Hardware recommendation: smart lock that is cloud-free (possibly over wifi)

[giovanni]

Hi evreryone,
I’m about to take what I consider a big step: I want to install a smart lock on my main entrance door and I’m looking for a recommendation

What I’m mostly interested in is:

• decently known brand (no unknown brands)
• possibility to use the device entirely cloud-free
• possibly using wifi or zwave (no BLE nor zigbee)

Does anybody have a recommendation?

Many thanks!

[NathanCu (Nathan Curtis)]

Where are you located device availability varied by country.

If you’re in the US I prefer schlage. The connect series is ZWave.

[giovanni]

Thank you for answering.

Located in Europe. The shape of the cylinder we use here is the “waterdrop” type (see pic below for reference).

[Thyraz]

As you’re in Europe, a few words on Nuki as they are one of the most used smart locks here:

The non-pro in combination with the bridge should work without internet connection.
The 3.0 Pro with it’s nice MQTT implementation NOT. Even that you might think it would be a good fit.
It reconnects Wifi all the time when it can’t connect to the cloud.
So it also looses connection to the MQTT server.

[giovanni]

Thanks for the reply! So you recommend Nuki 3.0 base version.
As I understand it uses bluetooth (not BLE) and I can control it with a esp32 bluetooth proxy directly from the integration in home-assistant, am I right?

[Thyraz]

I haven’t used it with a self-made esp bridge so far.

A few years ago I used the 2.0 with the Nuki bridge, which worked fine for me.
Now I use the 3.0 Pro with MQTT, but that wouldn’t fit your need for offline-usage.

Maybe someone else can tell you more about their success with a self made esp32 bridge.

[vsatmydynipnet]

Hi,

I am in the same situation. I need 3-4 smart locks which must be cloud-free (GDPR and Compliance reasons). Also setting and pushing codes to the locks should be done by HA. Function has highest priority, pricing lowest. I found some info

QUOTE
Yale Assure smart locks with the zigbee module

Yale Assure smart locks with the zigbee module. Pair that with a zigbee2mqtt coordinator and your good. No cloud, all local and super reliable.
ENDQUOTE

Looks like Yale Assure can push codes from Home assistant, see below.

Yale Assure Lock® SL | Yale

Push/Get Codes

Yale Assure lock code management with zigbee2mqtt

I’ve recently installed two Yale Assure locks with Zigbee modules. I was already running zigbee2mqtt and couldn’t find a thorough description of how to use this to set lock codes from the frontend (although there are a few threads on doing the same with ZHA). I’m noting my configuration here in case it helps others, and to invite feedback on any areas where it could be improved. First to note that several aspects of the lock should appear automatically through zigbee2mqtt once it’s added to the…

home-assistant io / integrations/yalexs_ble/ → Supported devices

But it looks like this is for US and Australian Doors only. Does somebody have a suggestion for “something like this” but for EU doors?

Any hint is very appreciated.

[giovanni]

I use Nuki with Nuki Hub (see on GitHub). I think it’s the perfect cloud-free solution.

[CloudFreeFan]

I would like a lock that:

1. is cloud-free
2. reliably reports its state (locked or unlocked) to HA
3. can be locked electronically (e.g. via HA)
4. can be unlocked only via a key (outside) or knob (inside) - not electronically

Reasoning: if my lock or HA server gets hacked, I don’t mind if the hacker can lock the door - because I can (I hope!) manually override with the knob if I’m inside, or with the key if I’m outside.
I do mind if the hacker can unlock the door!

The Nuki seems to meet criteria 1-3 above, but not 4.

Is there a Eurocylinder-compatible smart lock that meets all four?

[giovanni]

Unlikely.
What is your threat model?

[CloudFreeFan]

@giovanni

Unlikely.

It does seem to be a gap in the market, sadly.

@giovanni

What is your threat model?

As described here under “Reasoning”.

[giovanni]

I understood your reasoning but that’s not a threat model. There is definitely a gap in the market. The reason is that security and comfort are usually a trade off. Since consumers usually have to protect a house and not a caveau, the threat model is quite simple: it’s unlikely that you’d be subject to a targeted attack (physical or digital)

[CloudFreeFan]

@giovanni

Since consumers usually have to protect a house and not a caveau, the threat model is quite simple: it’s unlikely that you’d be subject to a targeted attack (physical or digital)

Doesn’t have to be targeted. Sadsacks hack for the lolz. The average domestic IoT user is a network misconfiguration or two from being pwned.

IoT security vulnerabilities have been being exploited by random strangers for at least a decade. Here’s news from 2015 about nannycams being hacked. Here’s a similar thread from 2024. You think someone like that - a sicko telling a stranger’s toddler to go outside the house - wouldn’t unlock the front door too, if they could?

Some people also have targeted threats to be concerned about.