Home Assistant Feature Scans Secrets Without Permission
A Home Assistant integration that checks stored secrets against the Pwned Passwords service was found to run automatically, raising privacy concerns for users who did not enable it.
17 Oct 2026 0 reads Compiled with AI
#Home Assistant #Pwned Passwords
A recent GitHub issue raised a privacy concern with Home Assistant. The developer noticed that the platform automatically scans stored secrets against the Pwned Passwords service and forwards the data, even when users did not enable the feature. The integration was not intended to be opt‑in, and the user reported that they had never authorized any scanning or data transmission. The issue links to the service’s page for more information.
Users want to know how to disable the scanning. The suggestion from the community is to make the feature opt‑in, so that only users who explicitly enable it will have their secrets checked. Until Home Assistant adds a clear toggle, the current configuration cannot be turned off. The change would prevent unintended data exposure and give users control over their private information.