Security & Privacy

Your smart home must not become a threat to your privacy. Most consumer IoT devices send your data to servers in China. Here is how to avoid this.

Traps to Avoid

• Tuya / Smart Life — cloud mandatory, data in China
• Unverified Chinese cameras — LIZI, TP-Link, Wyze not recommended
• Port forwarding — NEVER expose a port directly to the internet

Use Authelia to protect your self-hosted services with single sign-on.

Simulate occupancy during your absences to deter intruders — our guide 「How to Simulate Occupancy When You’re Away」 explains how to automate lights, shutters and TV with Home Assistant.

For outdoor surveillance as part of a security setup, see Outdoor DIY Camera Roundup 2026 →

Safe Alternatives

• Shelly — local-only, no cloud required
• Philips Hue — local bridge, no cloud dependency
• Home Assistant — all data stays in your home

Network Security

Isolate your IoT devices on a separate VLAN. Use Tailscale to access your network remotely instead of opening ports. Keep firmware updated.