Device credentials, and what happens if one is lost

Each unit has its own key. We store only a hash of it, so a copy of our database yields nothing a device could reuse.

Every unit authenticates with its own key, issued when it pairs. We keep only a one-way hash of it — the key itself is never stored and cannot be shown to you again, including by us.

If a unit is stolen or you suspect its key is exposed, rotate it. The old key stops working immediately.

Rotating a key on a unit that's still installed does not require a site visit. The unit keeps its Wi-Fi, notices the refusal, and asks to be re-adopted — you approve it from the dashboard and it comes back with its history intact.

Related