Get the latest tech news

Home Assistant can not be secured for internet access

Given these constraints, I concluded that it's necessary to expose Home Assistant directly to the internet, which in turn introduces a security challenge: protecting the server from unauthorized access. No Basic Authentication Support: Home Assistant's mobile apps cannot handle URLs with embedded credentials (e.g., https://user:pass@hostname). These restrictions make it basically impossible to provide additional security mechanisms like web server authentication or hiding the service behind unconventional paths.

Get the Android app

Or read this on Hacker News