Skip to Content

← Help centre

Connection security levels

What the app refuses to do on an unencrypted connection, and why.

The app holds a connection to one of three levels. The level decides what it is willing to send.

The three levels

  • Encrypted (HTTPS). Everything is allowed. This is the only level suitable for reaching your home over the internet.
  • Plain text on the home network. Allowed, because the traffic stays inside a network you control. Common for a server on a fixed local IP.
  • Plain text over the internet. Blocked. Your password and the tokens that unlock your home would be readable by anyone between you and the server.

Why a plain text server is blocked away from home

When you leave the house, the same http:// address stops being a local address and becomes an internet address. The app cannot tell the difference by looking at the address alone, so it uses the network you are on: on a Wi-Fi you marked as home it allows plain text, everywhere else it refuses.

The fix is to give the server an HTTPS address for remote access. Your installer can set this up; it is also what lets notifications reach you reliably.

See also: Naming your home networks