Cannot connect away from home; stuck on remote connection security level: most secure

[trougnouf]

Home Assistant Android app version(s):
2026.1.6-full
Android version(s):
16
Device model(s):
Samsung A54
Home Assistant version:
2026.1.0
Last working Home Assistant release (if known):

Description of problem, include YAML if issue is related to notifications:
When I opened the app, I was asked whether I wanted to let the app know whether I am home for security reasons. I picked yes / more secure. When I switched off the wifi I realized that it wouldn't connect anymore.
My server uses http through wireguard, it's probably more secure than wifi. Anyway I switched it back to less secure but that setting doesn't work, it's stuck on more secure so I have no phone access to home assistant when I'm not home / on my wifi network.

See also: https://community.home-assistant.io/t/remote-connection-security-level-stuck-on-most-secure/980849/2

[TimoPtr]

We did fix the issue about the toggle not updating once you've selected an option on this PR #6350

[TimoPtr]

Now based on your setup I think you are only missing a proper settings. You should set your internal URL and select VPN. If you do that you can stay on Most secure option. It is explained on the doc attached to the screen https://companion.home-assistant.io/docs/getting_started/connection-security-level/

[ro53ben]

Same problem here, all of our Android devices are locked out and I can't see where my children are today.

The documentation doesn't explain this, it broke overnight. You cannot choose a valid configuration unless you are using https

[TimoPtr]

You can if you set it properly.

[TimoPtr]

If you use HTTP, it should be set in internal URL and you should select VPN if you use a VPN. That's the only way the app has to make sure we are on a trusted network.

[geltzer]

the docs only explain how to turn on "most secure" if you "acidentally chose "less" but not the other way around.
there is currently no way of going from most to less, as it just reverts back to most.

[TimoPtr]

the docs only explain how to turn on "most secure" if you "acidentally chose "less" but not the other way around. there is currently no way of going from most to less, as it just reverts back to most.

Look at my first answer. But going from Most secure to Less secure is not what you should do. If you use a VPN and HTTP, you don't want to make HTTP query when you are not over the VPN (or on your WIFI) that would leak your data and credentials in an untrusted network like a public network.

[ro53ben]

The "Most secure" "Less Secure" toggle does not work.

You choose Less secure, hit Save, it doesn't work.

[geltzer]

i ahve looked at you fix merge, #6350
but i dont see how i get that onto my device? theres no upates available in play store so when does it release?

also i like to choose for myself when to make changes in my server security setup. i dont went to be forced to pay for vpn or to be locked out of my server from one day to the other, because someone think that im doing things wrong on my own pc.

[TimoPtr]

The "Most secure" "Less Secure" toggle does not work.

You choose Less secure, hit Save, it doesn't work.

Like I already said that has been fixed this morning #6350 it is currently under review on Google side.

But like I said you should probably not go in Less secure but instead fix the configuration of the app to stay in Most secure.

[ro53ben]

The "Most secure" "Less Secure" toggle does not work.
You choose Less secure, hit Save, it doesn't work.

Like I already said that has been fixed this morning #6350 it is currently under review on Google side.

But like I said you should probably not go in Less secure but instead fix the configuration of the app to stay in Most secure.

So it's not fixed yet, it may be fixed in the future?

All of our handsets disconnected overnight when the Android app auto-updated. No prompt, no warning, just broken. My kids are off-line and I can't see where they are.

[TimoPtr]

It's going to take few days to get Google to approve the app, most likely beginning of next week. If you want it sooner you can join the beta and it is going to be available sooner.

[trougnouf]

If you use HTTP, it should be set in internal URL and you should select VPN if you use a VPN. That's the only way the app has to make sure we are on a trusted network.

Currently I have home assistant URL as the VPN address and internal connection URL as the WiFi address.
Should it be the other way around?
I would like to connect using WiFi when it's available since it's faster.
If I switch on "VPN connected" in "Home network" (without switching the addresses around), then I still can't connect without the WiFi (but this time it just shows an error message with "Unable to connect to Home Assistant with the option to refresh the internal URL).
(The VPN URL works because I can connect through the web browser.)