Every home, one dashboard
Manage multiple properties from anywhere through secure remote connections.
Secure remote access and management for all your Home Assistant homes — peer-to-peer first, zero-trust, with no port forwarding or exposed public IP required.
Cancel anytime · no lock-in

Your device and your home negotiate a direct WireGuard path whenever the network allows it. When a direct path is blocked, packets fall back to the open-source relay — still end-to-end encrypted, and unreadable by the relay.
View and manage all your homes, securely access Home Assistant and connected IoT devices from anywhere in the world—all without juggling separate VPN configurations. See when devices enroll, move, or go offline, with a clear activity history for every home.


Set up each property in the HomeTunnel™ Portal.
Install the open-source add-on on each Home Assistant and confirm its pairing code.
Use the app to connect peer-to-peer, with end-to-end encrypted relay fallback when needed.
Use one dashboard for alerts, device moves, and specific custom routes.
Alongside the Home Assistant route, each home can carry up to three custom routes — every one pinned to a single IPv4 address and a single TCP port. There is no subnet option, because there is no general LAN access to give. Every client device enrolled in that home reaches the same set — and nothing belonging to any other home.
Manage multiple properties from anywhere through secure remote connections.
Automated NetBird groups, policies, and routes keep each home and owner scoped separately.
Receive email when a home device goes offline, recovers, is enrolled, or is moved.
Move a phone or laptop between homes you own; it belongs to one home at a time.
Add up to three host-only routes per home, each for one IPv4 device and TCP port.
The Home Assistant add-on and NetBird relay make the path understandable and inspectable.
Start with a 14-day free trial on monthly billing. A payment card is required to start the trial, and you can cancel any time before it ends without being charged.
or $90/yr
or $140/yr
Full details: Refund Policy · Terms and Conditions · Billing and the 14-day trial
Just one home? The official Nabu Casa Home Assistant Cloud is the best turnkey choice for a single home — and it directly funds Home Assistant development. HomeTunnel is built for managing several.
Nabu Casa is the official turnkey cloud experience, including voice-assistant integrations, and subscriptions support Home Assistant development. HomeTunnel focuses on several homes with isolated per-home network policies.
Visit Nabu Casa →Enroll your phone as a client device, connect peer-to-peer, and open Home Assistant over the tunnel. A phone reaches one home at a time — switching is orchestrated server-side so it is never active in two homes at once.



It pairs with the Portal, joins that home’s isolated mesh, and acts as the routing device for the home. It never holds NetBird administrator credentials — enrollment uses a short-lived, single-use, home-scoped setup key.
View the add-on repository →
HomeTunnel does not possess the WireGuard private keys generated by your devices and cannot decrypt peer-to-peer traffic.
The HomeTunnel Portal operates as the control plane for authorization and routing. Access is limited by home ownership and server-side policies that explicitly configure routes for each isolated home.
HomeTunnel can be used with a single home. However, for most single-home users, we recommend the official Nabu Casa Home Assistant Cloud because it provides a streamlined, turnkey experience and helps fund Home Assistant development.
HomeTunnel is primarily designed for users who manage multiple homes and require separate devices, routes, and network policies for each location.
With many conventional VPN services, traffic is routed through the VPN provider’s servers before reaching its destination.
HomeTunnel uses the open-source NetBird platform to establish direct peer-to-peer connections between your device and your Home Assistant device whenever network conditions allow. When a direct connection is available, application traffic does not pass through a HomeTunnel relay server.
HomeTunnel also does not expose your entire home network. Home Assistant access is restricted to a single IPv4 address using a /32 route and TCP port 8123. Optional IoT routes are also restricted to one IPv4 host and one TCP port.
Sign in to the HomeTunnel web app at https://my.hometunnel.io and revoke the lost phone’s access.
Revoking the device prevents it from continuing to access your HomeTunnel homes.