Multi-home remote access · built for Home Assistant

Every home, securely within reach.

Secure remote access and management for all your Home Assistant homes — peer-to-peer first, zero-trust, with no port forwarding or exposed public IP required.

Cancel anytime · no lock-in

HomeTunnel app showing the home Tartan Dr connected directly peer-to-peer, Home Assistant online, and access ready
Direct · P2PTCP 8123 · host route
NetBird zero-trust backendWireGuard P2PHome Assistant add-oniOS & Android

Peer-to-peer by default.

Your device and your home negotiate a direct WireGuard path whenever the network allows it. When a direct path is blocked, packets fall back to the open-source relay — still end-to-end encrypted, and unreadable by the relay.

Encrypted connection path
DEVICEHOMEASSISTANTRELAY
No port forwarding. No exposed public IP, on either path.

Every home, one operational view.

View and manage all your homes, securely access Home Assistant and connected IoT devices from anywhere in the world—all without juggling separate VPN configurations. See when devices enroll, move, or go offline, with a clear activity history for every home.

HomeTunnel app home chooser listing three homes on one account
Every home on the account, one tap away.
HomeTunnel app Activity tab showing Home Assistant going offline and coming back online, with filters for devices, access, and account events
Offline and recovery events, logged per home.

From account to encrypted access.

01

Create your homes

Set up each property in the HomeTunnel™ Portal.

02

Pair the add-on

Install the open-source add-on on each Home Assistant and confirm its pairing code.

03

Connect securely

Use the app to connect peer-to-peer, with end-to-end encrypted relay fallback when needed.

04

Manage them together

Use one dashboard for alerts, device moves, and specific custom routes.

One host. One port. Nothing else.

Alongside the Home Assistant route, each home can carry up to three custom routes — every one pinned to a single IPv4 address and a single TCP port. There is no subnet option, because there is no general LAN access to give. Every client device enrolled in that home reaches the same set — and nothing belonging to any other home.

Route distribution · three homes, one account
Choose a home to see its devices and routes
How one account's homes are routedEach home on the account has its own isolated network. Every client device enrolled in a home reaches that home's Home Assistant on TCP 8123 plus up to three custom routes, each pinned to a single IPv4 address and a single TCP port. No route crosses between homes.My AndroidphoneWork laptoplaptopKitchen tablettabletTartan DrAustin, TXISOLATEDHome Assistant192.168.68.161/32TCP:8123Main CCTV192.168.68.42/32TCP:554NAS admin192.168.68.23/32TCP:5000Office printer192.168.68.77/32TCP:631Beach iPadtabletGuest phonephoneRancho blvdSan Diego, CAISOLATEDHome Assistant10.0.4.10/32TCP:8123Garage camera10.0.4.51/32TCP:554Solar inverter10.0.4.66/32TCP:80Cottage laptoplaptopLakeshore blvdToronto, ONISOLATEDHome Assistant172.16.9.5/32TCP:8123Dock NVR172.16.9.40/32TCP:554

Three enrolled devices, one shared set of routes. Every client in this home reaches its Home Assistant and all three custom routes.

A different home with its own Home Assistant, its own devices, and its own routes. Nothing here can reach Tartan Dr.

A home can be as small as one device and one camera. It still gets its own isolated network and its own routes.

One IPv4 host · one TCP port · no cross-home routing

Focused tools for a multi-property setup.

Every home, one dashboard

Manage multiple properties from anywhere through secure remote connections.

Isolation by home

Automated NetBird groups, policies, and routes keep each home and owner scoped separately.

Useful offline alerts

Receive email when a home device goes offline, recovers, is enrolled, or is moved.

Move client devices

Move a phone or laptop between homes you own; it belongs to one home at a time.

Specific IoT access

Add up to three host-only routes per home, each for one IPv4 device and TCP port.

Open-source foundations

The Home Assistant add-on and NetBird relay make the path understandable and inspectable.

Choose how many homes you manage.

Start with a 14-day free trial on monthly billing. A payment card is required to start the trial, and you can cancel any time before it ends without being charged.

Family
$9/mo

or $90/yr

Up to 3 homes
  • 1 Home Assistant device per home
  • 3 custom IoT routes per home
  • Unlimited client devices
  • P2P WireGuard encryption
  • Per-home isolation
  • Offline email alerts and device moves
  • iOS, Android, and HA add-on
Start 14-day trial
Manager
$14/mo

or $140/yr

Up to 5 homes
  • 1 Home Assistant device per home
  • 3 custom IoT routes per home
  • Unlimited client devices
  • P2P WireGuard encryption
  • Per-home isolation
  • Offline email alerts and device moves
  • iOS, Android, and HA add-on
Start 14-day trial
A payment card is required to start the trial. Cancel before day 14 and you are never charged.

Trial and billing terms

The 14-day free trial
The trial is available on monthly billing only and starts when indicated at checkout. Only one trial is permitted per HomeTunnel account. Annual subscriptions are billed for the full year up front and do not include a trial — they carry a 14-day money-back guarantee on the first purchase of an annual term instead.
A card is required, even for the trial
Payment information is required to start the free trial. Nothing is charged during the 14 days, and you can cancel at any point before the trial expires.
When automatic billing begins
If you do not cancel, the trial automatically converts to the paid monthly plan you selected and the first charge is made when the trial expires. Monthly plans are then billed at the start of each monthly period and renew monthly; annual plans renew annually. Renewal continues until you cancel.
How cancellation works
Cancel at any time from your billing page in the HomeTunnel Portal or through the Paddle buyer portal. Cancelling stops the next renewal and takes effect at the end of the current paid period, so access continues until that period ends. Cancelling does not automatically create a partial-period credit, and it does not delete your account, homes, or devices — access becomes restricted and can be restored if you resubscribe.

Just one home? The official Nabu Casa Home Assistant Cloud is the best turnkey choice for a single home — and it directly funds Home Assistant development. HomeTunnel is built for managing several.

One Home Assistant home?

Nabu Casa is the official turnkey cloud experience, including voice-assistant integrations, and subscriptions support Home Assistant development. HomeTunnel focuses on several homes with isolated per-home network policies.

Visit Nabu Casa →

The app is where you actually live.

Enroll your phone as a client device, connect peer-to-peer, and open Home Assistant over the tunnel. A phone reaches one home at a time — switching is orchestrated server-side so it is never active in two homes at once.

HomeTunnel app sheet offering to open Home Assistant in the Home Assistant app or in a browser
Open it your way
HomeTunnel app home view showing a connected home with a direct peer-to-peer path
Connected · Direct (P2P)
HomeTunnel app Devices tab listing Home Assistant, an enrolled phone, and a reachable camera
Everything this phone can reach

The add-on is open source.

It pairs with the Portal, joins that home’s isolated mesh, and acts as the routing device for the home. It never holds NetBird administrator credentials — enrollment uses a short-lived, single-use, home-scoped setup key.

View the add-on repository →
Home Assistant HomeTunnel add-on page showing a healthy paired connection and an effective target CIDR of a single host
Paired, healthy, and bound to one explicit /32 host route.

Questions worth asking.

Can HomeTunnel access my Home Assistant?

HomeTunnel does not possess the WireGuard private keys generated by your devices and cannot decrypt peer-to-peer traffic.

The HomeTunnel Portal operates as the control plane for authorization and routing. Access is limited by home ownership and server-side policies that explicitly configure routes for each isolated home.

Is HomeTunnel right for a single home?

HomeTunnel can be used with a single home. However, for most single-home users, we recommend the official Nabu Casa Home Assistant Cloud because it provides a streamlined, turnkey experience and helps fund Home Assistant development.

HomeTunnel is primarily designed for users who manage multiple homes and require separate devices, routes, and network policies for each location.

How is HomeTunnel different from a conventional VPN?

With many conventional VPN services, traffic is routed through the VPN provider’s servers before reaching its destination.

HomeTunnel uses the open-source NetBird platform to establish direct peer-to-peer connections between your device and your Home Assistant device whenever network conditions allow. When a direct connection is available, application traffic does not pass through a HomeTunnel relay server.

HomeTunnel also does not expose your entire home network. Home Assistant access is restricted to a single IPv4 address using a /32 route and TCP port 8123. Optional IoT routes are also restricted to one IPv4 host and one TCP port.

What should I do if I lose my phone?

Sign in to the HomeTunnel web app at https://my.hometunnel.io and revoke the lost phone’s access.

Revoking the device prevents it from continuing to access your HomeTunnel homes.

More questions and architecture details →

Start your 14-day free trial.

Cancel anytime · no lock-in

Start your trial