Yale Assure Lock 2

Yale Assure Lock 2
Security Grade A- Calculator v1	Yale Assure Lock 2 Brand: Yale (Parent: ASSA ABLOY Group) Category: Smart Door Lock • Model / Gen: 2nd (successor to Assure Lock) YRD256 (with Z-Wave), YRD256-CN (for specific regions) Release Date: 2020-08-01 • Status: In sale Classification Date: 2025-10-09 • Official Website

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	None	🔗 Proof	Physical tampering triggers audible alarms and sends notifications via the app.
Known vulnerabilities	Rare	🔗 Proof	Yale releases firmware updates to address vulnerabilities (e.g., CVE-2022-26144 fixed in 2022).
Prior attacks	Rare	🔗 Proof	Limited public cases of attacks, with security risks primarily mitigated by proper setup (e.g., strong admin codes).
Updatability	Very common	🔗 Proof	Firmware updates require a compatible bridge (e.g., Yale Connect Bridge) and are pushed via the app.
Category Score	Score: 2 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	🔗 Proof	Works with Z-Wave hubs, Apple HomeKit (requires separate bridge), and Alexa/Google Assistant via compatible hubs.
Communications	Encrypted with up-to-date encryption	🔗 Proof	Local data transmission via Z-Wave uses AES encryption; cloud communications use TLS.
Storage	Encrypted with up-to-date encryption	🔗 Proof	User codes, activity logs, and device settings stored on Yale servers with encryption.
Category Score	Score: 2 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Full	🔗 Proof	Manage user codes, device sharing, and activity logs via Yale Access Account.
Authentication	Secure	🔗 Proof	Log in with Yale Account; 2FA (SMS/email) available for account protection.
Brute-force protection	Exist	🔗 Proof	Locks out keypad after 5 consecutive incorrect user codes to prevent brute-force attempts.
Event logging	Access event logged	🔗 Proof	Records lock/unlock events, user code usage, and tampering attempts in the app.
Passwords	Require change after setup with complexity requirements	🔗 Proof	User codes must be 4-8 digits; admin codes have higher security requirements.
Category Score	Score: 1 / 3

Technical Specifications

Property	Details
Operating System & App	Custom embedded system (compatible with Z-Wave, Wi-Fi via bridge) (Companion App: Yale Access App (iOS, Android))
Hardware (CPU / GPU)	CPU: • GPU:
Memory & Storage	Memory: • Storage:
Power, Battery & Charging	Battery: • Power: • Charging:
Display & Camera	Display: • Camera:
Sound & Connectivity	Sound: • Connectivity:
Physical (Dimensions & Mass)	Dimensions: Front Panel: 4.5 x 2.7 x 1.1 inches; Back Panel: 4.5 x 2.7 x 1.1 inches • Mass: 1.36 kg