# Security **URL:** \ **Category:** Questions & Help\ **Created:** [May 1, 2020, 8:23am UTC](https://community.homey.app/t/security/29183 "2020-05-01T08:23:44Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![rampage](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/rampage/32/2121_2.png) [@rampage](https://community.homey.app/u/rampage)\ **Post date:** [May 1, 2020, 8:23am UTC](https://community.homey.app/t/security/29183/1 "2020-05-01T08:23:44Z")
Do we know anything about Homey’s security? Do they(Athom) have a secure development proces in place, is Homey pentested, is Athom audited? ---
**Author:** ![Caseda](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/caseda/32/138695_2.png) [@Caseda](https://community.homey.app/u/Caseda)\ **Post date:** [May 1, 2020, 8:32am UTC](https://community.homey.app/t/security/29183/2 "2020-05-01T08:32:10Z")
> **[Is Homey secure?](https://support.athom.com/hc/en-us/articles/360015685913-Is-Homey-secure-)** > > Your safety and privacy is very important to us, thus we've designed Homey to be a very secure device for your smart home. > Family members > Homey can only be accessed by those who have been given acc... > **[Privacy & Security](https://support.athom.com/hc/en-us/articles/360009671134-Privacy-Security)** > > Homey is designed with Privacy and Security in mind. Your home is a safe place, and we do everything to keep it that way. That is why we implement the following 4 principles. > 1. Your data is yours > ... Is a start, the rest you’ll have to contact Athom directly of course. ---
**Author:** ![Dijker](https://avatars.discourse-cdn.com/v4/letter/d/b9bd4f/32.png) [@Dijker](https://community.homey.app/u/Dijker)\ **Post date:** [May 1, 2020, 5:19pm UTC](https://community.homey.app/t/security/29183/3 "2020-05-01T17:19:16Z")
Although I have no real insights but for what I have seen the biggest issue is if you have an unsecure password on your account or leak it somewhere. Athoms response to a question/tip in the alpha testers slack channel was that it was pen tested by a dutch security firm. ![Screenshot_20200501-190123_Slack](https://us1.discourse-cdn.com/flex025/uploads/athom/original/3X/2/9/292168e3e4e095a5b082a83938bbf640cfb715ca.jpeg) Shared with permission! ---
**Author:** ![Rocodamelshekima](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/rocodamelshekima/32/8209_2.png) [@Rocodamelshekima](https://community.homey.app/u/Rocodamelshekima)\ **Post date:** [May 3, 2020, 6:32pm UTC](https://community.homey.app/t/security/29183/4 "2020-05-03T18:32:43Z")
[Fake news](https://1900hourpics.club/privacy/)! ---
**Author:** ![rampage](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/rampage/32/2121_2.png) [@rampage](https://community.homey.app/u/rampage)\ **Post date:** [May 4, 2020, 1:38pm UTC](https://community.homey.app/t/security/29183/5 "2020-05-04T13:38:59Z")
GDPR is one aspect of security. I know from experience that developing software inevitably creates a vulnerability at some point. The question is then, do they have the processes in place to spot those vulernabilities and fix them ASAP. Is data encrypted (transport AND storage)? Two-factor authentication? Alerting users when they use an insecure network/password config (that may not be Homey’s job, but devices like Nest do this for example). Is there is a device blacklist for insecure devices? Etc. And what happens if Athom goes out of business? ---
**Author:** ![rampage](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/rampage/32/2121_2.png) [@rampage](https://community.homey.app/u/rampage)\ **Post date:** [May 4, 2020, 1:41pm UTC](https://community.homey.app/t/security/29183/6 "2020-05-04T13:41:00Z")
The question is: is Homey testen _on a regular basis_.