Security · Updated 17 Oct, 02:03 am IST
Home Assistant secret-scan check triggered complaints, can be turned off
Why it matters for readers: It matters because the scan hashes secrets locally and only sends a small hash prefix, and you can disable the feature.
- A user reported that Home Assistant appeared to scan secrets without their authorization, calling it a severe invasion of privacy.1
- The pwned-passwords check has been part of the Supervisor for years and examines app options marked as passwords.1
- The Supervisor hashes secrets locally and sends only the first five characters of the hash to the external check.1
- Users can disable the check using the command: ha security options --pwned=false.1
- A recent release fixed the warning that surfaces the check, which led more users to notice it now.1
Get a brief like this every morning
Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.
Get started