Securing - Home Assistant
https://www.home-assistant.io/docs/configuration/securingOne major advantage of Home Assistant is that it’s not dependent on cloud services. Even if you’re only using Home Assistant on a local network, you should take steps to secure your instance. Checklist. Here’s the summary of what you must do to secure your Home Assistant system: Configure secrets (but do remember to back them up)
Storing secrets - Home Assistant
www.home-assistant.io › docs › configurationCreate a secrets.yaml file in your Home Assistant configuration directory. The entries for password and API keys in the configuration.yaml file usually looks like the example below. homeassistant: auth_providers: - type: legacy_api_password api_password: YOUR_PASSWORD Those entries need to be replaced with !secret and an identifier.