Custom slugs are guessable. Use random slugs for external access.
Comma-separated ISO country codes. The link only opens from addresses registered to those countries, plus your home network. VPNs and roaming can move a guest across a border. IP Geolocation by DB-IP.
Guests must enter this before the link shows anything.
Off, the guest enters the PIN again every time they reopen the link.
The first browser to tap Use this device on the link keeps it; every other device is refused. A chat app's built-in browser counts as a separate device. Reset it from the token's card.
Entity settings
Shown to the guest instead of the Home Assistant name. Leave blank to use .
Off by default — the guest gets on/off only.
Also off by default. The guest gets a colour wheel, a warm-cool slider, or both — whichever Home Assistant reports the light supports.
Off by default. The guest's browser is asked for its location when they press this one control, and the command only goes through if that position falls inside Home Assistant's zone.home. Everything else on the link is unaffected.
The guest link must be served over HTTPS — browsers withhold location on plain HTTP and the control will refuse. The position is self-reported by the browser, so treat this as a deterrent for a casual guest, not proof anyone is really there.
The guest can see this control from anywhere, but pressing it only works from . Ticked automatically for locks, covers and buttons. It relies on the client address your reverse proxy reports, the same as the IP allowlist.
Save Entity Template
Saves which entities are selected, nothing else — display names, light options and the location requirement stay with the token they were set on. Loading a template later adds its entities to whatever is already selected.
Edit Entities
Extend Expiry
Replaces the current expiry with a new one from now.
This token grants permanent access until manually revoked.
Date must be in the future.
PIN Protection
PINs are stored hashed and can never be shown again. Saving a new PIN — or removing one — signs out every guest who had already entered the old one, and retires every link without PIN.
Saved as soon as you change it, separately from the PIN above. Off, the guest enters the PIN again every time they reopen the link — and anyone it was already remembered for is asked again now.
Links without PIN
Opens straight to the controls, skipping the keypad. Each link is shown once, when it is made — revoke or rotate one to sign out the devices that used it.
New link — copy it now, it will not be shown again:
Edit Schedule
A guest who already has the link open is moved onto the new schedule straight away.
Settings
For this browser only, and applied straight away. Automatic follows the languages your browser asks for.
Changes apply straight away, no restart. A value saved here overrides the add-on option until you revert it. Credentials and the Home Assistant connection stay in the add-on configuration.