# Security and BackDoor

**URL:** <https://community.homey.app/t/security-and-backdoor/145230>\
**Category:** Questions & Help\
**Created:** [November 11, 2025, 2:01pm UTC](https://community.homey.app/t/security-and-backdoor/145230 "2025-11-11T14:01:59Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![PedroNL](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/pedronl/32/144579_2.png) [@PedroNL](https://community.homey.app/u/PedroNL)\
**Post date:** [November 11, 2025, 2:01pm UTC](https://community.homey.app/t/security-and-backdoor/145230/1 "2025-11-11T14:01:59Z")

</div>

My question is to you is what is the security of this product? Where are the cloud servers hosted? Do know if someone accesses your account that you would be alerted?

Do you practice zero trust practices?

---

<div class="post-metadata">

**Author:** ![Dijker](https://avatars.discourse-cdn.com/v4/letter/d/b9bd4f/32.png) [@Dijker](https://community.homey.app/u/Dijker)\
**Post date:** [November 11, 2025, 2:05pm UTC](https://community.homey.app/t/security-and-backdoor/145230/2 "2025-11-11T14:05:05Z")

</div>

> First of all, welcome to the Homey Community!
> 
> To make sure you are aware of the forum rules, please read the _ **Welcome to the forum!** _ post [here](https://community.homey.app/t/welcome-to-the-forum/31).

---

<div class="post-metadata">

**Author:** ![Dijker](https://avatars.discourse-cdn.com/v4/letter/d/b9bd4f/32.png) [@Dijker](https://community.homey.app/u/Dijker)\
**Post date:** [November 11, 2025, 2:14pm UTC](https://community.homey.app/t/security-and-backdoor/145230/3 "2025-11-11T14:14:48Z")

</div>

See their website

Fe

> **[Report a security vulnerability | Homey](https://homey.app/en-us/wiki/report-a-security-vulnerability/)**

And  
[https://support.homey.app/hc/en-us/articles/7494444235292-Where-are-Homey-s-datacenters-located](https://support.homey.app/hc/en-us/articles/7494444235292-Where-are-Homey-s-datacenters-located)

> [@PedroNL](#):
>
> Do know if someone accesses your account that you would be alerted?

You can enable 2FA or use a Google or Apple account. There is no alert on suspicious logon afaik but it could be I didn’t leak my pwd yet…