Security advisory

Security advisory

Hue Product Security Advisory

Hue is committed to customer safety and the ongoing security of our products. We allocate significant resources to identify and mitigate security vulnerabilities in the design phase of our products. In addition, we collaborate with security researchers and other users to fix and patch any identified vulnerabilities.

If you believe you have found a vulnerability please contact us via our responsible disclosure program https://www.signify.com/global/product-security.

Hue Product Security Updates

To protect users, Hue strongly advise to keep your system up to date with the latest software and only download applications from the official iOS and Android app stores.

For information on the latest software versions on Hue Apps, Hue Bridge, Hue Accessories, Hue Lights or Hue Sync, please visit our release page.

To ensure that your Hue system is fully up to date please check the ‘Software update’ page within the official Hue application found in ‘Settings’ > ‘Software update’. We also recommend that users turn on “automatic updates” in this section to ensure the latest software is installed automatically.

Security related FAQs

What can I do to ensure my Philips Hue products are safe from hacking or a DDoS attack?

The Philips Hue system uses industry-standard encryption and authentication techniques to ensure that unauthorized users cannot gain access to your Philips Hue products. Philips Hue connects to the internet via our own secure cloud so that devices in your home are not discoverable on the open internet. 

Philips Hue regularly updates its products, services, and apps with security fixes and patches. To ensure your system is always up to date, we recommend the following:

  1. Connect your Philips Hue Bridge to a Hue account
  2. Enable automatic updates in the Hue app under Settings Software update > Automatic update

We also advise that you secure your home network from malicious attacks. Contact your internet service provider for assistance.

How do I update my Philips Hue system with the latest software?

Open the Philips Hue app and go to Settings > Software update. The app will automatically check if your Philips Hue system is up to date. You can check the app’s release notes to view the latest software updates.

Up-to-date Hue products will display a green check mark. If there is no green check mark, you will receive a notification that software is being downloaded.

If an update fails and some Hue products do not display the green check mark, perform a power cycle on the Hue Bridge:

  1. Unplug the Hue Bridge’s power adapter from the wall outlet. Keep unplugged for 10 seconds.
  2. Plug the power adapter back in. Wait at least 30 minutes before attempting to update the software.

Make sure that lights that are “unreachable” have been powered on or have been removed from the system if no longer in use. It may take some time before all lights and accessories are ready to be updated.

Do you support older firmware versions of Philips Hue products?

We are always improving our products by adding features, improving performance, and enhancing security. We recommend that all users turn on automatic updates in the Hue app (Settings > Software update > Automatic update) to ensure they always have the latest firmware installed.

Philips Hue apps only support the most recent Philips Hue Bridge firmware. The Philips Hue cloud aims to support the last three major software versions of the Philips Hue Bridge. This restriction ensures the continuing quality and security of the Philips Hue system.

How do I know if my software is up to date?

You can check if the latest firmware is installed on all your products inside the Philips Hue mobile app under Settings > Software update. You can also enable automatic updates to ensure new software is installed automatically by tapping Automatic update.

How do I enable automatic software updates for my Philips Hue products?

Open the Hue app. Go to Settings > Software update. Once the app has checked for updates, tap Automatic update.

Where can I find the release notes of software updates for Philips Hue?

What should I do if I can’t install the latest firmware on my products?

Ensure your mobile device’s operating system is up to date.

Ensure the light(s) you want to update are powered on and reachable in the Philips Hue app. It can take several hours to transfer firmware updates to your lights. If you have any other issues, contact Customer Care.

What can I do if my Hue Bridge is linked to an unknown or unwanted account?

If you have a Hue Bridge that was refurbished or used by a previous owner, the device may not have been properly reset and the previous owner’s account may still be linked to your Hue Bridge. Perform a Hue Bridge factory reset to remove the unwanted account.

To check which users are linked to your Hue Bridge, log in at account.meethue.com and go to Bridge > My Hue Bridges.

No unknown users should be listed under "Other users with access to this Bridge." If unknown users are listed here, remove them by clicking on the trash can icon.

I just set up my Bridge and I see members that I don’t recognize in my Home. What do I do?

If you bought a refurbished or secondhand Bridge, it's likely that the Bridge wasn't reset to its factory settings correctly. If you are an administrator of your Home, you can remove the user you don’t recognize. If you only have Lighting permissions, remove your email from that Home and perform a factory reset on the Bridge.

I sold/returned my Bridge a while ago. Why am I receiving emails about someone joining my Home?

It’s likely the Bridge wasn’t reset to its factory settings correctly, and someone has accidentally added themselves to your Home. If you are no longer using this Philips Hue system anymore, sign in to your account and remove yourself from the Home.

Need for more help?