Aqara Smart Lock U300

Aqara Smart Lock U300
Security Grade B Calculator v	Aqara Smart Lock U300 Brand: Aqara (Parent: Lumi United Technology) Category: Lock • Model / Gen: U300 Release Date: 2024-10-01 • Status: In sale Classification Date: • Official Website

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	Very common	🔗 Proof	The exterior lock body, keypad/fingerprint area, battery cover, and interior mounting hardware are physically accessible.
Known vulnerabilities	None	🔗 Proof	An exact-model NVD search returned no CVE records for the U300 at the time of research.
Prior attacks	None	🔗 Proof	No public model-specific botnet campaign or lock-bypass campaign was found.
Updatability	Very common	🔗 Proof	Aqara provides product support and app/firmware update channels.
Category Score	Score: 2 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Full	https://www.aqara.com/en/security-certifications/ 🔗 Proof	Supports Matter and Apple Home/HomeKit integration, which use authenticated commissioning and pairing.
Communications	Encrypted with up-to-date encryption	🔗 Proof	The product uses Matter over Thread/Bluetooth with encrypted protocol traffic; no plaintext management protocol is advertised.
Storage	Encrypted with obselete encryption	🔗 Proof	Credentials and access data are stored locally in the lock; encryption at rest is not publicly detailed.
Category Score	Score: 2 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Basic	https://www.aqara.com/en/privacy-policy/ 🔗 Proof	Aqara Home account with multiple users and access credentials; detailed role separation is not documented.
Authentication	Secure	🔗 Proof	Supports fingerprint, PIN/keypad, app, and Apple home key authentication; multiple independent factors are available.
Brute-force protection	Basic	🔗 Proof	No public lockout or attempt-limit policy was found; partial evidence only.
Event logging	Partial logging	🔗 Proof	Lock activity and access history are exposed through the app, but a full audit log is not documented.
Passwords	Require change after setup with complexity requirements	https://store-support.aqara.com/products/aqara-smart-lock-u300 🔗 Proof	User-defined PINs/credentials; no shared default lock password is documented.
Category Score	Score: 2 / 3

Technical Specifications

Property	Details
Operating System & App	Embedded firmware (Companion App: Aqara Home app (Android/iOS))
Hardware (CPU / GPU)	CPU: • GPU:
Memory & Storage	Memory: • Storage:
Power, Battery & Charging	Battery: AA batteries • Power: • Charging: No
Display & Camera	Display: No • Camera:
Sound & Connectivity	Sound: • Connectivity: Matter over Thread; Bluetooth
Physical (Dimensions & Mass)	Dimensions: • Mass:

Prepared from public product documentation, vendor security information, and NVD records. The release date is approximate where the vendor did not state a day. No device was physically tested, scanned, or attacked. Each score links to the public evidence used for the assessment.