A smart lock looks like a lock. Inside, though, it’s a small computer with a radio, an app and an online account. That’s what makes it so convenient, and it’s also why it deserves the same care as your phone or laptop.
A different kind of risk
A regular lock can only be picked by someone standing at your door. A smart lock can be reached through its app from anywhere, which is the whole point most days (let the cleaner in from the city, check the door from bed). It also means a weak password or a forgotten account can matter as much as the deadbolt does.
Start with the account
People fuss over door codes. The bigger risk is usually the app account behind the lock. Whoever gets into it can add codes, unlock the door and read the entry log.
If you’ve ever shared the login with a contractor “just for the week,” now’s a good time to change it.
- Use a strong password for the lock app that you don’t use anywhere else.
- Turn on two-step sign-in if it’s offered.
- Don’t recycle your email password.
- Clear out old phones and old users.
The network matters too
A lot of smart locks connect over Wi-Fi, or through a small hub that does. Either way, the lock is only as safe as the network it sits on.
Change the default password on your internet equipment and keep its software current. If it supports a guest network, put the smart home gear there. Then if one gadget has a problem, it’s less likely to reach your computers.
About the codes
A door code is basically a key you can’t see, and anyone who’s seen it can pass it along. Skip the easy ones (1234, a birth year, the street number) and change shared codes if you’re not sure who has them anymore.
For the day-to-day side, like scheduled codes, entry logs, and keeping batteries alive through a cold winter, this guide from a Georgian Bay installer is a practical read.
Keep it up to date
Lock makers fix problems through updates, so don’t ignore them. Check the app for firmware updates now and then, or switch on automatic updates if you can. If a lock has stopped getting updates entirely, start thinking about a replacement.
What the federal cyber advice says
The Government of Canada’s Get Cyber Safe program lists electronic door locks among the internet-enabled devices around the home. Its advice for them is refreshingly simple. Change any default username the maker provides, if you can. Keep the software up to date. And secure each smart device with a strong, unique password or passphrase. It defines a strong password as at least 12 characters, with a mix of letters, numbers and symbols.
It also recommends reading the device’s privacy policy. A lock app may keep a record of when you come and go, and it’s worth knowing who else can see it.
Have a backup
Every smart lock lets you down eventually. It’s a machine. Batteries die, apps change, networks drop out. Keep the mechanical key somewhere you can reach it, and make sure someone you trust knows where that is.
Twice a year
A quick seasonal check keeps things tidy, and plenty of people tie it to the clocks changing. Go through every user and code, delete anything you don’t recognize, look for updates, and put fresh batteries in before winter.
That’s really all it takes, and it doesn’t take long. The lock is only as secure as the account, the network and the codes behind it.
