SwitchBot Lock Vision Pro

SwitchBot Lock Vision Pro
Security Grade B Calculator v1	SwitchBot Lock Vision Pro Brand: SwitchBot (Parent: Woan Technology (Shenzhen) Co., Ltd.) Category: Smart Lock • Model / Gen: Lock Vision Series (2026) W9022000 (FCC-listed model for Lock Vision series) Release Date: 2026-05-15 • Status: In sale Classification Date: 2026-10-25 • Official Website

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	Rare	🔗 Proof	SwitchBot states that the Lock Vision Series provides tamper alerts and forced-unlock protection. These measures can help detect unauthorized physical interference. However, model-specific hardware tampering statistics are unavailable, so the Rare rating is provisional.
Known vulnerabilities	Rare	🔗 Proof	CVE-2026-8374 describes a Bluetooth access-control bypass affecting specified versions of earlier SwitchBot Lock Series components. The public affected-product list does not explicitly identify Lock Vision Pro. Therefore, this advisory indicates a related product-family risk but does not establish that Lock Vision Pro is vulnerable. Rare is a provisional classification.
Prior attacks	None	🔗 Proof	No publicly documented successful attack specifically targeting the SwitchBot Lock Vision Pro was identified in the sources reviewed as of October 21, 2026. A vulnerability advisory concerning other SwitchBot Lock Series components exists, but vulnerability disclosure is not equivalent to confirmed exploitation of this model. This None rating is provisional.
Updatability	Rare	🔗 Proof	The manufacturer documents firmware updating and instructs users to keep Lock Vision Pro firmware current. However, the public documentation reviewed does not establish a frequent or regular release schedule. Rare is selected conservatively because update frequency has not been verified.
Category Score	Score: 2 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	🔗 Proof	Lock Vision Pro supports Matter pairing through a setup code or QR code and authenticated management through the SwitchBot App. The documentation does not establish that every third-party integration and communication path uses full mutual authentication, so Partial is selected.
Communications	Encrypted with up-to-date encryption	🔗 Proof	SwitchBot states that the Lock Vision Series uses AES-128 encrypted communication and supports Matter over Wi-Fi. These are modern security technologies. However, the protection of every communication path has not been independently verified, and earlier SwitchBot Lock Series components have had reported Bluetooth security issues.
Storage	Encrypted with up-to-date encryption	🔗 Proof	SwitchBot confirms that facial biometric information is encrypted and stored locally on the Lock Vision Pro rather than uploaded to the cloud. Passwords and other registered credentials are also stored on the device. The encryption algorithm and coverage of all local storage have not been independently established, so this rating is based on the documented biometric protection.
Category Score	Score: 2 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Full	🔗 Proof	The lock supports permanent, temporary, one-time and emergency passcodes, allowing access permissions with different durations. Authorized users can add and delete registered credentials through the SwitchBot App. These functions provide flexible management of access credentials.
Authentication	Secure	🔗 Proof	Lock Vision Pro supports 3D facial recognition with liveness detection, palm vein recognition, fingerprint recognition, passcodes and NFC access. Multiple authentication methods and anti-spoofing measures help prevent unauthorized entry, although independent penetration-test results have not been established.
Brute-force protection	Exist	🔗 Proof	According to the manufacturer, the Lock Vision Series automatically locks out further attempts after repeated failed verification. This reduces the risk of repeated password guessing and unauthorized authentication attempts.
Event logging	Access event logged	🔗 Proof	The manufacturer's specifications state that Lock Vision Pro stores and displays up to six months of access and operation records locally. Emergency passcode use can also generate a recorded event and notification.
Passwords	Require change after setup	🔗 Proof	Users create their own 6-to-12-digit access passcodes and must set a permanent passcode before adding other passcode types. No shared factory-default access passcode is documented. However, a mandatory change of a default password after setup has not been established, so the selected category is an approximate match to the Wiki-IoT rubric.
Category Score	Score: 2 / 3

Technical Specifications

Property	Details
Operating System & App	Proprietary embedded firmware (version not publicly specified) (Companion App: SwitchBot App (Android / iOS))
Hardware (CPU / GPU)	CPU: Not publicly specified by manufacturer • GPU: Not publicly specified / N/A for conventional graphics
Memory & Storage	Memory: Not publicly specified by manufacturer • Storage: Internal local storage for biometric data and up to 6 months of access logs; capacity not disclosed
Power, Battery & Charging	Battery: 10000 mAh rechargeable Li-Po main battery; CR123A backup battery • Power: Battery powered; rechargeable main battery and CR123A backup; USB-C emergency power input • Charging: Rechargeable main battery; USB-C emergency power supply supported
Display & Camera	Display: Numeric keypad (0-9) and control buttons; no conventional display specified • Camera: 3D structured-light infrared face-recognition sensor; palm-vein and fingerprint biometric sensors
Sound & Connectivity	Sound: Not publicly specified by manufacturer • Connectivity: 2.4 GHz Wi-Fi, Bluetooth Low Energy (BLE), NFC, Matter over Wi-Fi
Physical (Dimensions & Mass)	Dimensions: Exterior: 6.42 x 2.76 x 1.10 in; Interior: 7.09 x 3.03 x 1.26 in • Mass: 1553 g

The SwitchBot Lock Vision Pro is a smart door lock introduced by SwitchBot in May 2026. It supports 3D structured-light facial recognition, palm vein recognition, fingerprint recognition, NFC cards, access passcodes, smartphone app control, and physical keys. The device features Wi-Fi and Bluetooth connectivity and supports Matter over Wi-Fi for smart home integration.

The lock is powered by a 10,000mAh rechargeable battery with a CR123A backup battery and a USB-C emergency power input. It is managed using the SwitchBot App and provides local storage of access and operation records for up to six months.

The device incorporates several security features, including biometric liveness detection, encrypted local facial data storage, AES-128 encrypted communication, tamper alerts, forced-unlock protection, and automatic lockout after repeated failed verification attempts. It also supports different types of access passcodes and firmware updates.

However, publicly available information does not fully establish the security of every communication channel or the frequency of firmware updates. In October 2026, a Bluetooth access-control vulnerability was disclosed for specified versions of earlier SwitchBot Lock Series components. The public advisory does not explicitly identify Lock Vision Pro as an affected product, so the vulnerability should not be attributed to this model without further verification.

Based on publicly available manufacturer documentation and security information reviewed as of October 21, 2026, the device provides multiple security mechanisms for access control, authentication, and data protection. Nevertheless, several ratings remain provisional because independent testing results and model-specific attack statistics are limited.

This classification is based on publicly available evidence and does not represent an independent security audit or penetration test.