Smart home hubs for security: what they do and which to buy

What does a smart home hub do for security?

A hub translates. Most cheap, long-lasting security sensors speak a low-power radio — Zigbee, Thread or Z-Wave — that your phone and router cannot hear. The hub listens to that radio, puts the devices on your network, and runs the automations locally, so a door opening can turn on a light or trigger a siren without the internet being involved at all.

The four jobs a hub does

“Smart home hub” is one phrase covering several distinct functions. A given box may do one of these or all four, and knowing which is which is most of what you need to shop properly.

• Zigbee coordinator. Runs a Zigbee network and lets Zigbee sensors join it. This is the job that makes the cheapest, smallest contact sensors usable.
• Thread border router.Bridges a Thread mesh onto your home network. Thread is the low-power radio Matter uses for battery devices, and without a border router a Thread sensor has nothing to talk to. Some devices you already own may do this — certain speakers, streaming boxes and displays include one.
• Matter controller.Commissions Matter devices and lets them be controlled from your chosen app. Matter is the standard that finally lets a sensor from one brand work in another brand's app, and it is explained properly in our Matter guide.
• Automation engine. Executes the rules. The important question here is whether rules run on the hub in your house or on a server somewhere, because only the first kind keeps working when your broadband does not.

A camera base station is a fifth kind of hub with a different job entirely: it stores video. It is not a substitute for any of the four above, and mixing the two up is the most common confusion in this category.

Why the good sensors need a hub in the first place

It looks like an artificial complication until you look at the power budget. A Wi-Fi radio is designed to move a lot of data quickly, and it draws current accordingly: waking, joining the network, authenticating and transmitting costs far more energy than a contact sensor has to spend. That is why Wi-Fi contact sensors are rare, why the ones that exist tend to be bulky, and why nobody advertises a five-year battery on one.

Zigbee, Thread and Z-Wave were designed for the opposite job: tiny messages, sent rarely, by devices that must live for years on a coin cell. A door sensor sends a few bytes when the door moves and sleeps the rest of the time. The price of that efficiency is that your phone and your router cannot hear those radios, so something has to translate — and that something is the hub. Seen this way, the hub is not an extra device you have been talked into. It is the cost of sensors small enough to sit on a window frame and long-lived enough that you forget they are there.

These radios are also mesh networks, which has a second consequence worth knowing. Every mains-powered device on the mesh — a plug, a bulb, a repeater — relays for the battery ones, so a house with a few powered Zigbee or Thread devices scattered through it has a far more reliable sensor network than a house with a hub and nothing but battery sensors at the edges. If a distant sensor keeps dropping out, adding a powered device halfway there usually fixes it more cheaply than anything else.

The hub to buy for a normal house

For most households building a subscription-free sensor estate, the useful purchase is a single box that is a Matter controller, a Thread border router and a Zigbee coordinator at once, and that runs its automations locally. That combination means you can buy whichever sensor is genuinely best rather than whichever sensor matches your hub, and it means the rules keep firing during an outage.

The Aqara Hub M200 is our default recommendation for exactly this reason: it covers the same protocol ground as the flagship at a substantially lower price, and being a Thread border router is what unlocks the Aqara P2 sensors we recommend most often in our door and window sensor roundup. The Aqara Hub M3 is the same idea with more capacity and a PoE option, which is worth the difference on a large estate of fifty-plus devices and is not worth it in a three-bedroom house.

The eufy HomeBase 3 sits in the fifth category above. It is a camera base station: local video storage of up to 16TB with on-device detection and no plan. If your problem is where camera footage lands rather than which radio your sensors speak, that is the box, and it is covered in our local-storage cameras roundup. Owning one does not remove the need for a sensor hub, and owning a sensor hub does not remove the need for it.

One scope note. This page judges hubs on security duty alone — the radios that sensors and locks speak, and whether the rules keep firing with the broadband down. If you are weighing the same boxes on the wider job as well, meaning lighting, climate, media and voice in one app, Latch & Hub's roundup of the best smart home hubs ranks them against that broader brief, and the shortlists overlap less than you would expect.

When you can skip the hub entirely

Three cases, and they cover a lot of people.

1. You already own a Thread border router.Several popular speakers, smart displays and streaming boxes include one. If you have one and Thread is all you need, buy Thread sensors and skip the hub — check your device's specification rather than assuming either way.
2. You are buying only Wi-Fi devices. Wi-Fi cameras, Wi-Fi doorbells and Wi-Fi locks connect directly to your router. The cost is battery life on anything small, which is why Wi-Fi contact sensors are rare and why the ones that exist are usually hub-based anyway.
3. You want a handful of standalone alarms. A siren-only window alarm or a self-contained keypad lock has no radio and needs no hub. Simplicity is a legitimate design goal, and the no-hub options are ranked in our no-hub sensor roundup.

The failure modes worth planning for

A hub is a single point of failure for everything that depends on it, and it is worth being clear-eyed about that before you build a house around one. Three things go wrong in practice.

• The hub loses power. Every sensor on it goes silent, because the sensors were never talking to anything else. A hub on the same socket as a lamp somebody switches off at the wall is a genuinely common cause of a dead sensor estate. Put it somewhere it will not be unplugged.
• The vendor changes the deal. A hub whose automations run in a cloud depends on that cloud continuing to exist in its current form. This is the strongest argument for local execution, and it is a durability argument rather than an outage one.
• It becomes a lock-in.A hub that only pairs its own brand's sensors is a purchase that constrains every subsequent purchase. This is exactly the problem Matter was created to solve, and it is why a hub that is also a Matter controller is worth more than its specification suggests.

None of these argues against buying a hub. They argue for buying one that runs locally, speaks a standard rather than only a brand, and lives somewhere sensible. Those three properties are most of what separates a hub you keep from one you replace in two years.

Choosing so you do not buy twice

Two questions save most of the money wasted in this category. First: which radio do the sensors you actually want speak? Pick the sensors, then buy the hub they need — doing it the other way around is how people end up with a hub that supports none of the devices they were excited about. The protocol trade-offs are laid out in Z-Wave vs Zigbee vs Matter.

Second: do the automations run locally? A hub whose rules execute in a vendor cloud is a hub that stops automating when your connection drops, which for security is the wrong time. Manufacturers state this, though rarely prominently; look for “local automations” or “local execution” in the specification. It is also the reason a lot of readers of this site end up running Home Assistant, where the whole point is that the engine is yours — that path is covered for locks in our Home Assistant lock roundup and for cameras in our Home Assistant camera roundup.

One last piece of practical advice: put the hub in the middle of the house, not in the cupboard by the front door where the router lives. Zigbee, Thread and Z-Wave are mesh networks with modest range, and a hub at one end of a building spends its life at the edge of its own network. Central placement, off the floor, away from the metal box the broadband arrives in, fixes more reliability complaints than any device upgrade.