shouldiuse.io

Categories

VERDICT

Aqara Review

Depends

Should I use Aqara?

Smart home ecosystem: hubs, sensors, cameras, locks, and doorbells - aqara.com

· 1 month ago

Good fit for Apple HomeKit households building a whole-home sensor-and-camera setup who will keep firmware updated. Wrong fit if you want one plug-and-play gadget or set-and-forget security gear, given hub CVEs and hit-or-miss reliability.

Confidence

Medium. Based on 20+ public sources: Reddit threads, expert reviews, CVE databases, Aqara's own forum and blog. Many source snippets were truncated, so ratings and detailed complaint texts were unavailable.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

Hardware-only ecosystem

From ~$200 for a starter setup

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed

Best for

  • Apple HomeKit households
  • DIY smart home tinkerers
  • Whole-home sensor and camera builds
  • Matter multi-platform homes

Not for

  • Renters wanting one plug-and-play gadget — this is a hub ecosystem commitment
  • Front-door security buyers uneasy about cloud-connected locks after reported U200 breaches
  • People who never update firmware — hubs have had auth-bypass CVEs
  • Local-only purists tired of sensor dropouts and ecosystem quirks

Gotchas - check before you buy

high

Hub M2 had auth-bypass and information-disclosure CVEs — patch firmware fast

high

Command injection vulnerability disclosed in Aqara hub devices (Dec 2025)

high

Users report a U200 smart lock security breach on Aqara's own forum

medium

Pricing gripes: switches seen as costly; wait for Prime Day-style sales

Pros and cons

Pros

  • HomeKit-ready, rugged camera hubs praised by reviewers
  • Broad catalog: hubs, sensors, locks, cameras, doorbells
  • G4 doorbell setup described as super easy
  • W200 thermostat called affordably priced with Apple firsts
  • Some users call the ecosystem solid long-term

Cons

  • Reliability called hit-or-miss by real users
  • Users report sensor failures and hunt for alternatives
  • Multiple hub security CVEs, including auth bypass
  • Switches and gear seen as costly vs competitors
  • Customer support effectiveness questioned by users

Sources & method

- 10 sources - Multiple 2025–2026 CVEs affect Aqara hubs and gateways, including auth bypass and command injection — update firmware before trusting a hub.

official x1review x5security x3news x1
  • CVE-2025-65295: Aqara Hub M2 auth bypass, Authentication bypass vulnerability in Aqara Hub M2 disclosed via SentinelOne's vulnerability database.
  • CVE-2025-65297: Aqara Hub M2 information disclosure, Information disclosure vulnerability in Aqara Hub M2, disclosed May 2026.
  • Command injection in Aqara hub devices, GitHub security advisory GHSA-83rv-8xqm-r7w8 describes a command injection vulnerability in Aqara Hub devices (Dec 2025).
  • CVE-2026-50083: Aqara gateway auth bypass, Gateway authentication bypass vulnerability listed in SentinelOne's database (June 2026).

Key stats

  • Value for money: 3/5

    Rating

  • From ~$200 for a starter setup

    Starting price

  • 10

    Sources

  • Analyzed

  • Value for money: 3/5. Cheap sensors, but switches called costly
  • Ease of use: 4/5. G4 doorbell setup 'super easy' per reviewer
  • Feature depth: 4/5. Hubs, cameras, locks, sensors, Matter support
  • Support quality: 2/5. Users question support effectiveness online
  • Security posture: 2/5. Multiple hub CVEs, including auth bypass
  • $276M Total funding Per PitchBook profile
  • $156M Series C Raised Nov 2021
  • From ~$200 Starter setup cost Per Aqara's own cost guide

Pricing

Hardware-only ecosystem

From ~$200 for a starter setup

  • Hubs, sensors, cameras, locks sold individually
  • Occasional deep discounts around Prime Day

Security

Multiple 2025–2026 CVEs affect Aqara hubs and gateways, including auth bypass and command injection — update firmware before trusting a hub.

  • CVE-2025-65295: Aqara Hub M2 auth bypassAuthentication bypass vulnerability in Aqara Hub M2 disclosed via SentinelOne's vulnerability database.⁴
  • CVE-2025-65297: Aqara Hub M2 information disclosureInformation disclosure vulnerability in Aqara Hub M2, disclosed May 2026.
  • Command injection in Aqara hub devicesGitHub security advisory GHSA-83rv-8xqm-r7w8 describes a command injection vulnerability in Aqara Hub devices (Dec 2025).⁵
  • CVE-2026-50083: Aqara gateway auth bypassGateway authentication bypass vulnerability listed in SentinelOne's database (June 2026).

Alternatives

Compare Aqara with each alternative.

  • Hubitat Elevation

    Local-control hub popular among users leaving cloud ecosystems.

Companies that use it

  • LG U+
Full analysis

Based on 20+ public sources: Reddit threads, expert reviews, CVE databases, Aqara's own forum and blog. Many source snippets were truncated, so ratings and detailed complaint texts were unavailable.

Solid HomeKit-friendly smart home ecosystem, but hub CVEs and hit-or-miss reliability mean it's not set-and-forget.

Methodology

Based on 20+ public sources: Reddit threads, expert reviews, CVE databases, Aqara's own forum and blog. Many source snippets were truncated, so ratings and detailed complaint texts were unavailable.

Read how a report is made.

Sources

  1. Aqara Real World Opinion — Reddit r/smarthomereddit.com
    review
  2. Aqara G5 Pro Outdoor Camera Hub review — MacStoriesmacstories.net
    review
  3. Aqara Hub M3 Review — Matter Alphamatteralpha.com
    review
  4. CVE-2025-65295: Aqara Hub M2 Auth Bypass — SentinelOnesentinelone.com
    security
  5. Command injection in Aqara Hub devices — GitHub Advisorygithub.com
    security
  6. Aqara U200 lock security breach — Aqara Forumforum.aqara.com
    security
  7. How Much Does a Smart Home Cost — Aqara EU blogeu.aqara.com
    official
  8. Aqara 2026 Company Profile — PitchBookpitchbook.com
    news
  9. Aqara Customer Support effectiveness — Reddit r/Aqarareddit.com
    review
  10. Aqara smart home starter kit review — The Ambientthe-ambient.com
    review

Add this review to your site

This check for Aqara says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends Aqara Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.