August Smart Lock Pro (3rd Generation)

August Smart Lock Pro (3rd Generation)
Security Grade A- Calculator v1	August Smart Lock Pro (3rd Generation) Brand: August (Assa Abloy) (Parent: Assa Abloy) Category: Smart Door Lock • Model / Gen: 3rd Generation Smart Lock Pro Release Date: 2017-01-01 • Status: In sale Classification Date: 2026-11-01 • Official Website

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	Rare	🔗 Proof	Lock installed on inside of door. Includes tamper alerts if lock is removed, but physical attack is possible with tools.
Known vulnerabilities	Rare	🔗 Proof	Some Bluetooth-related vulnerabilities demonstrated in research, but practical exploitation requires close proximity.
Prior attacks	None	🔗 Proof	Smart locks have not been targeted by mass botnet campaigns. Physical security is primary concern rather than remote attacks.
Updatability	Very common	🔗 Proof	August regularly releases firmware updates with security improvements and new features.
Category Score	Score: 2 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Full	🔗 Proof	Lock communicates with August cloud services via August Connect bridge using strong authentication. Each lock has unique security credentials.
Communications	Encrypted with obselete encryption	🔗 Proof	Cloud communications use TLS. Bluetooth communication with phones is encrypted, but older Bluetooth implementations have had weaknesses.
Storage	Encrypted with obselete encryption	🔗 Proof	Lock stores encrypted digital keys and user credentials. Encryption implementation has not been fully independently audited.
Category Score	Score: 2 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Full	🔗 Proof	August accounts support extensive user management including temporary keys, scheduled access, and permission levels.
Authentication	Secure	🔗 Proof	August accounts support two-factor authentication. App also requires biometric or PIN authentication to unlock.
Brute-force protection	Exist	🔗 Proof	Lock has protections against brute-force attacks on keypad (if equipped) and cloud accounts have rate limiting.
Event logging	Access event logged	🔗 Proof	Detailed lock/unlock history available in app, showing who unlocked door and when.
Passwords	Require change after setup with complexity requirements	🔗 Proof	August accounts require strong passwords. Users are prompted to enable 2FA during setup.
Category Score	Score: 1 / 3

Technical Specifications

Property	Details
Operating System & App	(Companion App: August App)
Hardware (CPU / GPU)	CPU: • GPU:
Memory & Storage	Memory: • Storage:
Power, Battery & Charging	Battery: • Power: • Charging:
Display & Camera	Display: • Camera:
Sound & Connectivity	Sound: • Connectivity: Bluetooth, Wi-Fi (via August Connect bridge)
Physical (Dimensions & Mass)	Dimensions: • Mass: