch on NAT, and pair each phone by QR. If a particular building’s network blocks the recorder’s outbound connection, we can show that with a test and tell the resident plainly, instead of leaving a system that works only on the apartment Wi-Fi.

How can I tell whether our recorder was added to Super Live Plus by QR code or by an address and port number?

Open the device list in the app and tap the device to edit it. In the manual’s terms, the “My device” field holds either the recorder’s MAC address or serial number, which means it was added by QR, or an address such as a public IP or a domain name followed by a colon and a port, which means it was added by address. Owners who view other people’s recorders often describe the QR route as a twelve-character ID plus a username and password.

Many city systems were set up both ways at different times by different people, so one phone may connect and another may not. That is why we check every phone on the account, not just the owner’s. When we finish, every phone uses the same method, and the router has no leftover port forwards from the old setup.

Who holds the keys

The company that installed our Super Live Plus system is gone — can a new contractor take it over without wiping it?

Often, yes. Recorders that use this app are reached with the recorder’s own users and passwords rather than a cloud account the installer controls, so if anyone on your side still knows an admin password, we can log in at the recorder, create new users for your people and change the admin password to one only the owner holds. Nothing has to be wiped and no footage is lost.

If nobody knows the admin password, the job is harder, and we will not start it until the owner shows control of the property and the recorder — a lease, a deed, a business registration or a written instruction from the managing agent. We take the maker’s documented recovery route where one exists for the model and, if a reset is unavoidable, we export the footage you need first. What we will not do is use a password generator of unknown origin on your recorder; see the question on that below.

A roommate or ex-tenant still has our cameras in their Super Live Plus app — how is that access cut off for good?

It is a common problem; one Reddit poster described giving a roommate access through Super Live Plus and then wanting it gone after the roommate “moved out and it wasn’t a peaceful goodbye.” Deleting the device from your own phone does nothing to theirs. Access lives on the recorder, so the cut-off has to happen there: delete or disable the user they used, and if they were given the admin password, change it.

If everyone in the household shared a single login, that means changing the shared password and re-adding the recorder on every phone that should keep access — and that is the moment to stop sharing one login. Recent versions of the app reworked device sharing, but sharing from a phone is only as safe as the user behind it. We set one viewer user per person, so the next departure takes one minute at the recorder and nobody else is disturbed.

What should a managing agent keep on file to pull footage from Super Live Plus systems in buildings across different boroughs?

A single sheet per building: recorder model and serial, firmware version, the admin password held by the agent and nobody on site, the viewer users and who has them, how phones are added, which internet provider and account serve the recorder, where the recorder physically is, and who has the key to that room. Add the recorder’s typical clock offset and how many days of footage it holds. With that sheet, a footage request becomes a twenty-minute task instead of a day.

In the app itself, name every device by address rather than “DVR 1” and “DVR 2”. The condo manager who reviewed the app in 2026 described one property or the other randomly disappearing and playback switching to the other property’s cameras; with several near-identical recorders, clear naming and one user per site cut down that confusion. We also check that two buildings are not sharing one recorder login, which makes a mistake more likely.

Footage for police, courts and insurers

A detective wants video from our storefront by tomorrow — how do we export it from a Super Live Plus recorder with the time stamp intact?

Do it at the recorder, not on the phone. First, compare the time on the recorder’s screen with the time on your phone and write down any difference; a stamp that is twelve minutes fast is still useful if someone noted it. Then search playback on the recorder for the window you need, back it up to a USB stick in the recorder’s own format and, if the menu offers it, in a common video format too. Make a second copy before you hand anything over.

The app can save clips to a phone, and the manual describes local recording and snapshots, but phone recordings are a copy of a copy, and reviewers describe playback that jumps when they scrub and crashes when they stop a recording. Use the phone only for a quick first look. If the recorder is hard to reach, or nobody knows how to export from it, we come out and do it, and leave the owner with written notes of what was exported and when.

Can a shop in a Connect New York precinct share live cameras with police and still use Super Live Plus for itself?

Connect New York, opened in May 2024, connects participating businesses’ cameras to their local precinct through Fusus, a platform made by Axon; the city said owners choose how and when footage is accessible, for example only in emergencies. That is a separate connection from the one Super Live Plus uses. The program’s own staff decide what hardware it needs and which recorders it can work with.

Your own viewing does not have to change. We make sure the recorder has enough upload capacity and user slots for both, that the police connection is set up with its own credentials rather than your admin password, and that adding one did not quietly break the other. If the program’s equipment is installed, we leave it alone and work around it.

Security of TVT-made recorders

Was our recorder one of the TVT NVMS-9000 boxes the 2025 Mirai botnet went after, and how do we check?

The flaw, catalogued as CVE-2024-14007, affects TVT’s NVMS-9000 firmware “used by many white-labeled DVR/NVR/IPC products” before version 1.3.4, according to the NVD. Someone who can reach the recorder’s control port can pull admin usernames and passwords in clear text. BleepingComputer reported in April 2025 that scanning for it peaked on April 3 with more than 2,500 unique addresses, and that most targeted devices were in the United States, Britain and Germany.

Two checks matter. Is the recorder reachable from the internet on its own ports — that is, does the router forward ports to it? And what firmware does it run? We read the firmware version on site, look at the router’s forwarding rules and the recorder’s user list for accounts nobody recognizes. If it was exposed, the published advice is to disconnect it, factory reset it, update the firmware and isolate it, so we export any footage you need first and then do exactly that.

Is it safe to unlock a Super Live Plus recorder with a third-party “super password” generator app?

We would not. Third-party apps on Google Play advertise reset codes for SuperLive Plus and NVMS2 recorders worked out from a serial number, and a Reddit discussion of one CCTV box describes its reset code being generated from the model number, MAC address and date and time. That such tools exist tells you something uncomfortable about how these resets work, and you are handing your recorder’s details to whoever runs the app.

The safer route is the one that proves ownership: the maker’s or the seller’s support process, or a documented reset by a licensed contractor with the owner present, after any needed footage is exported. Afterwards, we set a strong admin password, store it with the owner and give everyone else their own user. One App Store reviewer wrote that they were “down to one more attempt” before being locked out; that is a call to make before the last attempt, not after.

Old Q-See and other orphaned boxes

Our old Q-See recorder lost its app when the company shut its servers — what are our options in the city?

The company now using the Qsee name says plainly that “the old Q-See has closed its server and discontinued most of the apps and PC software,” that old cameras cannot connect to its new app, and that it cannot recover old passwords. It suggests local access and the old PC software such as QT View where it still works, and warns owners not to format the hard drive or the footage is gone.

We do not assume Super Live Plus will open a Q-See box — we check the model. Some old recorders can still be reached on the local network or through a third-party dynamic DNS service; many cannot be reached remotely at all any more. When the box is orphaned, the honest answer is often a new recorder on the existing cameras. Coax cameras usually work with a modern hybrid recorder, so the cost is the recorder, the drive and the visit, not a new set of cameras.

Which recorders actually work with Super Live Plus, and how do I tell from the box in the closet?

The app describes itself as client software for digital video recorders and IP cameras, “compatible models only.” In practice that means TVT-made recorders and the many relabelled versions sold under retailers’ own names; listings on Walmart and eBay sell hybrid recorders simply branded “SuperLive Plus.” The label on the box is a weak guide. The recorder’s own menu is a better one.

Look at the recorder’s network or system information screen for a QR code labelled for the mobile app, or for the app name in its setup wizard; check the manual or sticker for “SuperLive Plus”; or send us a photo of the label and the rear panel. A sixteen-channel analog-plus-network hybrid in a city stockroom is very often one of these. If it turns out to belong to a different app family, our DMSS, Hik-Connect or Guarding Vision pages cover those.

Keep, repair or replace

When is a five-borough Super Live Plus system worth fixing instead of replacing?

Keep it when the cameras show a good picture on the recorder’s monitor, the drive tests healthy and holds the days you need, the firmware can be brought to a safe version, and the problem was the connection or the logins. That describes most of the systems we see; the app was the visible symptom, not the cause.

Replace the recorder when the drive is failing and the box is too old to be worth a new one, when the firmware cannot be updated past a known flaw, when it was exposed and cannot be trusted, or when it cannot reach the internet at all on the connection the owner actually has. Replacing the recorder rarely means replacing the cameras; a modern hybrid recorder takes most existing coax cameras, and the figures for that are in the pricing section below.

Does the FCC Covered List treat TVT-made recorders the way it treats Hikvision and Dahua?

Not as of this review. The FCC’s equipment authorization rules that took effect in February 2023 name Hytera, Hikvision and Dahua for video surveillance equipment, and the Covered List’s producers are Huawei, ZTE, Hytera, Hikvision and Dahua; TVT is not among them. The FCC’s 2026 order prohibiting continued importation and marketing of covered equipment therefore does not, by its terms, reach TVT products, and it did not prohibit continued use of covered equipment people already own either.

Some sellers market SuperLive-branded recorders as “NDAA compliant”; that is the seller’s claim, and owners with federal contracts should verify it for their specific model. For a city shop or home, the practical risk with these recorders is not federal law but firmware and exposure, which is why the security questions above come first.

1. “Super Live Plus offline? Check your phone’s Wi-Fi and restart the app.”

This is the first answer on question-and-answer sites, and it is almost never the cause. One such guide for an iPhone tells owners to check Wi-Fi or cellular and restart the app and phone. If your phone can load a web page, its connection is fine. The device status in the app is about the recorder’s connection, not the phone’s.

The App Store review that best describes a city system says the opposite of a phone problem: cameras offline in the app “but are working on the home monitor,” with experts telling the owner the network was fine. That pattern points at the path from the recorder to the internet — its gateway, its DNS, NAT, or a port forward that no longer reaches it.

So we start at the recorder: its network screen, its NAT or P2P status, the cable to the router, and whether the router still gives it the same address. Restarting the app is the last step, after the recorder is fixed, to make sure the phone picks up the change.

2. “No port forwarding needed — just scan the QR code.”

Reseller pages promise QR onboarding with “no port forwarding,” and for many setups that is right. The manual adds the condition that gets skipped: when the phone and the recorder are on different networks, the recorder must support QR and have NAT enabled. Owners on Reddit describe the app repeating “can’t scan QR code” and “failed to connect.”

In city apartments and shops, the QR method fails for reasons that have nothing to do with the code: NAT switched off by a firmware reset, a recorder with a wrong gateway after a router swap, or the recorder plugged into one of its camera ports instead of its router port. Scanning again changes none of that.

QR pairing is the right method for 5G, hotspot and bulk-internet sites. It works when the recorder has a clean outbound path. We make the path clean, then pair, and we test from the street on mobile data before calling it done.

3. “Playback problems are the app — reinstall it.”

Some playback problems really are the app: the iPhone app’s version 1.14.4 notes say it “fixed the issue: Playback of DVR 3.0 speeds up,” and Google Play reviewers describe a timeline that jumps instead of scrubbing. But a reinstall means re-adding every device unless the app’s device-list sync was on, and it does nothing for the other causes.

The other causes are the ones that cost evidence: a failing hard drive, a drive that is full and overwriting faster than the owner thinks, recording schedules that skip the hours that matter, or an upload connection too thin to stream multi-channel playback. The condo manager who lost a day to a footage request was facing exactly this.

Before touching the app, we check the drive’s health and how many days it actually holds, then export any footage at risk directly from the recorder. Only then do we update or reinstall the app, re-adding devices by QR so nothing depends on a saved address.

4. “Super Live Plus is the replacement for old Q-See apps.”

Forum answers sometimes suggest that any generic DVR app will open an orphaned recorder. Qsee’s own support page says the old company closed its server and discontinued most apps and PC software, and that the new company’s app cannot connect to old cameras. It does not name Super Live Plus as a replacement.

Whether a given old recorder works with Super Live Plus depends on who actually built it, and nothing we found says old Q-See recorders were TVT-made. Some old recorders still answer locally or through a third-party dynamic DNS service; many cannot be reached remotely any more.

We check the specific model, try local access and the PC client the old maker left behind, and only then recommend a replacement recorder — which, for coax cameras, usually means keeping the cameras.

5. “Forgot the DVR password? Use the default admin/123456 or a reset code generator.”

The SuperLive Plus manual does list a default username of admin and a default password of 123456 for the recorders it describes, and third-party apps advertise reset codes from a serial number. Both are reasons to worry, not shortcuts.

A recorder still on its default password is one anyone on the network can open. A recorder that can be unlocked with a code derived from its serial number and date can be unlocked by more than its owner. And a reset done in a hurry, by someone who formats the drive, destroys the footage that made the password urgent in the first place.

Our route is ownership first, then the maker’s or seller’s documented recovery, then footage export, then reset if still needed, then a strong admin password held by the owner and a separate user for everyone else.

6. “Super Live Plus is outdated — just switch to a better app.”

Forum posters who dislike the app say it “lacks key features,” and there are general-purpose camera apps that can open some recorders. But the app is current: the iPhone version was updated in January 2026 and the Android listing in October 2026, with recent work on sharing, push alerts and device upgrades.

Third-party apps usually see fewer features, depend on the recorder exposing standard streams, and still need the same network path and the same users. Switching apps does not fix a recorder with no route out, a lost admin password or old firmware.

If the owner prefers a different app, we can set one up where the recorder supports it. For most city owners, the better result is the original app on a correctly connected recorder, with one user per person.

7. “These DVRs are fine to leave on the internet if you change the password.”

A strong password is necessary but, for TVT’s NVMS-9000 firmware before version 1.3.4, it was not enough. The NVD describes CVE-2024-14007 as letting an unauthenticated attacker who can reach the control port pull the admin username and password themselves. A changed password is simply disclosed.

That is why the 2025 scanning wave mattered: it looked for recorders with that port reachable from the internet, and most of the devices targeted were in the United States. The published advice, if updating is impossible, is to restrict public internet access to DVR ports.

So our standard is: update the firmware where the maker provides it, close every port forward once QR access works, keep the recorder off customer and guest Wi-Fi where the router allows, and check the user list for accounts nobody recognizes.