Remote connection security level

Hi,

I just upgraded the Home Assistant App via the Google Play store from 2025.11.4-full to 2026.1.6-full and it mentions the Connection security level | Home Assistant Companion Docs

My Home Assistant URL and Internal communication URLs begin with https:// and have a certificate assigned to them and I can connect securely via the web browser to them both internally and remotely.

The Remote connection security level is not currently set but the text says that “It appears that your connection is not encrypted (using HTTP)” - the FAQ in the link above says update to the latest version - and I’m on it?

Is this general text based rather than it actually checking the URLs that you’ve got set on that Connection information screen in the Companion app?

Thanks

Alex

This screen is only shown if one of the url stored in the app starts with HTTP. I just did the update with an app that as https:// for external and internal and the screen is not shown.

Maybe the first time you onboarded your server the url was using http. If you go in the settings what do you in the both screen to setup the URLs ?

It’s possible it detected many years ago on an earlier version it had http detected but it’s not been that for years. I don’t get a pop up, I just went into companion app → remote connection security level. On the companion app settings screen both the home assistant URL and and internal connection URL are both showing HTTPS and not HTTP. Also in Settings → System → Network, both the Home assistant URL and local network begin with HTTPS and not HTTP. (Local network automatic setting is switched off and assigned to that address and has been that for quite some time).

So if you go into section in the companion app - does that mention HTTP been detected for you?

I’d imagine that if you have both HTTPS connections that the options should not be shown as it is the most secure (but without it needing to location share to detect where it is)

Thanks

That is strange indeed. The code is especially checking if on URL is http://. I even tested the migration again yesterday after fixing a bug where we can’t change the option picked.

Oh wait you didn’t get the screen when you start the app? You only saw it on the settings? If that’s the case it’s normal and yes. The text is not updating indeed, but if you were to do the onboarding today it would have Most secure automatically picked for you.
For user migrating from an old version we decided for now to not set the settings automatically on this version. When you are using HTTP we are going to show a screen asking to pick between the two (or cancel), we wanted to avoid showing this when using HTTPS.

I started getting the same screen/warning (immediately every time I open the app) starting 2 or 3ish days ago. I only have one server configured, and it’s using HA Cloud with an httpS URL. There’s no “home network” or “internal connection url” set (I’d prefer it to always use the same connection).

If I select secure connection then (not showing on app startup for me) and click Save it doesn’t take anyway - I’m assuming that is a fix after the one released to google play.

Confirmed that the version released yesterday 2026.2.1-full allowed me to set the secure connection and save it.