Volkswagen pushed an authentication update in early 2026 that broke the homeassistant-volkswagencarnet integration. Your car still works fine in the official VW app — but Home Assistant is locked out. No warning, no migration path, just a door that closes overnight. This isn’t new. MyQ and Tesla have both done it worse. What it means for smart home builders, and how to think about vendor risk before you’re the one holding the locked-out end.
The Incident That Started It
The Volkswagen API shutdown on GitHub reads like a familiar horror story. Thousands of Home Assistant users had set up custom dashboards, automated charging schedules, and climate controls tied to their VW ID.4, ID.3, or other MEB-platform vehicles. Then Volkswagen changed their authentication system. Third-party tokens stopped working. The official app kept humming along like nothing happened.
My garage door setup is the one case that really stuck with me. A product you already bought suddenly decided it didn’t trust you anymore.
This Is a Pattern, Not a One-Off
MyQ went first. Chamberlain pulled the plug on MyQ integration in November 2023, breaking garage door automations across Home Assistant and every other platform that relied on their API — not because of a security incident, but to push their own subscription app.
Tesla reset third-party app access in January 2022. A hacker claimed credit for mass-resetting authentication tokens, locking out apps like Tezlab and TeslaMate. The result was the same regardless of who pressed the button: thousands of users woke up to broken integrations and no recourse.
The pattern is unmistakable. These aren’t security incidents. They’re business decisions. Companies see their users building on top of their platforms, getting comfortable with third-party tools, and then decide they’d rather have that relationship exclusively. MyQ wanted you in the MyQ app and paying a subscription fee. Tesla wants you in their own app. Volkswagen wants you in the VW app. The car makers want you in their own app.
What This Means for Smart Home Builders
It’s short-sighted, honestly. More and more people are building smarter homes, wiring up integrations, and creating automations that only work because the underlying platforms stayed open. When companies pull this move, they’re telling their most engaged users — the ones who bothered to set up Home Assistant, who built custom dashboards, who actually use the product in interesting ways — that they’re not welcome anymore.
People are fed up with subscription services when they’ve already purchased something. I get the revenue model — companies want recurring income — but this isn’t the way to build a fan base with your customers. The people who go out of their way to integrate their garage door or thermostat into a smart home are your evangelists. Cutting them off is how you turn enthusiasts into critics.
We’re unfortunately at the mercy of companies who can change their policies at any moment. That’s the uncomfortable reality. Your Home Assistant setup, your Node-RED flows, your Lutron bonds — all of it exists at the pleasure of vendors who can flip a switch and break everything tomorrow.
The best defense is thinking about vendor risk before you’re locked out. Vote with your wallet. Look for a good track record. Reward companies and vendors who are open and transparent. I’m not saying only support open source, but look at Nabu Casa — they run a paid service for cloud connectivity, and people pay for it not because they’re forced to, but because they want to support work they believe in. That’s a company that’s honest about what they’re doing and why.
Go with companies and brands that have a good track record of supporting their customers and not locking them in. Look for companies that give a damn about the customer. The ones who publish clear API docs and don’t change auth schemes overnight. The ones who respond to developer questions on GitHub. The ones whose ecosystem strategy includes you, not just their own app store.
How I Handle It
I tinker a lot. If something doesn’t work one day, I’ll look for an alternative way to connect, or an alternative device altogether if it’s that bad. When the garage door vendor case happened, I didn’t panic — I looked for what came next. There are always options, and the community moves fast. Someone will build a workaround, or a competitor will step in, or you’ll find a more open platform that doesn’t treat you like a security liability.
Companies change their policies at any moment, so you have to vote with your wallet and support vendors who are transparent about their intentions. If a company has a pattern of locking down their ecosystem, don’t put mission-critical automation in their hands. Your heating should work without needing a cloud connection and a vendor’s approval. Build redundancy into your setup, and prefer devices that play well with open platforms like Home Assistant instead of fighting them.
The smart home is supposed to make life better, not create new dependencies that can be yanked whenever a product manager decides third-party access is a liability. I look for companies and brands that have a good track record of supporting their customers and not locking them in. I reward the ones that give a damn. And when they don’t, I move on. That’s the only leverage we really have.
Related posts:
Matter: The Unifying Standard for Smart Homes (and How Builders Should Prepare)
Beyond Basic Automation: Navigating the Smart Home Spectrum for Deeper Convenience
Top mmWave Presence Sensors for Smarter Home Automation (2025 Research Review & Buying Guide)
What Some Smart Home Enthusiasts Wish They Knew Before Getting Started