Zigbee2MQTT MQTT Broker Security: A Practical Checklist
A practical checklist for securing Zigbee2MQTT's Mosquitto broker and frontend, from the add-on's anonymous-access default onward. Every fix stays local.
~/archive $ ls -la
Archive
privacy
-
-
Block Tuya Devices From the Internet Without Losing Control
Blocking Tuya's cloud the naive way breaks local control. Here's the heartbeat mechanism behind it, and the blocking order that actually works.
-
How to Get a Tuya Local Key in 2026 (Subscription Fix)
Getting a Tuya local key for LocalTuya or tuya-local still works in 2026, but a subscription-expiration wall stops most first-timers. Here's the fix.
-
Aqara vs Xiaomi Zigbee: Same Hardware, Different Brand?
Aqara and Xiaomi Zigbee devices share a manufacturer, not a company. Here's what that actually means for pairing, hubs, and which brand to buy.
-
Xiaomi Cloud Tokens Extractor Stuck on 2FA? Here’s the Fix
Xiaomi Cloud Tokens Extractor stuck in a 2FA login loop? Here's the update that clears it, the official checklist, and the DevTools workaround.
-
Tuya Zigbee Devices Don’t Need a Local Key (Wi-Fi Ones Do)
Read a LocalTuya guide and assumed you need a 'local key'? If your Tuya device is Zigbee, not Wi-Fi, you can skip that step. Here's the difference.
-
Does Tuya/Smart Life Automation Work Without Internet?
Tuya's own developer docs define three automation tiers with different offline reliability. Here's which one your Smart Life setup actually runs on.
-
Does Tuya Send Your Data to China? What Actually Happens
The 'Tuya sends data to China' claim traces to a 2021 report. Here's what Tuya's own current documentation says about where your data actually goes.
-
Smartmi Humidifier 2 in Home Assistant: Local, No Cloud
Set up the Smartmi Humidifier 2 (zhimi.humidifier.ca1/cb1) in Home Assistant with local polling, no Mi Home cloud. Includes the token-retrieval gotcha.
-
Xiaomi Camera go2rtc Setup: Local RTSP Without the Cloud
How go2rtc's native Xiaomi source pulls Mi/Mijia camera video onto your LAN, what still touches Xiaomi's servers, and which models actually work.