August Smart Lock Pro (3rd Generation)

From Wiki-IoT



August Smart Lock Pro (3rd Generation)
Security Grade
   
     A-
   
Calculator v1
August Smart Lock Pro (3rd Generation)
   Brand: August (Assa Abloy) (Parent: Assa Abloy)
   Category: Smart Door Lock • Model / Gen: 3rd Generation Smart Lock Pro
   Release Date: 2017-01-01 • Status: In sale
   Classification Date: 2026-11-01 • Official Website

Security Evaluation

1. Device Security

Criterion Value Proof Comment
Known hardware tampering Rare πŸ”— Proof Lock installed on inside of door. Includes tamper alerts if lock is removed, but physical attack is possible with tools.
Known vulnerabilities Rare πŸ”— Proof Some Bluetooth-related vulnerabilities demonstrated in research, but practical exploitation requires close proximity.
Prior attacks None πŸ”— Proof Smart locks have not been targeted by mass botnet campaigns. Physical security is primary concern rather than remote attacks.
Updatability Very common πŸ”— Proof August regularly releases firmware updates with security improvements and new features.
Category Score Score: 2 / 3

2. System Security

Criterion Value Proof Comment
Authentication with other systems Full πŸ”— Proof Lock communicates with August cloud services via August Connect bridge using strong authentication. Each lock has unique security credentials.
Communications Encrypted with obselete encryption πŸ”— Proof Cloud communications use TLS. Bluetooth communication with phones is encrypted, but older Bluetooth implementations have had weaknesses.
Storage Encrypted with obselete encryption πŸ”— Proof Lock stores encrypted digital keys and user credentials. Encryption implementation has not been fully independently audited.
Category Score Score: 2 / 3

3. User Authentication

Criterion Value Proof Comment
Account management Full πŸ”— Proof August accounts support extensive user management including temporary keys, scheduled access, and permission levels.
Authentication Secure πŸ”— Proof August accounts support two-factor authentication. App also requires biometric or PIN authentication to unlock.
Brute-force protection Exist πŸ”— Proof Lock has protections against brute-force attacks on keypad (if equipped) and cloud accounts have rate limiting.
Event logging Access event logged πŸ”— Proof Detailed lock/unlock history available in app, showing who unlocked door and when.
Passwords Require change after setup with complexity requirements πŸ”— Proof August accounts require strong passwords. Users are prompted to enable 2FA during setup.
Category Score Score: 1 / 3

Technical Specifications

Property Details
Operating System & App (Companion App: August App)
Hardware (CPU / GPU) CPU: • GPU:
Memory & Storage Memory: • Storage:
Power, Battery & Charging Battery: • Power: • Charging:
Display & Camera Display: • Camera:
Sound & Connectivity Sound: • Connectivity: Bluetooth, Wi-Fi (via August Connect bridge)
Physical (Dimensions & Mass) Dimensions: • Mass: