Withings Body Scan

Withings Body Scan
Security Grade A Calculator v1	Withings Body Scan Brand: Withings (Parent: Withings) Category: Bathroom Scale • Model / Gen: 1 Black, White Release Date: 2023-03-17 • Status: In sale Classification Date: 2025-10-11 • Official Website

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	None	🔗 Proof	The device is a solid, sealed unit made of tempered glass and is not user-serviceable. No public reports of supply chain tampering.
Known vulnerabilities	Rare	🔗 Proof	Runs a highly specialized, single-purpose firmware. Withings has a long history of providing timely OTA updates to patch any potential security issues.
Prior attacks	None	🔗 Proof	No publicly documented, widespread security breaches targeting Withings smart scales or health devices.
Updatability	Very common	🔗 Proof	Firmware is updated automatically and seamlessly in the background via Wi-Fi, managed by the Withings cloud infrastructure.
Category Score	Score: 2 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Full	🔗 Proof	https://www.withings.com/us/en/privacy-policy
Communications	Encrypted with up-to-date encryption	🔗 Proof	All sensitive health data is encrypted both in transit (between the scale and cloud) and at rest
Storage	Encrypted with up-to-date encryption	🔗 Proof	The device stores measurements temporarily if offline. All long-term data is stored and encrypted on Withings' secure, HIPAA-compliant servers.
Category Score	Score: 1 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Full	🔗 Proof	A Withings account is mandatory to use the device and access health data. The device can automatically recognize and assign data to up to 8 different users.
Authentication	Secure	🔗 Proof	Authentication is handled by the cloud-based Withings account, which is protected by a standard password.
Brute-force protection	Exist	🔗 Proof	The Withings account system includes standard server-side protections against brute-force login attempts.
Event logging	Access event logged	🔗 Proof	Access to the Withings cloud account is logged server-side for security and auditing purposes.
Passwords	Require change after setup with complexity requirements	🔗 Proof	The Withings account creation process requires a password that meets standard complexity rules.
Category Score	Score: 1 / 3

Technical Specifications

Property	Details
Operating System & App	Proprietary firmware (Companion App: Withings Health Mate)
Hardware (CPU / GPU)	CPU: • GPU:
Memory & Storage	Memory: • Storage:
Power, Battery & Charging	Battery: • Power: • Charging:
Display & Camera	Display: • Camera:
Sound & Connectivity	Sound: • Connectivity:
Physical (Dimensions & Mass)	Dimensions: 327 x 327 x 28 mm • Mass: 4 kg