would you recommend setting up two-factor authentication as an additional security method yes rob yes i would in fact i'm gonna do you one better and let's take a look at my top five essential tips for securing your home assistant hey guys and welcome back to another tech tutorial tuesday the series where you guys ask questions and i do our best to answer them as quickly and efficiently as possible and today that question comes from rob from the remote access video and although i'm not answering that question directly because that would be a very a very short video i thought we could pivot and turn this video into a top five essential tips for securing your home assistant because what can i say i'm a nice guy and you guys also seem to enjoy the security aspect from the remote access video most of these tips are aimed more specifically at if you have your home assistant available externally and by no means is this an exhaustive list but more of a big basic or a beginner level list that is going to get you the most bang for your buck there are a lot more that we could cover that are a bit more advanced but they probably require their own dedicated video to do sort of a more deep dive on those but as long as you're doing the basic ones from this video you should be in a much better place very quickly before we get into the first tip if you like this video and you want to see more just like it make sure to hit that like button and get subscribed if you aren't already and i will very much appreciate it and if you want your question to be answered in the next video make sure to drop it in the comments down below and you never know i might just answer it okay so tip number one is to make sure you are using https i'm not going to spend too long on this one because i'm sure if you have remote access enabled you already have https enabled or at least you should but essentially https is going to make sure that all of your traffic between yourself and the server is encrypted using ssl or tls this means all of your traffic to and from your home assistant server is being encrypted and that no sensitive information can be intercepted and leaked it also means to enable https on any other services that you're using for example if your home assistant and server speaks to an external api make sure that it uses https tip number two is to make sure you are using strong passwords and also different passwords it seems like such an obvious thing to do but i can almost guarantee that tons of you are not doing this already and it's a really important step to take it's also a really low hanging fruit right so it's something that is so easy to do and so easy to achieve yet a lot of people don't do it for some reason i mean how often do you actually log into home assistant you only really do it once when you set up the app or login on the desktop and then after that the password is saved if you want it to be so it's not like you're having to constantly enter the password over and over and so i definitely suggest using a strong password here make sure to use a password manager such as lastpass this can help you generate um unique long passwords for all of your applications and when i say use a different password i mean make sure to generate different passwords for all of your integration don't just
START_INTERACTION_TOKEN very quickly before we get into the first tip if you like this video and you want to see more just like it make sure to hit that like button and get subscribed if you aren't already and i will very much appreciate it and if you want your question to be answered in the next video make sure to drop it in the comments down below and you never know i might just answer it okay END_INTERACTION_TOKEN