# \[APP\] Tuya - Smart Life. Smart Living

**URL:** <https://community.homey.app/t/app-tuya-smart-life-smart-living/146735>\
**Category:** Apps\
**Tags:** official, homey\
**Created:** [December 11, 2025, 1:00pm UTC](https://community.homey.app/t/app-tuya-smart-life-smart-living/146735 "2025-12-11T13:00:35Z")\
**Posts on this page:** 20\
**Page:** 17

<div class="post-metadata">

**Author:** ![robertklep](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/robertklep/32/160628_2.png) [@robertklep](https://community.homey.app/u/robertklep)\
**Post date:** [August 4, 2026, 7:12am UTC](https://community.homey.app/t/app-tuya-smart-life-smart-living/146735/336 "2026-08-04T07:12:31Z")

</div>

> [@bert69](#):
>
> for the Home Assistant one that Tuya did not (yet?) block.

The HA integration is official (not “Homey official”, but _really_ official, as in actually created and maintained by Tuya).

---

<div class="post-metadata">

**Author:** ![smarthomesven](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/smarthomesven/32/79712_2.png) [@smarthomesven](https://community.homey.app/u/smarthomesven)\
**Post date:** [August 4, 2026, 7:32am UTC](https://community.homey.app/t/app-tuya-smart-life-smart-living/146735/337 "2026-08-04T07:32:08Z")

</div>

But that doesn’t mean that they can’t block it. The official Tuya Homey app (the first app, not the Drenso one) was also created in collaboration with Tuya. How else do you think Homey got their OAuth client ID/secret?

---

<div class="post-metadata">

**Author:** ![robertklep](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/robertklep/32/160628_2.png) [@robertklep](https://community.homey.app/u/robertklep)\
**Post date:** [August 4, 2026, 8:04am UTC](https://community.homey.app/t/app-tuya-smart-life-smart-living/146735/338 "2026-08-04T08:04:44Z")

</div>

Athom/Drenso uses Home Assistant’s client ID, which could make it difficult to differentiate between requests made from the official HA integration and the Homey app.

---

<div class="post-metadata">

**Author:** ![smarthomesven](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/smarthomesven/32/79712_2.png) [@smarthomesven](https://community.homey.app/u/smarthomesven)\
**Post date:** [August 4, 2026, 8:07am UTC](https://community.homey.app/t/app-tuya-smart-life-smart-living/146735/339 "2026-08-04T08:07:56Z")

</div>

I meant the old official app. Tuya also shut that down, but Homey did have an official Client ID and Secret so the app was built in collaboration with Tuya

---

<div class="post-metadata">

**Author:** ![robertklep](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/robertklep/32/160628_2.png) [@robertklep](https://community.homey.app/u/robertklep)\
**Post date:** [August 4, 2026, 8:16am UTC](https://community.homey.app/t/app-tuya-smart-life-smart-living/146735/340 "2026-08-04T08:16:40Z")

</div>

I understand, but I’m trying to explain that the _current_ app will probably be much more difficult to block because Homey shares its credentials with HA.

---

<div class="post-metadata">

**Author:** ![smarthomesven](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/smarthomesven/32/79712_2.png) [@smarthomesven](https://community.homey.app/u/smarthomesven)\
**Post date:** [August 4, 2026, 8:57am UTC](https://community.homey.app/t/app-tuya-smart-life-smart-living/146735/341 "2026-08-04T08:57:11Z")

</div>

> [@robertklep](#):
>
> will probably be much more difficult to block

Why would it be more difficult to block? If they want to move toward an ad-filled app and kill all third party integrations to prevent people from using third party apps, then it’s just as easy to block as the other official Homey app.

> [@smarthomesven](#):
>
> I also noticed this banner in the Tuya mobile app:
> 
> ![Screenshot_20260803_191159_Tuya](https://us1.discourse-cdn.com/flex025/uploads/athom/original/3X/1/c/1c6080e58e395dd454185cb4f2f5185a5f120eb3.jpeg)
> 
> I checked the permissions, and sure enough it does already have all permissions needed for ads.
> 
> ![Screenshot_20260803_191313_Google Play Store](https://us1.discourse-cdn.com/flex025/uploads/athom/original/3X/d/b/dbad69897fcdf702a62432aa8fe8f4f4d08da642.jpeg)
> 
> That would be the “AdServices Topics API”, “Advertising ID permission”, “AdId API” and “AdServices Attribution APIs”. These are the permissions you’d need to show ads. It seems like they’re preparing to add ads to their mobile app.

Many Chinese smart home vendors have already implemented ads also, especially the camera apps like V360 Pro, V380/V380 Pro (same app, different name), XMEye, iCSee, Clever Dog, Yi iot, Yoosee, 365Cam, Ease Life and many others.

---

<div class="post-metadata">

**Author:** ![robertklep](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/robertklep/32/160628_2.png) [@robertklep](https://community.homey.app/u/robertklep)\
**Post date:** [August 4, 2026, 9:07am UTC](https://community.homey.app/t/app-tuya-smart-life-smart-living/146735/342 "2026-08-04T09:07:11Z")

</div>

> [@smarthomesven](#):
>
> Why would it be more difficult to block? If they want to move toward an ad-filled app and kill all third party integrations to prevent people from using third party apps, then it’s just as easy to block as the other official Homey app.

Yes, they can turn off their API’s altogether if they want 🤷🏼‍♂️ But as it stands, Tuya officially supports Home Assistant, and as such, they cannot block their API’s unless they want to retract that support. And until they do, they cannot (at least, from that I’m seeing) retract support _specifically for the Homey app_.

---

<div class="post-metadata">

**Author:** ![smarthomesven](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/smarthomesven/32/79712_2.png) [@smarthomesven](https://community.homey.app/u/smarthomesven)\
**Post date:** [August 4, 2026, 9:18am UTC](https://community.homey.app/t/app-tuya-smart-life-smart-living/146735/343 "2026-08-04T09:18:56Z")

</div>

> [@robertklep](#):
>
> they cannot (at least, from that I’m seeing) retract support _specifically for the Homey app_.

They can’t, but that’s the case with many more Homey apps and other reverse engineered protocols. At least for many of my own apps (primarily the apps that sign their requests using some algorithm embedded in the Android app, since that often means they’re actively trying to stop reverse engineering), I copy the Android app user agent along as well, so they can’t determine if it’s Homey or the Android app. This makes it harder for the companies to detect or block the Homey app.

Also, if Tuya didn’t want other systems like Homey copying the Home Assistant Client ID and Secret, then they could have just left it in the environment variables as well 😉

---

<div class="post-metadata">

**Author:** ![Peter\_Kawa](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/peter_kawa/32/173848_2.png) [@Peter\_Kawa](https://community.homey.app/u/Peter_Kawa)\
**Post date:** [August 4, 2026, 9:24am UTC](https://community.homey.app/t/app-tuya-smart-life-smart-living/146735/344 "2026-08-04T09:24:01Z")

</div>

> [@drenso](#):
>
> We’ve had dozens of emails already, and every additional mail we get means more time spent sending the same answer that cannot be spent on the investigation.

Just a thought:  
Maybe publishing a “Known issues” overview is an idea?  
Like updating the first post of this topic, or somewhere on the app page @ app store?  
Maybe Athom can consider adding a “Known issues” section to the app store.

---

<div class="post-metadata">

**Author:** ![robertklep](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/robertklep/32/160628_2.png) [@robertklep](https://community.homey.app/u/robertklep)\
**Post date:** [August 4, 2026, 9:25am UTC](https://community.homey.app/t/app-tuya-smart-life-smart-living/146735/345 "2026-08-04T09:25:24Z")

</div>

> [@smarthomesven](#):
>
> Also, if Tuya didn’t want other systems like Homey copying the Home Assistant Client ID and Secret, then they could have just left it in the environment variables as well 😉

There is no way to “hide” credentials with HA as everything is open source.

---

<div class="post-metadata">

**Author:** ![smarthomesven](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/smarthomesven/32/79712_2.png) [@smarthomesven](https://community.homey.app/u/smarthomesven)\
**Post date:** [August 4, 2026, 9:43am UTC](https://community.homey.app/t/app-tuya-smart-life-smart-living/146735/346 "2026-08-04T09:43:43Z")

</div>

Well, if they also keep the client credentials online for everyone to use, then I wonder why they’re even there in the first place since it’s pointless to have client credentials when everyone can just freely copy and use them however they like. So I don’t understand why Tuya even requires a Client ID and Secret for that API then.

And even if they weren’t available, it would still be possible to find them in the network requests when you intercept those.

---

<div class="post-metadata">

**Author:** ![robertklep](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/robertklep/32/160628_2.png) [@robertklep](https://community.homey.app/u/robertklep)\
**Post date:** [August 4, 2026, 10:01am UTC](https://community.homey.app/t/app-tuya-smart-life-smart-living/146735/347 "2026-08-04T10:01:41Z")

</div>

From what I can see, it only uses [a client ID](https://github.com/home-assistant/core/blob/1f1b0a30d0d3c14496afbcca25afa4916e280e64/homeassistant/components/tuya/const.py#L34) (and a “user code”, which the user can find in the Smart Life/Tuya Smart app), not a secret.

---

<div class="post-metadata">

**Author:** ![drenso](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/drenso/32/41300_2.png) [@drenso](https://community.homey.app/u/drenso)\
**Post date:** [August 4, 2026, 1:48pm UTC](https://community.homey.app/t/app-tuya-smart-life-smart-living/146735/348 "2026-08-04T13:48:46Z")

</div>

Another update from our side! It has proven hard to find where the exact problem comes from: it is related to token refreshing and possibly concurrency in relation to the recent ESM update, but as you might know a token does not need to be refreshed that often. That’s why we need your help!

We’ve just pushed version 1.5.1 to the store, and made it available for testing. Can you guys try this version? You can use [https://homey.app/a/com.tuya2/test/](https://homey.app/a/com.tuya2/test/) to install the test version.

Note that depending on the internal app state, you might still need to repair a single device after installing the update before it start working again. We’re mostly interested as to whether it remains stable afterwards!

---

<div class="post-metadata">

**Author:** ![Martijn\_Eisses](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/martijn_eisses/32/124954_2.png) [@Martijn\_Eisses](https://community.homey.app/u/Martijn_Eisses)\
**Post date:** [August 4, 2026, 2:30pm UTC](https://community.homey.app/t/app-tuya-smart-life-smart-living/146735/350 "2026-08-04T14:30:38Z")

</div>

I’ve installed the test version and did not have to repair a device to fix the problem, they just work now. Will let you know if/when they stop working.

---

<div class="post-metadata">

**Author:** ![John\_Roording](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/john_roording/32/171006_2.png) [@John\_Roording](https://community.homey.app/u/John_Roording)\
**Post date:** [August 4, 2026, 2:31pm UTC](https://community.homey.app/t/app-tuya-smart-life-smart-living/146735/351 "2026-08-04T14:31:31Z")

</div>

![image](https://us1.discourse-cdn.com/flex025/uploads/athom/original/3X/1/c/1cbce1116d06a349a08e4a3cac3c9d80df3b69b7.png)

I installed the V1.5.1, restarted but if activate a dvice I get this.

I also repaired the device first.

And if restart the APP in the devices list I see lot of changes available, not available like a christmas tree and after 10 seconds or so it is stable and some still show not availalable and the ones that seem to be available do not react and after 10 seconds this time out problem.

Note that I am using smartlife and not the TUYA app and in Homey I also installed the Tuya Zigbee app for my zigbee devices.

I just restarted the app and all seems OK for half a minute, able to activate lights but now all show not available. So not stable.

---

<div class="post-metadata">

**Author:** ![smarthomesven](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/smarthomesven/32/79712_2.png) [@smarthomesven](https://community.homey.app/u/smarthomesven)\
**Post date:** [August 4, 2026, 4:15pm UTC](https://community.homey.app/t/app-tuya-smart-life-smart-living/146735/352 "2026-08-04T16:15:51Z")

</div>

After installing the update, the unavailable devices became available again without a re-login. I’ll see if it keeps working

---

<div class="post-metadata">

**Author:** ![Niels\_Hubregtse](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/niels_hubregtse/32/169361_2.png) [@Niels\_Hubregtse](https://community.homey.app/u/Niels_Hubregtse)\
**Post date:** [August 4, 2026, 5:22pm UTC](https://community.homey.app/t/app-tuya-smart-life-smart-living/146735/353 "2026-08-04T17:22:50Z")

</div>

I installed 1.5.1 to and for an hour no problems detected yet

---

<div class="post-metadata">

**Author:** ![drenso](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/drenso/32/41300_2.png) [@drenso](https://community.homey.app/u/drenso)\
**Post date:** [August 4, 2026, 6:10pm UTC](https://community.homey.app/t/app-tuya-smart-life-smart-living/146735/354 "2026-08-04T18:10:45Z")

</div>

We believe you’ve hit a very nice race condition! Can you try again with version 1.5.2?

---

<div class="post-metadata">

**Author:** ![Niels\_Hubregtse](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/niels_hubregtse/32/169361_2.png) [@Niels\_Hubregtse](https://community.homey.app/u/Niels_Hubregtse)\
**Post date:** [August 4, 2026, 6:51pm UTC](https://community.homey.app/t/app-tuya-smart-life-smart-living/146735/355 "2026-08-04T18:51:04Z")

</div>

huh, without checking i clicked on install, noticed that 1.5.2 was already installed, and now im back at 1.5.0

---

<div class="post-metadata">

**Author:** ![smarthomesven](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/smarthomesven/32/79712_2.png) [@smarthomesven](https://community.homey.app/u/smarthomesven)\
**Post date:** [August 4, 2026, 6:52pm UTC](https://community.homey.app/t/app-tuya-smart-life-smart-living/146735/356 "2026-08-04T18:52:18Z")

</div>

Devices were unavailable again (1.5.1). I just noticed 1.5.2 was available and after updating, the devices are available again.

[Previous page](https://community.homey.app/t/app-tuya-smart-life-smart-living/146735.md?page=16)

[Next page](https://community.homey.app/t/app-tuya-smart-life-smart-living/146735.md?page=18)
