How secure/safe is Homey?

G4nd41f

I have installed a Nuki Smart Lock in my home and think about giving Homey access to it. However, I do have some concerns about security and how anyone else but me could enter my home. My plan was to use Tasker as soon as my mobile connected to my Wifi, to change a Better Logic variable (as seen in https://forum.athom.com/discussion/996/tutorial-using-tasker-together-with-homey/p1), which triggers a flow that opens my entrance door. Would you do that?

I see the following risks:
-Someone could steal my phone and would have access to my flat, but he would also have that if he stole my keys.
-Someone could access my Homey and open my door. I chose a long password with upper/lower case characters/numbers/special characters for my Athom account, which I feel to be safe. But as far as I understand, that information is not directly used to access Homey. It is only used to authenticate myself to the Athom servers, which forward me to my Homey with a security token. What if someone gained access to that security token and the Homey ID? How safe is the connection to the Athom servers and from them to Homey? What if the Athom servers would be hacked?
-Someone could manipulate my Android phone to make it change the Better Logic variable to open my door.

Am I too paranoid? Is any of the lower two scenarios realistic? What risks do you see?

jjtbsomhorst

I personally would never ever automate my door locks. Simply because it is much easier to hack/tinker with these 'smart' locks without you knowing then it is with normal door locks. ( if you want to get in with a normal door lock you need physical access, with smart locks this isn't  a requirement anymore )

mruiter

With my klopsleutel I can open most locks within a minute. The more * on the keurmerk the easier  it gets. 

But everything is hackable. The change you will have a hacker in front of the door at midnight is much smaller the a bucket with a klopsleutel or a brick. 

My danalock reports back in when it gets turned open. So for me it's much safer then a normal key lock that doesn't report a key turn 

mruiter

If you have some free time tonight and are in need of a new TV.. 

Banjer

jjtbsomhorst said:

( if you want to get in with a normal door lock you need physical access, with smart locks this isn't  a requirement anymore )

But the usecases for remotely hacking a lock are very limited, you still want to go through it, so you want to be phisicaly there. 

jjtbsomhorst

Banjer said:

jjtbsomhorst said:

( if you want to get in with a normal door lock you need physical access, with smart locks this isn't  a requirement anymore )

But the usecases for remotely hacking a lock are very limited, you still want to go through it, so you want to be phisicaly there.  <span></span>

That can be but what about the use-case that people hack these things for fun?

jorden

Why not just use the built-in functions of the Nuki app on your phone to automaticly open the lock? I use "auto-unlock" with Nuki on  my iPhone.

G4nd41f

The autounlock feature works only in about 50% of the cases when I arrive at home, while Homey recognizes me in 100% of the cases when my phone connects to my Wifi.