Get the latest tech news
Home Assistant: the password is not the key – token secrets in cleartext
Full Disclosure mailing list archives Home Assistant: the password is not the key — token secrets in cleartext, two token classes never expire, password change revokes none (2026.11.0, live-proven) From: theknell--- via Fulldisclosure <fulldisclosure () seclists org> Date: Sun, 08 Nov 2026 11:02:24 -0500 Home Assistant's documentation tells users: "Your password is the key to your home, so choose a strong, unique one." Home Assistant is installed in two million homes by the vendor's own published count, and in those homes it holds the locks, the alarm, the garage, the cameras, and the record of who is home. The password is not the key.
None
Or read this on Hacker News
