Yale Assure Lock 2

From Wiki-IoT



Yale Assure Lock 2
Security Grade
   
     A-
   
Calculator v1
Yale Assure Lock 2
   Brand: Yale (Parent: ASSA ABLOY Group)
   Category: Smart Door Lock • Model / Gen: 2nd (successor to Assure Lock) YRD256 (with Z-Wave), YRD256-CN (for specific regions)
   Release Date: 2020-08-01 • Status: In sale
   Classification Date: 2025-10-09 • Official Website

Security Evaluation

1. Device Security

Criterion Value Proof Comment
Known hardware tampering None πŸ”— Proof Physical tampering triggers audible alarms and sends notifications via the app.
Known vulnerabilities Rare πŸ”— Proof Yale releases firmware updates to address vulnerabilities (e.g., CVE-2022-26144 fixed in 2022).
Prior attacks Rare πŸ”— Proof Limited public cases of attacks, with security risks primarily mitigated by proper setup (e.g., strong admin codes).
Updatability Very common πŸ”— Proof Firmware updates require a compatible bridge (e.g., Yale Connect Bridge) and are pushed via the app.
Category Score Score: 2 / 3

2. System Security

Criterion Value Proof Comment
Authentication with other systems Partial πŸ”— Proof Works with Z-Wave hubs, Apple HomeKit (requires separate bridge), and Alexa/Google Assistant via compatible hubs.
Communications Encrypted with up-to-date encryption πŸ”— Proof Local data transmission via Z-Wave uses AES encryption; cloud communications use TLS.
Storage Encrypted with up-to-date encryption πŸ”— Proof User codes, activity logs, and device settings stored on Yale servers with encryption.
Category Score Score: 2 / 3

3. User Authentication

Criterion Value Proof Comment
Account management Full πŸ”— Proof Manage user codes, device sharing, and activity logs via Yale Access Account.
Authentication Secure πŸ”— Proof Log in with Yale Account; 2FA (SMS/email) available for account protection.
Brute-force protection Exist πŸ”— Proof Locks out keypad after 5 consecutive incorrect user codes to prevent brute-force attempts.
Event logging Access event logged πŸ”— Proof Records lock/unlock events, user code usage, and tampering attempts in the app.
Passwords Require change after setup with complexity requirements πŸ”— Proof User codes must be 4-8 digits; admin codes have higher security requirements.
Category Score Score: 1 / 3

Technical Specifications

Property Details
Operating System & App Custom embedded system (compatible with Z-Wave, Wi-Fi via bridge) (Companion App: Yale Access App (iOS, Android))
Hardware (CPU / GPU) CPU: • GPU:
Memory & Storage Memory: • Storage:
Power, Battery & Charging Battery: • Power: • Charging:
Display & Camera Display: • Camera:
Sound & Connectivity Sound: • Connectivity:
Physical (Dimensions & Mass) Dimensions: Front Panel: 4.5 x 2.7 x 1.1 inches; Back Panel: 4.5 x 2.7 x 1.1 inches • Mass: 1.36 kg