Remote access to Home Assistant without port forwarding, a public IP, domain setup, firewall changes, or VPN switching.
Securicloud Agent is a Home Assistant app (formerly called an add-on) that creates an encrypted, outbound connection from your Home Assistant installation to the Securicloud service.
No Securicloud access is enabled until you explicitly register the installation. Securicloud Basic is currently free to use and does not require payment details.
- No router port forwarding
- No public IP address or dynamic DNS
- No domain or TLS certificate setup
- No VPN client to enable before opening Home Assistant
- No Securicloud credentials entered into the app
- Remote access can be enabled, disabled, and revoked from the Securicloud Control Panel
The app does not expose a new inbound Internet port. Its management page is available inside Home Assistant through Ingress.
- Home Assistant OS with support for Apps
- Working outbound Internet access
- A free Securicloud account created during registration, or an existing account
Supported architectures:
aarch64amd64armv7i386
Use the button above to add this repository to Home Assistant.
Then:
- Open Settings → Apps → App store.
- Select Securicloud Agent.
- Install and start the app.
- Open Web UI.
- Select Register Installation.
-
Open Home Assistant.
-
Go to Settings → Apps → App store.
-
Open the menu in the upper-right corner and select Repositories.
-
Add this repository URL:
https://github.com/securicloud/home-assistant-addons -
Find and install Securicloud Agent.
-
Start the app and open Web UI.
-
Select Register Installation.
No app configuration is required.
Registering the Home Assistant installation creates:
- a Securicloud Instance representing this Home Assistant installation;
- a default Access Token for remote access.
After registration, open the Securicloud Control Panel from the app Web UI to manage the Instance and its Access Tokens.
Remote browser or Home Assistant Companion App
│
▼
Securicloud service
▲
│ encrypted outbound connection
│
Securicloud Agent app
│
▼
Home Assistant
- The app generates an installation-specific Instance ID.
- It establishes an encrypted outbound connection to Securicloud.
- No remote access is granted by default.
- You explicitly register the installation with your Securicloud account.
- An enabled Access Token provides remote access through Securicloud.
Your Home Assistant installation is not made directly reachable through a public inbound port.
The app stores only its installation-specific Instance ID in:
/share/ha_instance_id.json
It does not store your Securicloud email address, password, or Access Tokens.
Access Tokens are managed in the Securicloud Control Panel. Disable or delete an Access Token when ordinary remote access should be revoked.
Reset Instance ID is not a general troubleshooting action.
It is intended for cases where the Home Assistant system must be detached completely from the Securicloud account that previously registered it—for example, before transferring the Home Assistant box to a new owner.
Resetting the Instance ID:
- terminates remote connections associated with the previous identity;
- invalidates Access Tokens associated with that installation identity;
- generates a new Instance ID after the app restarts;
- requires the installation to be registered again before remote access can be restored.
For normal access management, use Access Tokens in the Securicloud Control Panel instead.
Remote access requires both Internet connectivity and availability of the Securicloud service. Local access to Home Assistant does not depend on Securicloud and remains available on the local network.
Securicloud Agent is the initial MVP release. The current implementation is intentionally small and has been tested as the active Home Assistant connection method used during development of Securicloud.
Securicloud is not affiliated with or endorsed by Home Assistant.