Home Assistant Cloud uses certificate transparency. This allows for independent third-party auditing to verify that no one else has been issued a certificate for your remote access URL. You can learn more about our security here. Here are the steps you can take to verify your own Home Assistant certificates:
- Visit the Home Assistant Cloud page on your Home Assistant system
- In the Remote Access section, expand the “Security Options” and view the “Certificate Information”
- Take note of the Remote Access URL and “Certificate fingerprint”
- Now visit a certificate search site like crt.sh
- Put in your Remote Access URL into the search (it will end with ui.nabu.casa)
- Then check if the fingerprint matches the “SHA-1” number listed on the latest certificate