Share smart home access with family and guests

The principle: one person, one account, least access

Google’s help for Nest homes says invitees should use their own accounts and their own two-step verification, and that sharing sign-in credentials can cause security issues and unexpected Home/Away behavior. The FTC advises two-factor authentication and removing access for people who no longer need it. Apply these three rules to every ecosystem.

1. Invite people by their own account rather than giving them your password.
2. Give residents full control and give guests only the doors and devices they need.
3. Set an end date for temporary access and review the list every few months.

Apple Home: residents and guests

In the Home app, tap Add, then Add People. Pick a role, choose contacts or enter Apple Account emails, and send the invite; invitees accept in Home Settings.

• Residents have local access and optional remote access to all accessories at any time.
• Guests have local-only access to specific doors, locks and security accessories on a set schedule. This role is available only if the home includes security-related accessories.
• Per-person switches under Home Settings, People control Control Accessories Remotely and Add and Edit Accessories, which lets someone add and remove accessories, scenes, automations and other users.

To remove someone, go to Home Settings, People, select the person and choose Remove Person. Apple warns that they may still control accessories if they have permissions in a separate accessory app, so remove those through that app or the maker. Shared users cannot add a HomePod, Apple TV or AirPlay-compatible speaker; only the home owner can.

Google Home and Nest: roles and limits

For homes managed in the Nest app, Google describes three levels:

• Owner: controls all products, manages subscriptions and billing, sees history and can invite people. The Owner cannot be removed.
• Full Access: controls all products, changes settings, views history and invites others, and can remove other people except the Owner.
• Home Entry Only: no app control or history. The person gets a passcode for the Nest x Yale lock, with schedules and end dates you set. It appears only if the home has that lock.

A home can have up to 20 people: one Owner, up to nine Full Access and up to 10 Home Entry Only. Invite from Settings, Family & Guests, Add a person. To remove, choose the person and tap Remove access. Home Entry Only guests are not notified when you remove them, so tell them yourself. If you sign in to the Nest app with a Google Account, manage members in the Google Home app instead; the Google Home app has its own member roles, so check its help pages for the current names.

Alexa: household sharing

Alexa lets adults in a household share devices by inviting them to join in the Alexa app, so each person keeps their own profile, voice and settings. Children should use a kids profile and the family features Amazon provides. Check the app’s current options for household profiles and voice purchasing, and turn on a purchase confirmation code or turn voice purchasing off if children use the speakers.

Locks, garage doors and cameras need extra care

• Locks: give each person a separate code and delete the code instead of changing one shared code. Use schedules for cleaners, dog walkers and contractors. See are smart locks safe?.
• Cameras: the FTC recommends cameras with permission levels, so one administrator manages settings, and that you control who can view the livestream and when. Review indoor camera privacy before you give anyone a live view.
• Garage doors and alarms: limit to adults and keep a record of who has access.

Matter multi-admin: one device, several apps

Matter lets a device join more than one ecosystem at once. Home Assistant’s documentation says the standard requires devices to support at least five fabrics, which means a lamp, plug or sensor can be controlled from Apple Home, Google Home, Alexa and Home Assistant together. That is the simplest way to share with a household that mixes iPhone and Android: each person uses their own app. Setup order and limits are in Matter multi-admin.

The trade-off is that you now have several places where access can linger. When someone leaves your household, remove them from every ecosystem, not only the one you use most.

A simple access plan

Taking access away

1. Remove the person in the Apple Home, Google Home or Nest, and Alexa lists.
2. Delete their lock codes and fingerprints.
3. Remove them from camera and doorbell apps and from any third-party app with its own sharing.
4. Change shared passwords or Wi-Fi if they ever had them.