Got 20 minutes instead of 5? We wrote the in-depth version: Home Assistant Remote Access in 2026 - Everything Tutorials Won't Tell You. This article is the intro; the pillar goes deeper on CGNAT, security, latency, relay redundancy.
The Problem: Accessing Home Assistant from Outside Your Network#
You've set up Home Assistant at home. It works perfectly on your local network. But the moment you leave your house - nothing. No access to your dashboards, no control over your lights, heating, or alarm system.
This is the reality for millions of Smart Home users. Your powerful home automation system becomes useless the moment you step outside your front door.
Common Solutions (and Their Drawbacks)#
VPN (WireGuard, OpenVPN)#
A VPN creates an encrypted tunnel between your phone and your home network. Sounds great in theory, but:
- Complex setup - configuring WireGuard or OpenVPN requires editing router settings, generating keys, and maintaining the connection
- Breaks mobile access - VPN connections drain battery, interfere with other apps, and don't reconnect reliably
- Router dependency - many ISPs use CGNAT or restrict port forwarding, making VPN impossible without extra hardware
Port Forwarding#
The "classic" approach - expose Home Assistant directly to the internet by forwarding port 8123 on your router.
- Security risk - your Home Assistant instance is directly reachable from the entire internet
- Requires static IP or DDNS - dynamic IPs change, breaking your connection
- No HTTPS by default - you need to configure SSL certificates yourself
- Router config needed - every router is different, and many ISPs block port forwarding
Nabu Casa (Home Assistant Cloud)#
Nabu Casa is the official cloud service for Home Assistant. It works well, but:
- Only supports Home Assistant - if you also run Grafana, Node-RED, or ESPHome dashboards, you need separate solutions
- Monthly subscription - €7.50/month with limited customization
- No custom subdomain - you get a random URL, not
yourname.yourdomain.com
A Better Approach: SSH Reverse Tunnel#
What if you could access Home Assistant - and any other web service on your home server - securely, without touching your router or exposing any ports?
That's exactly what SmartHomeEntry does. Here's how it works:
- A lightweight agent runs on your home server (next to Home Assistant)
- The agent creates an outbound SSH tunnel to our relay server - no incoming ports needed
- Your Home Assistant gets a permanent HTTPS subdomain (e.g.,
smith.smarthomeentry.com) - You access it from anywhere - phone, tablet, laptop - just like any website
Why This Is Better#
| SmartHomeEntry | VPN | Port Forwarding | Nabu Casa | |
|---|---|---|---|---|
| Setup time | ~1 minute | 1-4 hours | 30-60 min | ~5 min |
| Router config needed | No | Yes | Yes | No |
| Works with CGNAT | Yes | No | No | Yes |
| Custom HTTPS subdomain | Yes | No | No | No |
| Multi-service support | Yes | Yes | Limited | HA only |
| Exposed ports | Zero | 1+ | 1+ | Zero |
Step-by-Step Setup#
1. Create your SmartHomeEntry account#
Sign up at smarthomeentry.com and choose a plan. The 7-day free trial requires no credit card.
2. Install the agent#
From your dashboard, copy the one-line install command. SSH into your Home Assistant server and paste it:
curl -fsSL https://get.smarthomeentry.com | sudo bash -s -- --token YOUR_TOKEN
The agent installs as a system service and starts automatically.
3. Access Home Assistant from anywhere#
Within 60 seconds, your custom subdomain is live. Open yourname.smarthomeentry.com in any browser - you'll see your Home Assistant login page, secured with HTTPS.
Works With More Than Just Home Assistant#
Unlike Nabu Casa, SmartHomeEntry works with any HTTP service running on your home server:
- Home Assistant (port 8123)
- Grafana dashboards (port 3000)
- Node-RED flows (port 1880)
- ESPHome dashboard (port 6052)
- Portainer for Docker management
- Any other web service
Security#
SmartHomeEntry uses SSH-2 with Ed25519 keys - the same encryption standard used by GitHub and major cloud providers.
- Zero exposed ports - the agent initiates an outbound connection only
- No password authentication - public key cryptography exclusively
- Open-source agent - inspect the code yourself on GitHub
- Kill switch - disable access with one click from the dashboard
Ready to Try It?#
Get secure remote access to your Home Assistant in under 60 seconds. No VPN, no port forwarding, no router configuration.
