In recent years we have tested various smart locks. Tedee is so far the smallest and quietest of the motor locks installed in our test lab. The following test report will tell you about the security and privacy of the Polish smart lock.

Update: In 2022, the tedee lock has also successfully passed the certification test, so we gladly award our “Approved Smart Home Product” certificate for the second year in a row. The report has been updated in the relevant sections.

Technical Data

The tedee system consists of a GERDA lock cylinder and the optional tedee bridge, which allows the lock to be controlled not only via Bluetooth 5.0 but also online. Existing locking cylinders from other manufacturers can also be made compatible by using an adapter.

(c) tedee

App

The tedee app was subjected to a static and dynamic analysis. The app’s source code is heavily obfuscated, making it difficult for attackers to analyze and understand security relevant functions. It is noticeable, however, that the development was not only based on Security by Obscurity. By implementing certificate pinning, the communication between the app and tedee servers could neither be eavesdropped nor manipulated. During the test, no unencrypted/unsecured communication could be detected, neither via Bluetooth with the smart lock, nor online.

Bluetooth and online communication

The Bluetooth communication is encrypted according to the state of the art and thus secured against attacks from the surrounding area. The communication between app and cloud as well as cloud and tedee bridge was also TLS1.2 encrypted at all times.

Online communication of the tedee app

The extended certificate validation integrated into the app effectively prevents even more sophisticated attacks.

Privacy

The very good impression of the Smart Lock now continues in the area of privacy. Some small points can still be added to further increase transparency. Here we are still in good cooperation.

Conclusion

The tedee lock can join the ranks of our previously tested smart locks that have made security a part of the product design and not just a sideline. In collaboration, the manufacturer has further improved the overall solution and mastered all areas of our certification test, which is why we are awarding our “Approved Smart Home Product” certificate to the tedee lock and tedee bridge.