As an Amazon Associate I earn from qualifying purchases. Links to Amazon on this page are affiliate links.
Can smart locks be hacked?
Updated
Any device that connects to an app can have flaws, so the honest answer is yes, it is possible. But a lock has two jobs: keep out people with a laptop and keep out people with a crowbar. The second one depends on the lock's build and your door frame, and there is a public grade for that. This page covers what makers say about both. It is general information, not security advice.
What makers say about the digital side
- Schlage says its smart locks use a secure, encrypted connection, and compares the link between the lock and your phone to the security of online shopping. The Encode listing also names a built-in alarm for door movement and forced entry attempts.
- eufy says its smart locks store fingerprint and passcode data on the lock, not in the cloud, and use an AES128 encryption chip.
- Wyze says the Lock Bolt v2 sounds an alarm after too many wrong unlock attempts or a jam, and lets you type extra digits before your code so people watching cannot learn it.
- Aqara says on its listing that fingerprint data is stored locally and AES encrypted.
These are maker claims. We have not checked them.
What BHMA grades measure
BHMA is the trade group that writes the ANSI/BHMA door hardware standards. It grades products 1, 2 or 3, with 1 highest. Its residential deadbolt standard, A156.40, includes 17 security tests, one of which loads the door against the bolt with 1,350 pounds of force. Schlage explains a second, residential scale: a letter grade for security, durability and finish each, where C is good, B better and A best.
| Lock | Grade the maker states |
|---|---|
| Yale Assure Lock 2 Wi-Fi | BHMA Grade 2, per the listing |
| eufy C220 | BHMA Grade 3, per the listing |
| Schlage Encode | Highest residential BHMA rating for security, durability and finish, per the listing |
| Wyze Lock Bolt v2 | "BHMA2 certified," per Wyze support |
| ULTRALOQ Bolt SE | ANSI/BHMA certified, grade not seen by us |
Habits that help
- Use a strong, unique password on the lock app, and turn on two-step login if the app has it.
- Install app and lock updates when they come.
- Delete codes and user access you no longer need.
- Use the activity log. Unexpected entries are worth a look.
- Keep the physical side strong. A lock is only one part. The frame and strike plate matter too.
Picks with the most stated protection
- Schlage Encode: top residential rating and a forced entry alarm, per the listing. Caveat: no Apple Home on this listing.
- Yale Assure Lock 2 Wi-Fi: Grade 2 stated. Caveat: only one year on electronics.
Check fit with the fit checker and compare all seven on our shortlist.