Local smart home security setup from scratch

Building a local smart home security system means your devices work even when the internet goes down—a concept that sounds obvious until you realize how many “smart” security devices are just expensive paperweights with cloud dependencies. This guide covers the hardware and architecture you need for a setup that actually secures your home without selling your data to third parties.

Smart Locks and Entry Sensors

Your first security layer is controlling who enters your home. Smart locks are controversial in security circles—any lock with a battery is technically weaker than a deadbolt—but they add genuine convenience for tracking access and automating other systems.

For a local-first approach, Aqara Smart Lock U100 is a solid Apple-centric option, but read the integration path carefully. Aqara uses proprietary encryption on its Zigbee locks, so the U100 will not pair to ZHA or Zigbee2MQTT directly. Home Assistant reaches it through the Aqara Hub M3 acting as a Matter bridge. That path is local and needs no cloud account, and the fingerprint reader is reliable — but a vendor hub does sit in the middle, so this is not the pick if you want a purely Home Assistant-native lock. If you want a polished Apple-centric option, the Schlage Encode Plus runs over Wi-Fi and HomeKit-over-Thread for Apple Home Key - note it is not a Matter device, so it is not the pick if you specifically need Matter. For a broader lock roundup, see the best local smart locks.

Don’t sleep on door and window sensors. A locked door means nothing if the window is open. Aqara Door and Window Sensor P2 connects via Matter-over-Thread and reports state locally. Pair these with your lock—automate a scene that locks the door and arms the system when all entry sensors report closed.

For Apple users deep in HomeKit, the August Wi-Fi Smart Lock (4th Gen) is a popular retrofit, but it is the wrong fit for this guide. There is no local API: Home Assistant’s august integration polls August’s cloud, so the lock’s state in HA depends on their servers being up. Bluetooth gives you proximity control standing at the door, and that is the only local path it offers. Fine as a convenience lock, not as part of a local-first security layer.

Environmental Sensors: Smoke, CO, and Water Leaks

Security isn’t just about intruders—it’s about protecting your home from disasters. This is where local processing matters most. When smoke is detected, you need your sirens to sound immediately, not after a cloud round-trip.

For smoke detection, the Heiman Smart Smoke Alarm is a Matter-over-Thread device that integrates cleanly into Home Assistant (and any Matter controller) through a Thread border router. It’s cheap, reliable, and triggers local automations without cloud latency. For more options, see the best smart smoke detectors with local alerts. Add a Heiman Zigbee Smart Siren nearby for actual alarm capability—the smoke detector’s built-in buzzer is an afterthought.

Water leaks destroy homes. Place Heiman Water Leak Sensor sensors near water heaters, under sinks, and behind washers. When triggered, these should activate a shutoff valve like the Dome Home Automation Water Shut-Off Valve if you want full automation. The dome valve is Z-Wave, so it works with Hubitat and most Z-Wave controllers.

Carbon monoxide is the silent killer. The Heiman Smart Carbon Monoxide Alarm gives you local Matter-over-Thread integration for about half what Nest charges for similar functionality. Yes, Google Nest Protect Smoke + CO Alarm looks nicer on your ceiling, but you’re paying a premium for the brand.

Cameras and Video Doorbells

Here’s the uncomfortable truth: most “smart” cameras are surveillance devices with terrible security track records. Pick your tradeoff based on how much you value privacy versus convenience.

The Reolink Argus 4 Pro offers solid local recording to microSD with no mandatory cloud subscription. One caveat matters a lot here: like every Reolink battery camera, the Argus 4 Pro does not expose RTSP or ONVIF on its own — Reolink reserves those for its wired PoE models, because keeping a stream open would wreck battery life. To pull it into Home Assistant or Frigate you need a Reolink Home Hub or NVR, which re-exposes the camera locally. Budget for one alongside the camera, or buy a PoE model if a direct RTSP feed is what you are after.

For a doorbell, Reolink Video Doorbell WiFi delivers local recording without requiring their cloud. See our full list of the best local security cameras for Home Assistant. Yes, the setup is slightly fiddly, but you get what you pay for.

If you prefer Apple-centric, the Aqara Smart Video Doorbell G4 works with HomeKit Secure Video. It is worth being precise about what that means. A HomePod or Apple TV acts as the home hub and does the motion analysis locally, but the resulting clips are stored in iCloud, end-to-end encrypted and not counted against your iCloud storage. There is no option to keep HomeKit Secure Video recordings on the hub itself, and recording needs an iCloud+ plan. The doorbell’s own face detection runs on-device. So the smarts are local; the archive is not.

Avoid any camera that requires a cloud subscription for basic features. You’re building a local system, not renting one.

The Hub and Controller

Your hub choice defines everything else. For local-first security, Home Assistant on dedicated hardware beats cloud-dependent systems.

Home Assistant Green is the simplest purpose-built option now that the Home Assistant Yellow - which had built-in Zigbee and Thread radios - was discontinued in October 2025. The Green runs Home Assistant OS and stays local; add a Zigbee/Thread USB coordinator (such as the Connect ZBT-2). Add a separate Z-Wave USB stick and you’ve got Matter, Zigbee, Thread, and Z-Wave covered. The Green is $199 and ships ready to run — there is no case or SSD to buy — so once you add both USB radios (the Connect ZBT-2 runs about $49), budget closer to $300 all in.

The Aqara Hub M3 works if you’re starting small—it’s Matter hub, Zigbee bridge, and IR controller in one. But it’s not a full home automation controller. Good for expanding an existing setup, poor as a core.

Hubitat users: the Hubitat Elevation C-8 runs locally and supports nearly everything. Hubitat stopped making the plain C-8 in March 2026, so a new buyer wants the C-8 Pro (same radios, faster CPU and more RAM). The tradeoff is worse documentation and a smaller community than Home Assistant. It excels at Z-Wave if that’s your priority.

Quick Verdict

For a local-first security system, go with Home Assistant Green (or a mini PC running Home Assistant OS) paired with Aqara locks/sensors for Zigbee coverage, Reolink cameras for local recording, and Hubitat if you need Z-Wave devices. Avoid any device that requires a cloud account for basic operation. The best security system is one that works when your internet is down—because someday it will be.

Spend your budget on good sensors and reliable locks. The cameras matter less than the fundamentals. Local storage beats cloud features every time for security applications.