Tuya vs TTLock: Which Smart Lock Ecosystem Should You Sell?
Both ecosystems work. They suit different buyers, and choosing wrongly costs a lot of after-sales time.
Read the article →Anti-Peep and Temporary Passwords on Smart Locks
Two different problems get solved by two different features, and buyers often confuse them. Anti-peep passwords protect the code while it is being typed. Temporary passwords avoid sharing a permanent code at all.
How an anti-peep password works
The real code sits somewhere inside a longer string of digits. The lock looks for the valid substring and ignores the rest, so anyone watching sees a sequence that is not the password.
Swipe the table sideways to see the full specification →
| Real code | 1-2-3-4-5-6 |
|---|---|
| What the user types | 8-5-1-2-3-4-5-6-9-3 |
| What the lock does | Finds the valid substring and unlocks |
| What a bystander learns | Nothing usable |
The feature costs nothing to enable and it is the single easiest improvement to make on an entry door that faces a corridor or a street.
The three kinds of temporary password
| One-time | Expires after a single use | Generated in the app | A courier or a one-off visitor |
|---|---|---|---|
| Time-limited | Valid between two set times | Start and end time set in the app | A cleaner, a repair visit, a short-stay guest |
| Recurring | Valid in a repeating window | A schedule rule set in the app | A regular cleaner or a gardener |
All three remove the reason people give out a permanent code. That is the real benefit: not the convenience, but the fact that the permanent code stays unknown.
How long a code is, and why it matters
| Administrator | 6 to 8 digits | Highest authority, manages other users |
|---|---|---|
| Standard user | 4 to 6 digits | Everyday entry |
| Temporary | 6 digits | Expires on time or on use |
A longer administrator code and a shorter daily code is a reasonable split. The administrator code is used rarely, so the extra digits cost nothing in daily use.
What protects the code in transit
Codes, templates and commands travel between the app and the lock under AES-128 encryption. That matters on a Wi-Fi lock, where the command may cross a network you do not control.
- AES-128 encryption on app-to-lock communication
- Fingerprint templates stored as templates rather than images
- Temporary codes generated in the app rather than held on the lock
- Access history readable in the app where a gateway is fitted
What to confirm before you order
Swipe the table sideways to see the full specification →
| Anti-peep | Confirm it is supported on the model, not assumed from the range |
|---|---|
| Temporary passwords | One-time and time-limited are the two worth having |
| Password capacity | 100 codes including temporary ones on the door lock models |
| Access record | Needs a gateway; without one there is no history to read |
| Third-party platform | Tuya and TTLock expose these features differently |
If access has to be revoked without visiting the site, the feature you need is temporary passwords plus a gateway. Without the gateway there is no remote revocation.
Buyer Questions
Three questions this guide usually raises.
On this topic
Can someone work out my code by watching me type it?
Not with an anti-peep password enabled. The user types a longer string that contains the real code, so what a bystander sees is not the password.
Do temporary passwords need a gateway?
Generating them does not, but revoking one remotely does. Without a gateway the code still expires on its own schedule; with one you can cancel it early.
How many codes can one lock hold?
100 codes including temporary ones on the door lock models. Confirm the figure per model, because it varies across the range.
Related Reading
Active Unlock vs Request-Based Unlock in Smart Locks
The single most expensive misunderstanding in app-connected locks, and how to avoid it.
Read the article →Choosing a Mortise Body and Door Thickness for a Smart Lock
The four measurements that decide whether a smart door lock order works.
Read the article →