×
I tested 30 smart locks, and these are the best

I tested 30 smart locks, and these are the best

A smart lock is an easy solution to some common problems. Locked yourself out? Need to let a friend in to water the plants? Your latchkey kid lost their key? Hands are full, and it’s raining cats and dogs? A smart lock solves all of these problems and more.

One of the best smart home upgrades you can make, a smart lock gives you remote control over access to your house from anywhere, plus easy, key-free ways to unlock and lock your door. Smart locks also remember everything that happened, so they can tell you when your door was unlocked, and sometimes who did it.

For most people, control and convenience are big enough selling points. However, smart locks also work nicely with other smart home devices, including video doorbells and smart lighting. My favorite way to integrate locks in my home is with an evening smart home routine, which locks the doors, dims the lights, and sets my thermostat to sleep mode. We have four exterior doors, so it saves me from walking around the house at night checking everything is secure.

Having a connected lock on your door is as secure as a standard lock, and sometimes more. Most smart locks have the same security ratings as their non-smart counterparts (see FAQ for more details), and it’s harder to physically pick a lock without a keyway. Plus, any smart lock is more secure than leaving a spare key under a flowerpot.

I’ve been testing smart door locks for six years and have installed more than 30 for this guide alone. Here are my top picks for your front door. Whether you want the best of the best, don’t want to replace your existing lock, are on a budget, or want a smart lock that doesn’t look like a smart lock, there are great options for every need.

What I’m looking for

A good smart lock should have at least three ways to unlock in case one method fails. My favorites are fingerprint and keypad since they don’t require you to carry anything with you, but other options include phone apps, auto-unlock via geofencing, voice control from your phone or watch, physical keys, NFC fobs, and Apple Home Key. Home Key is awesome, but you have to have an iPhone or Apple Watch — for now. Every smart lock in this list also has the option to auto-lock after a set time. This means you don’t have to remember to physically lock your door.

A key feature of a smart lock is the ability to control your lock when you’re away from home, either remotely using the app or by sending a code to someone so they can manually unlock it. My preferred option is remote control, as sometimes it’s just easier to unlock the door for someone and then lock it when they leave, even if you’re 2,000 miles away.

Smart locks broadly use Wi-Fi, Bluetooth, and/or Thread to allow you to control them from an app. My least favorite option is a Bluetooth lock that uses a dedicated bridge to connect to Wi-Fi. Wi-Fi is power-hungry and drains batteries fast, so some door locks use a bridge as an intermediary. This is fiddly and annoying (especially if someone unplugs it accidentally). I prefer locks with built-in Wi-Fi or those that can connect to a multi-purpose hub or bridge, such as an Apple Home Hub or an Echo smart speaker. Locks that connect over Thread are starting to become more popular; they require a Thread border router, but offer longer battery life and out-of-home control.

Most Wi-Fi smart locks have a battery life of under six months, which is a pain. Those that use Bluetooth last longer, but need that extra hub or bridge for out-of-home control. Thread is a new connectivity option that promises longer battery life but also requires a second device (a Thread border router). (See the FAQ for more on this.)

The lock should have the option to assign “virtual keys” or unique codes to other household members, service people, or a neighbor looking in on your dog. These should be easily revoked or assigned only for specific times. The app should also have a log/alerts that let you know who accessed your door and when.

A good smart lock should be compatible with at least some of the major platforms, so you can schedule the lock, set up home automation routines, and use features like tapping your phone to your door to unlock it. New standards like Matter and Aliro are working to bring universal compatibility between smart locks, smartphones, and smart home platforms. (See the FAQ for more on this.)

$279

The Good

  • Excellent auto-unlock function
  • Choice of Wi-Fi or Thread
  • Matter support
  • Great design
  • Discreet door sensor
  • Re-keyable

The Bad

  • Have to choose between Thread and auto-unlock
  • No Home Key or biometric access
  • Prominent Kwikset branding

Connectivity: Wi-Fi, Thread / Access options: Key, app, voice / Auto-unlock: Yes / Battery type: Four AA batteries / Battery life: Six to 12 months / Guest codes: Yes / Security rating: ANSI Grade AAA / Works with: Amazon Alexa, Google Assistant, Matter (including Apple Home, Samsung SmartThings)

The Kwikset Halo Select ($279.99) is a good-looking, reliable smart lock with top-notch security ratings, broad smart home compatibility, and the best auto-unlock I’ve tested to date.

I strongly believe a smart lock should look good on your door, and the Halo Select does exactly that, plus it can blend in with both traditional and contemporary door sets. (But I could do without the prominent Kwikset branding.)

The Halo blends in nicely with a contemporary Kwikset door handle set. It’s a shame about the prominent branding, though.

The Halo blends in nicely with a contemporary Kwikset door handle set. It’s a shame about the prominent branding, though.

Of the four entry methods — a keyway (which is re-keyable), a touchscreen keypad, app/smart home control, and auto-unlock by location — I liked the last one the best. It worked so well that I didn’t mind that it lacks a fingerprint reader or Apple Home Key.

My experience with automatic unlocking on other locks has been generally frustrating, but on the Halo Select, it’s been flawless. It unlocks just as I approach my porch, making coming home and opening the door a virtually hands-free experience.

The Select can also auto-lock based on your location, not just after a set amount of time. I also like the Halo Select’s LED lock indicator on the touchscreen, which tells you at a glance if the door is locked or unlocked.

The Halo Select has built-in Wi-Fi and a Thread radio, but you have to pick one.

If you set it up with Wi-Fi, you can use the Kwikset app and connect to Amazon Alexa and Google via the cloud. With Matter, you can connect to those platforms locally and also to Apple Home and others, but you won’t be able to use the Kwikset app after setup and you lose the auto-unlock feature, among others.

Kwikset’s auto-unlock feature worked flawlessly in testing

Matter-over-Thread does promise better battery life (I’ll need to test it for longer to determine this) and the ability to easily share the lock with other ecosystems. I set it up in Apple Home, Google Home, and Samsung SmartThings via Matter with no issues and could control it with all three via routines, automations, and voice commands.

It’s a shame to have to choose between using Matter and some of this lock’s best features, but this is a problem across Matter, not specific to Kwikset. Kwikset’s solution allows you to use its advanced features today while still having the future-proofing potential of Matter for tomorrow.

Best budget smart(ish) lock

A keypad door lock on a doorA keypad door lock on a door

$71

The Good

  • Inexpensive
  • Good fingerprint reader
  • Offline access codes
  • Long battery life

The Bad

  • No Wi-Fi
  • No smart home support
  • Large rear housing

Connectivity: Bluetooth 5.0 / Access options: Fingerprint, keypad, app / Auto-unlock: No / Battery type: Four AA batteries / Battery life: One year / Security Grade: ANSI/BHMA Grade 3 / Guest codes: Yes / Works with: N/A

The Wyze Lock Bolt is a good choice if you want something inexpensive and useful and don’t care about smart home integration — or prefer a lock without it. It’s not sleek or stylish; it’s just a big hunk of black plastic (there’s also a satin nickel version). Out of the box, it doesn’t connect to Wi-Fi or integrate with any smart home systems, but it does have an easy-to-use backlit keypad and a lightning-fast fingerprint reader. It’ll auto-lock if you want, and it’s half the price of most smart locks in this list.

The Wyze lock has a huge rear housing but a nice slimline keypad, a fast fingerprint reader, and no Wi-Fi connection.

The Wyze lock has a huge rear housing but a nice slimline keypad, a fast fingerprint reader, and no Wi-Fi connection.

In addition to the fingerprint reader and keypad, the Wyze Lock Bolt can be controlled over Bluetooth, and its range is very good. I could lock the door from my bedroom at the other end of the house using the Wyze app. That’s important, as there’s no way to lock the door on a schedule (although you can enable auto-lock).

The Wyze doesn’t connect to Wi-Fi or integrate with any smart home systems

The Bolt doesn’t integrate with smart home platforms, but if you don’t need to control your lock with your voice or plan to add it to any smart home routines, you won’t miss those features. It also delivers up to a year of battery life on four AAs — I tested it for three months and it only lost 15 percent.

But without Wi-Fi, I couldn’t check on it or control it when I was away from home, so turning on the auto-lock option is a must. If I wanted to let someone in while I was gone, I couldn’t unlock the door remotely, but I could generate an offline code in the Wyze app and share that. This uses similar technology to two-factor authentication codes and worked perfectly in my testing.

Since I tested the lock, Wyze has introduced an integration with its Wyze Video Doorbell Pro that lets you unlock the Bolt remotely when paired with the doorbell — but it doesn’t let you lock it remotely, which is odd. Of course, if you enable auto-lock, this is less of an issue.

A large silver door lock on a door above a lever handleA large silver door lock on a door above a lever handle

$109

The Good

  • Small with a premium feel
  • Built-in Wi-Fi
  • Can add a fingerprint keypad
  • Broad smart home support

The Bad

  • Terrible battery life
  • No support for Matter
  • Auto-unlock can be slow

Connectivity: Wi-Fi / Access options: Existing key, app, voice, keypad (sold separately) / Auto-unlock: Yes / Battery type: Two CR123 batteries / Battery life: Up to three months / Guest codes: Yes / Works with: Apple Home, Amazon Alexa, Google Home

The August Wi-Fi Smart Lock is an elegant retrofit door lock that replaces just the thumb turn. This is a better option than a full replacement lock if you prefer to keep your existing deadbolt, key cylinder, and lock exterior.

It’s expensive for a retrofit lock, but it feels premium thanks to its all-metal design. Its compact size means it doesn’t stick out too much on the inside of your door, and it’s attractive enough not to be an eyesore. In contrast to many models I’ve tested, it’s also very quiet when it operates.

The August has Wi-Fi built in, so there’s no need for an extra bridge. It has an auto-unlock feature that uses your phone to determine when you are arriving home and unlocks as you approach your door. This wasn’t 100 percent reliable in my testing, and I had to whip out my phone a couple of times to unlock it since there’s no built-in keypad. (I stopped carrying keys years ago — but you can unlock it with a key).

The lock does work with a Yale keypad sold separately to add keycode access, and there’s the option of a fingerprint version. (Yale and August are sister companies, now owned by Fortune Brands.) It’s large and black, so it stands out on a door frame, negating the whole “my entryway still looks the same” reason for buying this lock. However, the keypad has good Bluetooth range, so you could tuck it off to the side if you prefer. I tested the keypad with the Yale Approach lock, and you can read more about it below.

The biggest disadvantage of the August Wi-Fi is battery life. Most Wi-Fi locks use four AA batteries that last around six months. To achieve its small form factor, the August Wi-Fi uses two small CR123 batteries, which cost $20 to 30 for a six-pack and need to be replaced every two to three months, based on my testing.

Read our review of the August Wi-Fi Smart Lock.

Best smart lock for renters

$99

The Good

  • Easy install
  • Option of fingerprint keypad
  • A year of battery life

The Bad

  • Requires Wi-Fi bridge
  • Keypad is big and ugly
  • No support for Matter

Connectivity: Bluetooth and Wi-Fi (with plug-in module) / Access options: Key, app, voice, keypad and fingerprint reader sold separately / Auto-unlock: Yes / Battery type: Four AA alkaline batteries / Battery life: 12 months / Guest codes: Yes / Works with: Amazon Alexa, Google Home, Samsung SmartThings

Starting at $130, the Yale Approach is a more affordable alternative to the August. It’s super easy to install, looks fine, and has all the same features (it uses the same app) — auto-lock, auto-unlock, app, and voice control. Add the Bluetooth keypad to get one-touch locking, key code, and fingerprint access.

As with August, the Approach replaces your thumb turn, so you can still use your current lock and key — making it a great option if you are renting and don’t want to annoy your landlord. While not as small as August, it has a nice, slim profile and blends in better than the rear housing of most smart locks.

It comes in black or silver and took me less than five minutes to install. It uses four AA batteries and promises 12 months of battery life — a lot longer than the August. This is because there is no built-in Wi-Fi; instead, it uses an included plug-in bridge.

The bridge adds out-of-home control and connection to smart home platforms, including Alexa and Google Home (unlike August, there’s no Apple Home support). This allows for voice control and adding it to smart home routines. Yale told me there’s an onboard Thread radio that will be activated to support Matter, but didn’t say when this would arrive.

The Yale Bluetooth keypad with fingerprint access is slim and packed with function, but it’s also very tall and clunky-looking.

The Yale Bluetooth keypad with fingerprint access is slim and packed with function, but it’s also very tall and clunky-looking.

The optional Bluetooth keypad lets you control the lock from the outside without using an app or key, and it worked promptly and reliably. There’s the option of a fingerprint version, and that was similarly a good experience — just touch and open. The keypad also allows you to lock the door when you leave by pressing the Yale logo button.

The keys are a bit sensitive; I frequently get double inputs when pressing. But I liked the LED indicator that notifies you with green if your code was accepted or red if there’s an issue. This made it easy to know if the input worked, as the lock is very quiet — it’s hard to hear it locking or unlocking.

My biggest disappointment is the look of the keypad. It’s big, wide, and black, with prominent white numbers that don’t disappear when not in use — it looks a bit like a toy keypad on your door.

Best fingerprint smart lock

$174

The Good

  • Fast fingerprint reader
  • Nice, compact design
  • Works with Apple Home
  • Compatible with Wi-Fi and Z-Wave

The Bad

  • Touchscreen isn’t intuitive
  • Auto-unlock can be slow
  • No Matter support
  • Prominent Yale branding

Connectivity: Bluetooth (can add Wi-Fi, Z-Wave) / Access options: Key, keypad, fingerprint reader, app, voice / Auto-unlock: Yes / Battery type: Four AA batteries / Battery life: Six months to a year / Guest codes: Yes / Security rating: ANSI/BHMA Grade 2 / Works with: Apple Home, Amazon Alexa, Google Home, Samsung SmartThings

The Yale Assure 2 line — previously my top pick — has something for everyone. There’s an option with or without a keyway, with a touchscreen keypad or a physical keypad, or with Apple Home Key, but my favorite model is the Yale Assure Lock 2 Touch with a built-in fingerprint reader. It costs $209.99, and the built-in fingerprint reader is fast and efficient. I tested the touchscreen version, but Yale recently released a keypad version. Unless you really value the clean look of the touchscreen (which is blank when off), go with the keypad — it’s much easier to use.

The Yale Assure 2 is a good-looking lock that works with every smart home platform with its swappable modules. Its slimline design (both front and back), wide smart home compatibility, easy-to-use app, and good selection of unlocking options — including fingerprint unlock — make it a great option for your front door.

The Yale Touch’s fingerprint reader is fast and easy to use.

The Yale Touch’s fingerprint reader is fast and easy to use.

The lock supports Bluetooth out of the box and works with the Yale Access app and Apple Home app (which adds remote unlocking if you have an Apple Home hub). Along with a keycode, fingerprint reader, or key, you can also choose to use auto-unlocking. Auto-unlock is a decent alternative to fingerprint unlock, but I found I often had to wait at the door for a second or two before it worked. Still, it’s faster than fumbling through a purse for keys when your hands are full.

Support for other platforms and remote unlocking comes through Yale’s ingenious swappable networking modules, which cost around $80 each. There’s a Wi-Fi module to add Alexa and Google Home integration and a Z-Wave module for compatibility with (some) SmartThings hubs, Ring Alarm, and other Z-Wave hubs. Yale promised support for Matter via a Matter-over-Thread module back in 2022, but this still hasn’t materialized. They have announced a different lock that uses Thread, but it doesn’t have a fingerprint reader. I plan to test this soon.

I tested the Wi-Fi module in the Assure 2 Touch, which worked well with Amazon Alexa and Google Home. It allowed me to add the lock to Alexa Routines, lock and unlock it with my voice, and control it away from home. The downside is that control over Wi-Fi is considerably slower than over Bluetooth and drains the battery more quickly. Yale estimates up to a year on Bluetooth only, compared to six months over Wi-Fi; I got about four months.

Read my review of the Yale Assure Lock 2 Touch.

Best smart lock that works with Apple Home Key

An iPhone being used to unlock the Schlage Encode Plus smart lock.An iPhone being used to unlock the Schlage Encode Plus smart lock.

$259

The Good

  • Support for Apple Home and Home Key
  • Works over Thread
  • Easy-to-use keypad
  • Nice design options that may match your hardware

The Bad

  • Expensive
  • Quite loud
  • No Matter support

Connectivity: Wi-Fi or Thread / Access options: Key, keypad, app, voice, Apple Home Key / Auto-unlock: No / Battery type: Four AA batteries / Battery life: Up to six months / Security Grade: ANSI Grade 1 / Guest codes: Yes / Works with: Apple Home (Home Key), Amazon Alexa, Ring, and Google Home

Apple Home Key lets you use your iPhone or Apple Watch to tap to unlock your door in much the same way as you tap to pay. It uses an NFC chip in the lock, and is fast, efficient, and secure. There are no apps to open, no buttons to press, and no need to unlock your phone (although you can add that step as an extra security layer). However, it does require an Apple device; it won’t work on Android.

Home Key took a while to gain adoption, but there are now several options (and should soon be more as Apple has made it part of Matter). The Schlage Encode Plus is still the best — if most expensive — option.

A close up of a touchscreen door lock

The Encode Plus works with Home Key, but its convenience is costly.
Image: Dan Seifert / The Verge

The Schlage is the best Home Key-compatible lock with a built-in keypad. This is largely down to connectivity: while it won’t be updated to support Matter, the Thread radio adds better battery life and more stable connection to Apple Home than Bluetooth. I have had numerous connectivity issues in HomeKit with Bluetooth-only locks.

To use Home Key, you need to have an Apple Home Hub, such as an Apple TV or HomePod. Adding the lock to the Home app automatically adds the Home Key card to your Wallet, as well as that of anyone else you have added to your app. That’s much easier than getting household members to download a whole new app for the door lock. I should know — I try regularly.

To allow someone not in your household to control the lock, you’ll have to give them a standard PIN, which you can do in the Apple Home app or the Schlage Encode app. If you like, you can set this lock up entirely in the Home app and never have to use the manufacturer’s app.

Read our review of the Schlage Encode Plus.

Best smart lock that doesn’t look like a smart lock

$279

The Good

  • No branding
  • Small and unobtrusive
  • Supports Home Key
  • Works over Thread
  • Broad smart home compatibility through Matter

The Bad

  • Expensive
  • Keypad costs extra
  • Auto-unlock can be unreliable
  • Not ideal for older doors

Connectivity: Bluetooth, Thread, Wi-Fi with bridge / Access options: Key, app, voice, keypad (sold separately), Apple Home Key / Auto-unlock: Yes / Battery type: One CR2 battery / Battery life: One year / Guest codes: Yes / Security Grade: ANSI/BHMA: Grade 1 / Works with: Matter, Apple Home, Ring

Want a smart lock that doesn’t look like a smart lock? Level packs all the technology inside the deadbolt — including the single CR2 battery that gets up to a year of battery life.

The Level Lock Plus works with Apple’s Home Key and recently started supporting Matter over Thread. You can also control it with a key, auto-unlock, touch-to-unlock, the app, and smart home integrations. If you don’t use an iPhone or have family members who don’t, you’ll want to get the Bluetooth keypad (from $79) to give you another option for access. The lock also comes with two NFC cards you can hand out.

The battery in the Level Lock lineup goes inside the deadbolt.

The battery in the Level Lock lineup goes inside the deadbolt.

The Level Lock Plus replaces the whole lock, deadbolt and all, but still looks like a traditional door lock — both in front and behind the door. There is no branding at all — this is the only smart lock I’ve tested that isn’t a tiny advertisement on my front door. There’s also the option of the Level Bolt, which only replaces the deadbolt of your existing lock. This has all the same features, bar Home Key and touch-to-unlock, and it costs significantly less.

Level locks work over Bluetooth out of the box and can connect to an Apple Home hub for out-of-home control. If you don’t have a HomePod or Apple TV, get the Level Lock Plus with Wi-Fi, which comes with a Connect Wi-Fi bridge. Or you can connect it to Matter for smart home and out-of-home control. You’ll need a Matter controller, which can be a HomePod or Amazon Echo smart speaker, among other options (See FAQ).

A hand holding an iPhone up to a door. On the phone screen is a picture of a keycard with the Apple Home logo, and the words “My Home” above it. Below it is a blue checkmark in a circle and the word “Done.”

The Level Lock Plus works with Apple Home Key.

The Level lock also has auto-unlocking and touch-to-unlock, though with some quirks: it’s one or the other, not both. And neither works unless you leave the geofence area and come back. So if you leave the house, lock the door, get in your car, remember you forgot something, and go back to your door, it won’t unlock automatically. This is why I prefer Home Key or a keypad for unlocking.

Based on my testing of the lock on three different doors, it is worth noting that the full replacement Level locks don’t work well with older doors. I would only consider installing this if your door lines up perfectly with the strike plate.

Level locks are very expensive; the Plus costs $329 ($349 for the Wi-Fi version). But it’s the way to go for an invisible smart lock that works well.

Read my review of the Level Plus.

$180

The first single-borehole smart lock to work with Apple Home Key, the U300 can also be unlocked with a fingerprint, making it an easy, smart addition for shed, garage, or home office doors. It works over Thread and is Matter compatible, with up to a 10-month battery life.

Connectivity: Thread / Access options: Key, app, voice, keypad, NFC tag, Apple Home Key / Auto-unlock: No / Battery type: Four AA batteries / Battery life: 10 months / Guest codes: Yes / Works with: Matter, Apple Home, Amazon Alexa, Google Home, Samsung SmartThings

The Aqara U300 is a lever-style smart lock; it replaces a knob or lever lock on a door with a single borehole rather than a door with a deadbolt lock with two holes. This type of lock is traditionally found on interior doors, pedestrian doors into garages, or side doors.

There are options for smart lever locks from Yale, Schlage, and Lockly, but the U300 is the only one with Home Key compatibility and a built-in fingerprint reader. It also works over Thread and supports Matter.

I installed it on my garage door, and it works like a charm. The fingerprint reader is right where you put your thumb to open the door, so I barely notice it unlocking as I walk in. It also has a keypad, and I can use my iPhone or Apple Watch for Home Key. It’s set to auto-lock by default, but you can enable passage mode directly on the lock if you don’t want it to stay locked all the time.

It paired to Matter easily — I set it up in Apple Home and could add a code and Home Key all without even opening the Aqara app. Because it uses Thread, there’s no need for an Aqara hub. Thread also enables up to 10 months of battery life, according to Aqara.

The keyhole is hidden under the fingerprint reader.

The keyhole is hidden under the fingerprint reader.

I love the idea of using smart locks on other doors in my home. I could see this working on a basement door, a home office, or any other room you like to keep people out of. However, I would like to see a way to permanently enable passage mode. Currently, you have to do it on the device, and it reverts to auto-lock after an undetermined period. This makes it somewhat useless for interior doors. It’s also very large and only comes in black or silver, so it likely wouldn’t blend in with your interior decor. A slimmer option, in more colorways, designed for inside use would be nice to see.

The U300 is expensive at $230, but it’s similar to other outdoor-rated options (it’s IPX4-rated). The addition of Thread — a protocol that works over a mesh network — makes it easier to extend connectivity further to places like a shed or garage.

Best smart lock that’s also a video doorbell

$400

The Good

  • Digital peephole is useful
  • Palm unlock is fast
  • Matter support
  • Rechargeable battery

The Bad

  • Very expensive
  • Nighttime video not great
  • HomeBase required for package detection
  • Doesn’t work with Matter when connected to HomeBase

Connectivity: Wi-Fi or Eufy HomeBase / Access options: Key, palm unlock, keypad, app, voice / Auto-unlock: No / Battery type: Removable, rechargeable lithium-ion battery, AAA backup / Battery life: Five months / Guest codes: Yes / Security rating: ANSI Grade 1 / Works with: Matter (including Apple Home), Amazon Alexa, and Google Home

Eufy’s new FamiLock S3 Max combines a smart lock and video doorbell in one device and features a digital peephole and a wave-to-unlock function. It also has a keyway and keypad and supports Matter-over-Wi-Fi, so can work with all the major smart home platforms.

My favorite of all these feature is the video screen on the inside part of the lock, which shows a live feed of who is on the other side of the door. If you have a peephole or a window in your door, this might not be much use to you — and you can opt to get the lock without the screen for $50 less. But as a quick way to confirm who is at your door before opening it, it’s super handy.

Palm unlock worked quickly and reliably, once we got the hang of it.

Palm unlock worked quickly and reliably, once we got the hang of it.

The lock has another fairly unique feature: palm vein technology. This lets you wave your hand over it to unlock it and is an alternative form of biometric access to the fingerprint reader.

Palm unlocking isn’t any faster or easier than using your fingerprint, though, and I found it harder to get used to. But once I got the hang of it, it worked reliably. Both my kids also picked it up quickly, and my husband, who has trouble with fingerprint locks in general, really liked it.

The video doorbell aspect here is the main reason to buy this lock. The FamiLock’s 2K camera provides clear, crisp video during daylight hours and decent night vision, although my protruding door frame reflected the LEDs, causing the footage to blow out a tad.

The 180-degree diagonal field of view meant I could see top to bottom and all of one side (not the other side, though, to the aforementioned door frame). But packages and people were clearly visible, which is most of what you want to see with a doorbell.

The rear of the lock is a screen that turns on when someone rings the doorbell and can be manually activated by a button on the back.

The rear of the lock is a screen that turns on when someone rings the doorbell and can be manually activated by a button on the back.

There’s no fee for viewing recorded footage of visitors in the Eufy app, and videos are stored locally on the device. Live view and recording pulled up promptly in the app, and the doorbell can alert you when it sees a person. For more advanced smart alerts, like packages and facial recognition, you need to connect it to a Eufy HomeBase.

However, connecting to the HomeBase means you can’t use the Matter integration, so you would lose Apple Home support. Bear in mind, Matter only controls the lock, as cameras aren’t supported by the standard yet, so the benefits of using Matter are fairly limited so far. (If you’re looking for a biometric Matter lock, Eufy’s E30 is a good fingerprint lock that uses Matter-over-Thread.)

A video doorbell to a lock puts a lot of strain on the battery. While you can adjust several settings to help save power, Eufy only claims about five months of battery life from the lock’s giant 15,000mAh removable battery. There are also four AAA backup batteries tucked into the top of the very large lock to keep it functioning while you’re recharging the battery (which takes a while). I’ve been testing it for a week so far, and the battery indicator hasn’t budged yet.

At $400, this is a very expensive lock, but it works well and provides dual functionality of a doorbell and door lock.

Best facial recognition smart lock

$349

The Good

  • Facial recognition is super fast
  • Home Key and a fingerprint reader
  • Compact design
  • Comes with two rechargeable batteries

The Bad

  • Keypad is hard to see, fiddly to use
  • Wired door sensor is ugly
  • No support for Matter

Connectivity: Wi-Fi (2.4gHz) / Access options: Fingerprint, facial recognition, app, voice, keypad, Home Key, key / Auto-unlock: No / Battery type: 10,000mAh rechargeable / Battery life: Eight months / Guest codes: Yes / Security rating: ANSI Grade 1 / Works with: Apple Home, Amazon Alexa, Google Home

I was very impressed with the Lockly Visage. The first facial recognition residential smart lock on the market, it also features a fingerprint reader, a keypad, a keyway, and Apple Home Key — that’s a lot of high-tech ways to unlock your door. And while it’s probably too much lock for most people, if you are a super smart home user or a major gadget nerd, you’ll love this lock.

The keypad is small and can be hard to see. This is also the area you tap for Home Key. The facial recognition sensors are at the top of the lock; there’s a keyway and a fingerprint reader below that.

The keypad is small and can be hard to see. This is also the area you tap for Home Key. The facial recognition sensors are at the top of the lock; there’s a keyway and a fingerprint reader below that.

I was skeptical about the facial unlocking at first, but it worked really well, opening a second or two before I put my hand on the handle. The only caveat is that I had to be approaching face-on, which in most cases I was, but the couple of times I approached from a slightly odd angle, it failed to unlock. In those cases, though, I had the option of using my fingerprint or Home Key.

There’s also a touchscreen keypad, which is mainly useful for handing out codes to guests and visitors whose faces and fingers you don’t want to scan into your lock. The keypad is probably my least favorite part of the lock; it’s very small, which is good for the overall look, but fiddly to access. It’s also hard to see bright light. But with all the other ways to unlock, this isn’t a deal-breaker.

Note that the Visage doesn’t take video or still images; its infrared camera is only used for facial recognition, data for which is stored on the device. Lockly does have a video doorbell version for $429, though that doesn’t have facial recognition.

The wired plastic door sensor is a letdown, ugly and non-removable — it’s not a good look.

The wired plastic door sensor is a letdown, ugly and non-removable — it’s not a good look.

Surprisingly, despite all the tech packed into it, the lock is compact and stylish-looking and works with the redesigned Lockly Home app, which is now more straightforward and very easy to use. The lock works over Wi-Fi and supports Apple Home, Google Home, and Alexa, but there’s no support for Matter.

Lockly claims eight months of battery life with its included rechargeable 10,000mAh battery. Uniquely, it comes with two batteries, so you can swap one and keep the lock online while charging the other.

At $350, the Lockly Visage is very expensive, but considering the tech packed into this lock, plus the two batteries, it’s not outrageous. Its solid build, broad smart home compatibility, and multiple very cool ways to control it make this a great lock.

Other smart locks to consider

The Eufy E30 is a fingerprint and keypad lock that supports both Matter-over-Thread and Wi-Fi.

The Eufy E30 is a fingerprint and keypad lock that supports both Matter-over-Thread and Wi-Fi.

  • Eufy’s E30 smart lock works with both Matter-over-Thread and Wi-Fi. It has a fingerprint reader, key, and keypad, and you can use the fingerprint access through the Eufy app while connecting it to platforms like Apple Home through Matter. Unlike the Kwikset Halo Select, you can use Wi-Fi and Thread simultaneously, which is unusual. I’ve not tested it long enough to determine if you still benefit from Thread’s better battery life. It’s cheaper than the Halo, has a fingerprint reader instead of auto-unlock, and promises 8 months of battery life. It can also integrate with a Eufy doorbell to control it from a live view. It has a nice compact design, but the rear housing is huge to fit 8 AA batteries. The lock is loud in operation, and the fingerprint reader was finicky; it also has the lowest ANSI/BHMA rating, at Level 3.
  • U-tec’s Bolt Fingerprint Matter works over Thread and can be set up directly in your smart home platform of choice — no need to use the manufacturer’s app. But if you want to use its built-in fingerprint reader, you’ll need to use the U Home app. If you don’t use it, then it’s kind of a waste of space, so the whole “you only need one app” feature falls flat. I also don’t love the design of the Ultraloqs, while smaller than most smart locks, they are squat and chunky looking, resembling a combination lock rather than door hardware. It also uses eight batteries, which is an absurd amount, and is very noisy.
  • If you’re an Amazon Alexa Ring household, the Schlage Encode Wifi lock is a good option; it integrates with the Ring app, so you can lock and unlock it while viewing a live feed from your Ring doorbell. Its design will also match a Schlage door set, which is important for some people. There’s no door-sensing or auto-unlock option, but you have three reliable ways to get in: a key, a PIN, and the app. It also lasts at least six months on one set of four AAs.
Ultraloq’s first Matter lock works over Thread and has a fingerprint reader plus keypad.

Ultraloq’s first Matter lock works over Thread and has a fingerprint reader plus keypad.

  • If you want Home Key but the Schlage is too expensive or not your style, the Aqara U50 is a good, inexpensive alternative that’s less than half the price of the Schlage. It doesn’t have as good a build quality, and the keypad is a bit finicky, but it works with Apple Home and Home Key out of the box. (You‘ll need an Aqara hub for any other smart home integrations, including Matter.) It also pairs with Aqara’s G4 video doorbell to unlock the door while viewing video from the live feed. (Aqara has a doorbell that’s also a hub coming soon).
  • The Aqara Smart Lock U100 is a Matter-compatible smart lock that also works with Apple HomeKit and Home Key. A full replacement deadlock that can be unlocked by key, keypad, NFC key fob, fingerprint, voice control, through an app, or with Apple Home Key. It’s a good lock, but its smart home integrations are complicated, and there are now better options.
  • The Yale Assure SL with Matter Module is a Matter-over-Thread deadbolt smart lock. It’s simple, with a clean design and a touchscreen keypad for entry. There’s no keyway, fingerprint reader, or Apple Home Key, but in terms of simplicity, reliability, and future-proofing, it’s a good option. It’s one of the few locks you can connect directly to your smart home platform of choice without needing to download the manufacturer’s app — the Assure SL doesn’t even work with the Yale app.
The Yale Assure SL is a super simple smart lock that works with every platform through Matter.

The Yale Assure SL is a super simple smart lock that works with every platform through Matter.

  • The SwitchBot Lock Pro is an all-around upgrade to one of my previous favorite locks, the SwitchBot lock (which is now discontinued). It’s a great solution if you have an unusual lock, as it can work on almost any door; it has higher-quality materials than the original, but now requires you to replace the rear of your lock (as most retrofit locks do). It does support Matter through a bridge, but for $200, I would still opt for August.
  • The Kwikset Halo Touch is a Bluetooth and Wi-Fi fingerprint lock with a traditional keyway. As there’s no keypad, it looks more like a standard lock with the bonus of easy access. This is more limiting when it comes to sharing access to your door, but it’s a good solution for anyone who wants a simple key-free way into their home and knows they won’t need to share lots of digital keys.

Other smart locks I tested

  • The Aqara U200 is $270. That’s a lot for a retrofit lock — even with support for Thread, Matter, and Home Key. It has a keypad/fingerprint reader included; most retrofit locks charge extra for one. The keypad enables Apple Home Key, and this is the only retrofit lock that works with it. If that’s something you want, then this is the only option for now. Otherwise, you can get all the same functionality with the Yale Approach — plus auto-unlock — for $40 less.
  • U-tec’s Ultraloq Bolt Fingerprint with Wi-Fi ($199 to $249) is the newest version of my previous pick for best lock, the U-Bolt Pro with Wi-Fi. This version adds support for Apple Home (that’s the $249 one), but not Home Key, and a slight redesign — you no longer have to pop half the lock collar off to get to the keyhole, which is a good upgrade. It still has a fingerprint reader and auto-unlock.
  • The Bosma Aegis is an inexpensive retrofit lock that works well and costs just $60. It is remarkably similar to the August Wifi lock in terms of function and installation, but not build quality (it’s very plasticky). It also has a Bluetooth keypad option (with a fingerprint reader). But it is giant. Like, hulking huge. It’s also very loud and requires a separate bridge.
  • The Lockly Vision Elite is a smart lock with a video doorbell. It’s very expensive, and it’s not a great video doorbell. Motion detection is spotty, and the camera lacks people or package detection. It works with Amazon Alexa and Google Home, but not Apple Home or Matter.
  • The Eufy Smart Lock Touch is a very good lock in terms of function — it has an easy-to-use fingerprint reader, a nice big touchscreen keypad, the option of a key, and Wi-Fi built in. But it is just too big and techie-looking for most people’s front doors. I do like the removable 10,000mAh battery, which went eight months before needing to recharge (with a USB-A cable). But that’s also why this lock is so big.
  • The Eufy Video Smart Lock is similarly huge and very expensive; it requires a bridge to connect to Wi-Fi, and the Eufy FamiLock offers way more features for just $50 more.
A woman holding packages approaches a front door where a keypad is scanning her face.

SwitchBot recently launched the first retrofit lock with facial recognition.
Image: SwitchBot

  • The Tapo DL100 is a $70 smart lock with built-in Wi-Fi, a keypad, and a physical key, plus access via the Tapo mobile app and smart home integrations. It’s cheaper than my budget pick, the Wyze Bolt, and includes Wi-Fi for remote access, but you don’t get a fingerprint reader. It works with Tapo’s excellent video doorbells.
  • The SwitchBot Lock Ultra Vision is a retrofit smart lock that works with a keypad that has facial recognition built in. The keypad also has a fingerprint reader and a keypad, and auto-unlock. It can work with almost any style of lock, connects over Bluetooth, and works with Apple Home (through Matter), Amazon Alexa, and Google Home with a SwitchBot hub.
  • The Schlage Sense Pro is the company’s first lock to support Matter and one of the first to use ultra-wideband technology (UWB) for hands-free unlocking. It has a keypad but no keyway and will work with the Aliro standard when it launches. This means it should support a version of Apple Home Key.
  • U-tec’s Ultraloq Bolt Mission is a $400 lock that will work with UWB for hands-free unlocking; it also has a keypad and a keyway, and the company says it will support Matter.
  • The Yale Smart Lock with Matter works over Thread and is a full-deadbolt replacement featuring a keypad and keyway for access. It’s designed to pair with Google’s Nest video doorbells and is due to launch this summer for $170.
  • The Ultraloq Bolt NFC HomeKey ($249) is U-tec’s first Apple Home Key smart lock slated for release soon. There’s no fingerprint reader, but there is a keypad and physical key. Built-in Wi-Fi adds support for Amazon Alexa, Google Home, and Samsung SmartThings.
  • The Yale Code is a $99 non-smart lock. It has an electronic keypad but doesn’t work with an app or have any connectivity. It uses a standard key and can store up to 20 codes. The advantage here is mainly the price — making it an option for a side door or garage.

Smart door lock FAQs

Concerns about someone hacking your connected door lock are largely unfounded; it’s a lot easier to physically force a deadbolt lock or break a nearby window than it is to hack a smart lock. All residential door locks are rated for physical security by the Builders Hardware Manufacturers Association (BHMA) standard, accredited by the American National Standards Institute (ANSI). The deadbolt locks in this guide meet BHMA standards (retrofit locks aren’t rated, as it depends on the deadbolt they’re attached to). There are three levels: 1 is the highest, 3 is the lowest, and 2 is the norm for most residential locks. (You may also see letter grade ratings, a newer system introduced in 2021). Some “meet the standard” but aren’t accredited.

Most deadbolt locks are simple to install, requiring about 30 minutes and a screwdriver. If you have an older door, you may have to make some modifications, but smart locks are designed to be adjusted to suit standard doors.

Smart locks that work over built-in Wi-Fi will last 3 to 6 months. Those that use Bluetooth and have an optional plug-in module to connect to Wi-Fi will go 8 to 12 months. Those that rely just on Thread should last up to a year (I haven’t been able to test one for long enough to know for sure). Remember, if you have a lock that can use Thread and Wi-Fi (like the Schlage Encode Plus), Wi-Fi will drain the batteries quicker than Thread — so avoid activating the Wi-Fi if you can.

Most smart locks without a keyhole have some form of exterior power option to allow you to charge it enough to access the door when you’ve ignored the continuous warnings the app and lock have sent you to tell you the battery is running low. Most use a USB-C port to connect to a portable power bank, but some, like Yale, use a 9-volt battery to provide enough power to bring them back to life.

Auto unlock is a feature on several smart locks that uses a combination of GPS, Bluetooth, and Wi-Fi to determine where your phone is in relation to your front door and automatically unlock it for you as you approach. Your smartphone’s GPS determines your location, and Bluetooth then talks to your lock when you’re close enough, telling it to unlock. The lock will switch to away mode when GPS tells it you’ve left a radius around your home, and to back or home mode when you return. You do need to keep the lock manufacturer app open on your phone for this to work (it can run in the background).

Matter is a smart home standard designed to make connected devices more interoperable, reliable, secure, and easier to use. The benefit of a Matter smart lock now is future-proofing. Today, it doesn’t add much that most locks can’t already do (and, in some cases, less). But it means your lock should work with all the big smart home platforms in the future and will work with any Matter-compatible device now, such as smart plugs and smart lights, for home automation routines (for example, to shut off all your lights when you lock your door).A major benefit of a Matter lock is that you can share the lock across platforms without downloading additional apps, setting up accounts, or linking services through the cloud. This lets you use the same lock with Apple Home and Google Home, should you want, and you can control it with both voice assistants. The downside is that not all platforms support creating PIN codes for Matter smart locks with keypads (Google Home and Alexa don’t offer this yet). Additionally, Matter doesn’t support voice PIN codes, which platforms like Google Home use to authorize remotely unlocking door locks using smart speakers and smart displays.Matter locks with NFC that work directly with Matter (not through a bridge) can now support Apple Home Key through the Apple Home app (iPhone only).

If a lock works uses Matter-over-Wi-Fi or connects through a bridge, you will need a Matter controller from the platform on which you want to use it — a HomePod or Apple TV for Apple Home, a Nest hub or smart speaker for Google Home.If the lock uses Matter-over-Thread, you will need a Matter controller and a Thread border router. These can be the same thing — a HomePod is both, and a Nest Hub Max is both. But the Thread border router doesn’t need to be platform-specific. So, if you have an Apple TV or an Eero Wi-Fi router that supports Thread and a smart speaker from Nest that’s a Matter controller — you could use a Thread lock over Matter in Google Home.

There’s a new standard coming to smart locks called Aliro. This is being developed by Apple, Samsung, and Google, along with major lock and chip manufacturers, to help smart locks integrate more seamlessly with smartphones. It is slated to have two main functions, UWB and NFC unlocking. UWB is a hands-free auto-unlock tech that uses a UWB radio in the lock and your phone to know when you’re approaching the door and automatically unlock it. NFC lets you tap your phone or watch to your lock to unlock it; it’s essentially Apple’s Home Key function, but not limited to iPhones, and Samsung and Google both plan to adopt it.

Photography by Jennifer Pattison Tuohy / The Verge

Update, June 6th: Added several new picks, removed some older ones, added an “other smart locks to consider” section, added details on UWB unlocking, and made minor updates throughout.

Source link
#tested #smart #locks

What every U.K. AI startup wants to know these days is, how can I get office space in King’s Cross?  

The area is so hot that a VC firm allegedly recently won a deal by promising a founder office space in the neighborhood. “We stop at nothing to win deals [for] and to support” founders, “including helping them source office space when needed,” the firm told me when asked about the rumor, declining to confirm or deny any details. 

The neighborhood’s popularity began back in 2016 when DeepMind — then newly acquired by Google — moved in. Soon after, a flood of AI startups followed, wanting to be around the Google DeepMind magic. Today, they hope to take advantage of the cluster of AI talent there. 

This has transformed King’s Cross into one of the world’s top AI hubs, rivaled only by San Francisco and Beijing. Around London, it’s known by the sobriquet “Knowledge Quarter,” as it’s home to names like OpenAI, Meta, Isomorphic Labs, Cusp AI, Wayne, Recursive, and, a little farther down the road, Synthesia and Anthropic. The European Technology Network (ETN) just moved into a glossy new office nearby, while University College London sits around the corner.  

Mixed in with the new developments are trendy food spots like Hoppers and BAO. Hop a train from King’s Cross, and founders can be in Cambridge in 45 minutes to source talent or can be in Paris in two hours to strike a deal.  

Who would have guessed that a little more than 20 years ago, this was one of the seediest areas in London?  

“In the ’80s, crack and heroin made the area a major narcotics market,” Hussein Kanji, an investor at Hoxton Ventures, said, recalling syringes in tree trunks and gangs patrolling the streets. “In 1982, the local church was occupied by the English Collective of Prostitutes for 12 straight days.” Then, in the early 2000s, a real estate developer had a dream and, well, “now it is the AI hotbed of the United Kingdom,” Kanji said. “What a change.” 
 
Around 18 months ago, his portfolio company BioCorteX moved from the neighborhood Holborn to the Jellicoe building in King’s Cross, hoping to be near the action. “Lots going on in London right now,” Nik Sharma, co-founder of BioCorteX, told me. “Lots of hyperscalers moving in.” That includes, reportedly, Jeff Bezos’ AI company Prometheus, which is also said to be in talks to move into the Jellicoe.  

There are around 3,600 AI startups in London, which, together, have raised around $12.1 billion out of the $14.8 billion raised in the city since late July, according to Dealroom. Since the start of June, AI-related startups have leased more than 1 million square feet of office space in London, according to the real estate firm Knight Frank. With that, prime rents in King’s Cross have risen 18% over the past three years, Chris Dunn, a commercial insight associate at the firm, told me. 
 
That percentage represents only the largest leases encompassing at least 10,000 square feet, like the ones OpenAI and Prometheus are signing. The shorter deals go for even more, he said, and now the vacancy rate for conventional office space is just 0.9%. “Demand has outstripped supply,” he continued.  

Today, one of the big topics of the area is sovereignty. It was a wake-up call for many when Anthropic shut off access to Mythos and Fable this summer, leaving some in the ecosystem to conclude: “We’d better look after ourselves,” Saul Klein, co-founder of the VC firm Phoenix Court, told me.  

Phoenix Court is located in the King’s Cross area and has three portfolio companies in the vicinity, including Olix (which just announced a $3.3 billion valuation), Early Health and CoMind. Robin Klein, co-founder of the firm, said the shutdown of Fable and Mythos access was a “small but sharp reminder that Europe can’t simply rent its AI capabilities and capacity; it needs to build and hold some of its own.” King’s Cross, he said, is where much of this building is actually happening.  

“The bigger question,” he continued, “is whether the U.K. builds the infrastructure, compute, energy, capital, to make this self-reliance durable, rather than just hosting outposts of U.S. labs.” 

This former notorious red-light district is now one of the world’s top AI hubs | TechCrunch
What every U.K. AI startup wants to know these days is, how can I get office space in King’s Cross?  

The area is so hot that a VC firm allegedly recently won a deal by promising a founder office space in the neighborhood. “We stop at nothing to win deals [for] and to support” founders, “including helping them source office space when needed,” the firm told me when asked about the rumor, declining to confirm or deny any details. 







The neighborhood’s popularity began back in 2016 when DeepMind — then newly acquired by Google — moved in. Soon after, a flood of AI startups followed, wanting to be around the Google DeepMind magic. Today, they hope to take advantage of the cluster of AI talent there. 

This has transformed King’s Cross into one of the world’s top AI hubs, rivaled only by San Francisco and Beijing. Around London, it’s known by the sobriquet “Knowledge Quarter,” as it’s home to names like OpenAI, Meta, Isomorphic Labs, Cusp AI, Wayne, Recursive, and, a little farther down the road, Synthesia and Anthropic. The European Technology Network (ETN) just moved into a glossy new office nearby, while University College London sits around the corner.  

Mixed in with the new developments are trendy food spots like Hoppers and BAO. Hop a train from King’s Cross, and founders can be in Cambridge in 45 minutes to source talent or can be in Paris in two hours to strike a deal.  

Who would have guessed that a little more than 20 years ago, this was one of the seediest areas in London?  

“In the ’80s, crack and heroin made the area a major narcotics market,” Hussein Kanji, an investor at Hoxton Ventures, said, recalling syringes in tree trunks and gangs patrolling the streets. “In 1982, the local church was occupied by the English Collective of Prostitutes for 12 straight days.” Then, in the early 2000s, a real estate developer had a dream and, well, “now it is the AI hotbed of the United Kingdom,” Kanji said. “What a change.”  Around 18 months ago, his portfolio company BioCorteX moved from the neighborhood Holborn to the Jellicoe building in King’s Cross, hoping to be near the action. “Lots going on in London right now,” Nik Sharma, co-founder of BioCorteX, told me. “Lots of hyperscalers moving in.” That includes, reportedly, Jeff Bezos’ AI company Prometheus, which is also said to be in talks to move into the Jellicoe.  


There are around 3,600 AI startups in London, which, together, have raised around .1 billion out of the .8 billion raised in the city since late July, according to Dealroom. Since the start of June, AI-related startups have leased more than 1 million square feet of office space in London, according to the real estate firm Knight Frank. With that, prime rents in King’s Cross have risen 18% over the past three years, Chris Dunn, a commercial insight associate at the firm, told me.  That percentage represents only the largest leases encompassing at least 10,000 square feet, like the ones OpenAI and Prometheus are signing. The shorter deals go for even more, he said, and now the vacancy rate for conventional office space is just 0.9%. “Demand has outstripped supply,” he continued.  

Today, one of the big topics of the area is sovereignty. It was a wake-up call for many when Anthropic shut off access to Mythos and Fable this summer, leaving some in the ecosystem to conclude: “We’d better look after ourselves,” Saul Klein, co-founder of the VC firm Phoenix Court, told me.  

Phoenix Court is located in the King’s Cross area and has three portfolio companies in the vicinity, including Olix (which just announced a .3 billion valuation), Early Health and CoMind. Robin Klein, co-founder of the firm, said the shutdown of Fable and Mythos access was a “small but sharp reminder that Europe can’t simply rent its AI capabilities and capacity; it needs to build and hold some of its own.” King’s Cross, he said, is where much of this building is actually happening.  







“The bigger question,” he continued, “is whether the U.K. builds the infrastructure, compute, energy, capital, to make this self-reliance durable, rather than just hosting outposts of U.S. labs.” 

Image Credits:Phoenix Court

Top founders want to stay 

Simon Kohl, founder of Latent Labs, has offices in King’s Cross and San Francisco. The London office, at the moment, is growing faster, and he’s more bullish than ever on the ecosystem, he said. “The mood right now feels less like London trying to catch up and more like London becoming one of the default places to start a serious AI company,” he said.  Look around and you are likely to see Wayve testing its autonomous cars. Founded in 2017 by co-founder Alex Kendall, the unicorn is one of London’s biggest success stories.  

“Ten years ago, building a frontier AI company from London felt like an unusual choice,” Kendall told me. “Now it feels like an obvious one.” Wayve moved into King’s Cross in 2018 looking for a space that could double as a garage — “a rare combination in Central London,” Kendall said. He has watched the ecosystem mature around him — and it’s now evident that a startup can stay in London, raise serious capital, hire world-class AI talent, and remain globally competitive, he said.  Down the street from Anthropic’s new 158,000-square-foot office is the AI agent builder Sierra and the AI video platform Synthesia. 

Laura Gonzalez Florez, Synthesia’s chief of staff and head of people, says the company moved into its glossy new office building a year ago to accommodate its growing team. They were drawn to the area for the same reason as everyone else: “It’s very close to the airport … very close to where a lot of investors are,” she said. 

Image Credits:Synthesia

Around two-thirds of Synthesia’s engineers are remote, Gonzalez Florez said, letting the company tap into an affordable, international, and diverse talent pool and helping it scale faster. “From London, we can hire and work, without any problem, people from anywhere, from Slovenia to Portugal,” she said.  

Unsurprisingly, London’s AI boom is also causing a talent war.U.K. AI job postings have skyrocketed in the past few years, per data from PwC. When Anthropic announced it moved into town earlier this year, it listed, for example, a salary range of £260,000 to £630,000 for a machine learning research engineer when the average salary in London for the same role is around £102,000. Some founders in the U.K., like those in Silicon Valley, are being forced to raise more and bigger rounds to keep up. 

“The real test is whether more globally significant AI companies are founded, funded, and scaled from the U.K., while continuing to attract the world’s best talent to build them here,” Zain Ali, founder of the King’s Cross-based AI legal firm Centuro, told me. “If that continues to happen, King’s Cross won’t just be an AI hub. It’ll become one of the U.K.’s most important strategic assets.”
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.#Thisformernotorious #redlight #districtis #nowone #worlds #top #hubs #TechCrunchUK
Image Credits:Phoenix Court

Top founders want to stay

Simon Kohl, founder of Latent Labs, has offices in King’s Cross and San Francisco. The London office, at the moment, is growing faster, and he’s more bullish than ever on the ecosystem, he said. “The mood right now feels less like London trying to catch up and more like London becoming one of the default places to start a serious AI company,” he said. 
 
Look around and you are likely to see Wayve testing its autonomous cars. Founded in 2017 by co-founder Alex Kendall, the unicorn is one of London’s biggest success stories.  

“Ten years ago, building a frontier AI company from London felt like an unusual choice,” Kendall told me. “Now it feels like an obvious one.” Wayve moved into King’s Cross in 2018 looking for a space that could double as a garage — “a rare combination in Central London,” Kendall said. He has watched the ecosystem mature around him — and it’s now evident that a startup can stay in London, raise serious capital, hire world-class AI talent, and remain globally competitive, he said. 
 
Down the street from Anthropic’s new 158,000-square-foot office is the AI agent builder Sierra and the AI video platform Synthesia. 

Laura Gonzalez Florez, Synthesia’s chief of staff and head of people, says the company moved into its glossy new office building a year ago to accommodate its growing team. They were drawn to the area for the same reason as everyone else: “It’s very close to the airport … very close to where a lot of investors are,” she said. 

Image Credits:Synthesia

Around two-thirds of Synthesia’s engineers are remote, Gonzalez Florez said, letting the company tap into an affordable, international, and diverse talent pool and helping it scale faster. “From London, we can hire and work, without any problem, people from anywhere, from Slovenia to Portugal,” she said.  

Unsurprisingly, London’s AI boom is also causing a talent war.

U.K. AI job postings have skyrocketed in the past few years, per data from PwC. When Anthropic announced it moved into town earlier this year, it listed, for example, a salary range of £260,000 to £630,000 for a machine learning research engineer when the average salary in London for the same role is around £102,000. Some founders in the U.K., like those in Silicon Valley, are being forced to raise more and bigger rounds to keep up. 

“The real test is whether more globally significant AI companies are founded, funded, and scaled from the U.K., while continuing to attract the world’s best talent to build them here,” Zain Ali, founder of the King’s Cross-based AI legal firm Centuro, told me. “If that continues to happen, King’s Cross won’t just be an AI hub. It’ll become one of the U.K.’s most important strategic assets.”

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

#Thisformernotorious #redlight #districtis #nowone #worlds #top #hubs #TechCrunchUK">This former notorious red-light district is now one of the world’s top AI hubs | TechCrunch
What every U.K. AI startup wants to know these days is, how can I get office space in King’s Cross?  

The area is so hot that a VC firm allegedly recently won a deal by promising a founder office space in the neighborhood. “We stop at nothing to win deals [for] and to support” founders, “including helping them source office space when needed,” the firm told me when asked about the rumor, declining to confirm or deny any details. 







The neighborhood’s popularity began back in 2016 when DeepMind — then newly acquired by Google — moved in. Soon after, a flood of AI startups followed, wanting to be around the Google DeepMind magic. Today, they hope to take advantage of the cluster of AI talent there. 

This has transformed King’s Cross into one of the world’s top AI hubs, rivaled only by San Francisco and Beijing. Around London, it’s known by the sobriquet “Knowledge Quarter,” as it’s home to names like OpenAI, Meta, Isomorphic Labs, Cusp AI, Wayne, Recursive, and, a little farther down the road, Synthesia and Anthropic. The European Technology Network (ETN) just moved into a glossy new office nearby, while University College London sits around the corner.  

Mixed in with the new developments are trendy food spots like Hoppers and BAO. Hop a train from King’s Cross, and founders can be in Cambridge in 45 minutes to source talent or can be in Paris in two hours to strike a deal.  

Who would have guessed that a little more than 20 years ago, this was one of the seediest areas in London?  

“In the ’80s, crack and heroin made the area a major narcotics market,” Hussein Kanji, an investor at Hoxton Ventures, said, recalling syringes in tree trunks and gangs patrolling the streets. “In 1982, the local church was occupied by the English Collective of Prostitutes for 12 straight days.” Then, in the early 2000s, a real estate developer had a dream and, well, “now it is the AI hotbed of the United Kingdom,” Kanji said. “What a change.”  Around 18 months ago, his portfolio company BioCorteX moved from the neighborhood Holborn to the Jellicoe building in King’s Cross, hoping to be near the action. “Lots going on in London right now,” Nik Sharma, co-founder of BioCorteX, told me. “Lots of hyperscalers moving in.” That includes, reportedly, Jeff Bezos’ AI company Prometheus, which is also said to be in talks to move into the Jellicoe.  


There are around 3,600 AI startups in London, which, together, have raised around .1 billion out of the .8 billion raised in the city since late July, according to Dealroom. Since the start of June, AI-related startups have leased more than 1 million square feet of office space in London, according to the real estate firm Knight Frank. With that, prime rents in King’s Cross have risen 18% over the past three years, Chris Dunn, a commercial insight associate at the firm, told me.  That percentage represents only the largest leases encompassing at least 10,000 square feet, like the ones OpenAI and Prometheus are signing. The shorter deals go for even more, he said, and now the vacancy rate for conventional office space is just 0.9%. “Demand has outstripped supply,” he continued.  

Today, one of the big topics of the area is sovereignty. It was a wake-up call for many when Anthropic shut off access to Mythos and Fable this summer, leaving some in the ecosystem to conclude: “We’d better look after ourselves,” Saul Klein, co-founder of the VC firm Phoenix Court, told me.  

Phoenix Court is located in the King’s Cross area and has three portfolio companies in the vicinity, including Olix (which just announced a .3 billion valuation), Early Health and CoMind. Robin Klein, co-founder of the firm, said the shutdown of Fable and Mythos access was a “small but sharp reminder that Europe can’t simply rent its AI capabilities and capacity; it needs to build and hold some of its own.” King’s Cross, he said, is where much of this building is actually happening.  







“The bigger question,” he continued, “is whether the U.K. builds the infrastructure, compute, energy, capital, to make this self-reliance durable, rather than just hosting outposts of U.S. labs.” 

Image Credits:Phoenix Court

Top founders want to stay 

Simon Kohl, founder of Latent Labs, has offices in King’s Cross and San Francisco. The London office, at the moment, is growing faster, and he’s more bullish than ever on the ecosystem, he said. “The mood right now feels less like London trying to catch up and more like London becoming one of the default places to start a serious AI company,” he said.  Look around and you are likely to see Wayve testing its autonomous cars. Founded in 2017 by co-founder Alex Kendall, the unicorn is one of London’s biggest success stories.  

“Ten years ago, building a frontier AI company from London felt like an unusual choice,” Kendall told me. “Now it feels like an obvious one.” Wayve moved into King’s Cross in 2018 looking for a space that could double as a garage — “a rare combination in Central London,” Kendall said. He has watched the ecosystem mature around him — and it’s now evident that a startup can stay in London, raise serious capital, hire world-class AI talent, and remain globally competitive, he said.  Down the street from Anthropic’s new 158,000-square-foot office is the AI agent builder Sierra and the AI video platform Synthesia. 

Laura Gonzalez Florez, Synthesia’s chief of staff and head of people, says the company moved into its glossy new office building a year ago to accommodate its growing team. They were drawn to the area for the same reason as everyone else: “It’s very close to the airport … very close to where a lot of investors are,” she said. 

Image Credits:Synthesia

Around two-thirds of Synthesia’s engineers are remote, Gonzalez Florez said, letting the company tap into an affordable, international, and diverse talent pool and helping it scale faster. “From London, we can hire and work, without any problem, people from anywhere, from Slovenia to Portugal,” she said.  

Unsurprisingly, London’s AI boom is also causing a talent war.U.K. AI job postings have skyrocketed in the past few years, per data from PwC. When Anthropic announced it moved into town earlier this year, it listed, for example, a salary range of £260,000 to £630,000 for a machine learning research engineer when the average salary in London for the same role is around £102,000. Some founders in the U.K., like those in Silicon Valley, are being forced to raise more and bigger rounds to keep up. 

“The real test is whether more globally significant AI companies are founded, funded, and scaled from the U.K., while continuing to attract the world’s best talent to build them here,” Zain Ali, founder of the King’s Cross-based AI legal firm Centuro, told me. “If that continues to happen, King’s Cross won’t just be an AI hub. It’ll become one of the U.K.’s most important strategic assets.”
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.#Thisformernotorious #redlight #districtis #nowone #worlds #top #hubs #TechCrunchUK

European Technology Network (ETN) just moved into a glossy new office nearby, while University College London sits around the corner.  

Mixed in with the new developments are trendy food spots like Hoppers and BAO. Hop a train from King’s Cross, and founders can be in Cambridge in 45 minutes to source talent or can be in Paris in two hours to strike a deal.  

Who would have guessed that a little more than 20 years ago, this was one of the seediest areas in London?  

“In the ’80s, crack and heroin made the area a major narcotics market,” Hussein Kanji, an investor at Hoxton Ventures, said, recalling syringes in tree trunks and gangs patrolling the streets. “In 1982, the local church was occupied by the English Collective of Prostitutes for 12 straight days.” Then, in the early 2000s, a real estate developer had a dream and, well, “now it is the AI hotbed of the United Kingdom,” Kanji said. “What a change.” 
 
Around 18 months ago, his portfolio company BioCorteX moved from the neighborhood Holborn to the Jellicoe building in King’s Cross, hoping to be near the action. “Lots going on in London right now,” Nik Sharma, co-founder of BioCorteX, told me. “Lots of hyperscalers moving in.” That includes, reportedly, Jeff Bezos’ AI company Prometheus, which is also said to be in talks to move into the Jellicoe.  

There are around 3,600 AI startups in London, which, together, have raised around $12.1 billion out of the $14.8 billion raised in the city since late July, according to Dealroom. Since the start of June, AI-related startups have leased more than 1 million square feet of office space in London, according to the real estate firm Knight Frank. With that, prime rents in King’s Cross have risen 18% over the past three years, Chris Dunn, a commercial insight associate at the firm, told me. 
 
That percentage represents only the largest leases encompassing at least 10,000 square feet, like the ones OpenAI and Prometheus are signing. The shorter deals go for even more, he said, and now the vacancy rate for conventional office space is just 0.9%. “Demand has outstripped supply,” he continued.  

Today, one of the big topics of the area is sovereignty. It was a wake-up call for many when Anthropic shut off access to Mythos and Fable this summer, leaving some in the ecosystem to conclude: “We’d better look after ourselves,” Saul Klein, co-founder of the VC firm Phoenix Court, told me.  

Phoenix Court is located in the King’s Cross area and has three portfolio companies in the vicinity, including Olix (which just announced a $3.3 billion valuation), Early Health and CoMind. Robin Klein, co-founder of the firm, said the shutdown of Fable and Mythos access was a “small but sharp reminder that Europe can’t simply rent its AI capabilities and capacity; it needs to build and hold some of its own.” King’s Cross, he said, is where much of this building is actually happening.  

“The bigger question,” he continued, “is whether the U.K. builds the infrastructure, compute, energy, capital, to make this self-reliance durable, rather than just hosting outposts of U.S. labs.” 

This former notorious red-light district is now one of the world’s top AI hubs | TechCrunch
What every U.K. AI startup wants to know these days is, how can I get office space in King’s Cross?  

The area is so hot that a VC firm allegedly recently won a deal by promising a founder office space in the neighborhood. “We stop at nothing to win deals [for] and to support” founders, “including helping them source office space when needed,” the firm told me when asked about the rumor, declining to confirm or deny any details. 







The neighborhood’s popularity began back in 2016 when DeepMind — then newly acquired by Google — moved in. Soon after, a flood of AI startups followed, wanting to be around the Google DeepMind magic. Today, they hope to take advantage of the cluster of AI talent there. 

This has transformed King’s Cross into one of the world’s top AI hubs, rivaled only by San Francisco and Beijing. Around London, it’s known by the sobriquet “Knowledge Quarter,” as it’s home to names like OpenAI, Meta, Isomorphic Labs, Cusp AI, Wayne, Recursive, and, a little farther down the road, Synthesia and Anthropic. The European Technology Network (ETN) just moved into a glossy new office nearby, while University College London sits around the corner.  

Mixed in with the new developments are trendy food spots like Hoppers and BAO. Hop a train from King’s Cross, and founders can be in Cambridge in 45 minutes to source talent or can be in Paris in two hours to strike a deal.  

Who would have guessed that a little more than 20 years ago, this was one of the seediest areas in London?  

“In the ’80s, crack and heroin made the area a major narcotics market,” Hussein Kanji, an investor at Hoxton Ventures, said, recalling syringes in tree trunks and gangs patrolling the streets. “In 1982, the local church was occupied by the English Collective of Prostitutes for 12 straight days.” Then, in the early 2000s, a real estate developer had a dream and, well, “now it is the AI hotbed of the United Kingdom,” Kanji said. “What a change.”  Around 18 months ago, his portfolio company BioCorteX moved from the neighborhood Holborn to the Jellicoe building in King’s Cross, hoping to be near the action. “Lots going on in London right now,” Nik Sharma, co-founder of BioCorteX, told me. “Lots of hyperscalers moving in.” That includes, reportedly, Jeff Bezos’ AI company Prometheus, which is also said to be in talks to move into the Jellicoe.  


There are around 3,600 AI startups in London, which, together, have raised around .1 billion out of the .8 billion raised in the city since late July, according to Dealroom. Since the start of June, AI-related startups have leased more than 1 million square feet of office space in London, according to the real estate firm Knight Frank. With that, prime rents in King’s Cross have risen 18% over the past three years, Chris Dunn, a commercial insight associate at the firm, told me.  That percentage represents only the largest leases encompassing at least 10,000 square feet, like the ones OpenAI and Prometheus are signing. The shorter deals go for even more, he said, and now the vacancy rate for conventional office space is just 0.9%. “Demand has outstripped supply,” he continued.  

Today, one of the big topics of the area is sovereignty. It was a wake-up call for many when Anthropic shut off access to Mythos and Fable this summer, leaving some in the ecosystem to conclude: “We’d better look after ourselves,” Saul Klein, co-founder of the VC firm Phoenix Court, told me.  

Phoenix Court is located in the King’s Cross area and has three portfolio companies in the vicinity, including Olix (which just announced a .3 billion valuation), Early Health and CoMind. Robin Klein, co-founder of the firm, said the shutdown of Fable and Mythos access was a “small but sharp reminder that Europe can’t simply rent its AI capabilities and capacity; it needs to build and hold some of its own.” King’s Cross, he said, is where much of this building is actually happening.  







“The bigger question,” he continued, “is whether the U.K. builds the infrastructure, compute, energy, capital, to make this self-reliance durable, rather than just hosting outposts of U.S. labs.” 

Image Credits:Phoenix Court

Top founders want to stay 

Simon Kohl, founder of Latent Labs, has offices in King’s Cross and San Francisco. The London office, at the moment, is growing faster, and he’s more bullish than ever on the ecosystem, he said. “The mood right now feels less like London trying to catch up and more like London becoming one of the default places to start a serious AI company,” he said.  Look around and you are likely to see Wayve testing its autonomous cars. Founded in 2017 by co-founder Alex Kendall, the unicorn is one of London’s biggest success stories.  

“Ten years ago, building a frontier AI company from London felt like an unusual choice,” Kendall told me. “Now it feels like an obvious one.” Wayve moved into King’s Cross in 2018 looking for a space that could double as a garage — “a rare combination in Central London,” Kendall said. He has watched the ecosystem mature around him — and it’s now evident that a startup can stay in London, raise serious capital, hire world-class AI talent, and remain globally competitive, he said.  Down the street from Anthropic’s new 158,000-square-foot office is the AI agent builder Sierra and the AI video platform Synthesia. 

Laura Gonzalez Florez, Synthesia’s chief of staff and head of people, says the company moved into its glossy new office building a year ago to accommodate its growing team. They were drawn to the area for the same reason as everyone else: “It’s very close to the airport … very close to where a lot of investors are,” she said. 

Image Credits:Synthesia

Around two-thirds of Synthesia’s engineers are remote, Gonzalez Florez said, letting the company tap into an affordable, international, and diverse talent pool and helping it scale faster. “From London, we can hire and work, without any problem, people from anywhere, from Slovenia to Portugal,” she said.  

Unsurprisingly, London’s AI boom is also causing a talent war.U.K. AI job postings have skyrocketed in the past few years, per data from PwC. When Anthropic announced it moved into town earlier this year, it listed, for example, a salary range of £260,000 to £630,000 for a machine learning research engineer when the average salary in London for the same role is around £102,000. Some founders in the U.K., like those in Silicon Valley, are being forced to raise more and bigger rounds to keep up. 

“The real test is whether more globally significant AI companies are founded, funded, and scaled from the U.K., while continuing to attract the world’s best talent to build them here,” Zain Ali, founder of the King’s Cross-based AI legal firm Centuro, told me. “If that continues to happen, King’s Cross won’t just be an AI hub. It’ll become one of the U.K.’s most important strategic assets.”
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.#Thisformernotorious #redlight #districtis #nowone #worlds #top #hubs #TechCrunchUK
Image Credits:Phoenix Court

Top founders want to stay

Simon Kohl, founder of Latent Labs, has offices in King’s Cross and San Francisco. The London office, at the moment, is growing faster, and he’s more bullish than ever on the ecosystem, he said. “The mood right now feels less like London trying to catch up and more like London becoming one of the default places to start a serious AI company,” he said. 
 
Look around and you are likely to see Wayve testing its autonomous cars. Founded in 2017 by co-founder Alex Kendall, the unicorn is one of London’s biggest success stories.  

“Ten years ago, building a frontier AI company from London felt like an unusual choice,” Kendall told me. “Now it feels like an obvious one.” Wayve moved into King’s Cross in 2018 looking for a space that could double as a garage — “a rare combination in Central London,” Kendall said. He has watched the ecosystem mature around him — and it’s now evident that a startup can stay in London, raise serious capital, hire world-class AI talent, and remain globally competitive, he said. 
 
Down the street from Anthropic’s new 158,000-square-foot office is the AI agent builder Sierra and the AI video platform Synthesia. 

Laura Gonzalez Florez, Synthesia’s chief of staff and head of people, says the company moved into its glossy new office building a year ago to accommodate its growing team. They were drawn to the area for the same reason as everyone else: “It’s very close to the airport … very close to where a lot of investors are,” she said. 

Image Credits:Synthesia

Around two-thirds of Synthesia’s engineers are remote, Gonzalez Florez said, letting the company tap into an affordable, international, and diverse talent pool and helping it scale faster. “From London, we can hire and work, without any problem, people from anywhere, from Slovenia to Portugal,” she said.  

Unsurprisingly, London’s AI boom is also causing a talent war.

U.K. AI job postings have skyrocketed in the past few years, per data from PwC. When Anthropic announced it moved into town earlier this year, it listed, for example, a salary range of £260,000 to £630,000 for a machine learning research engineer when the average salary in London for the same role is around £102,000. Some founders in the U.K., like those in Silicon Valley, are being forced to raise more and bigger rounds to keep up. 

“The real test is whether more globally significant AI companies are founded, funded, and scaled from the U.K., while continuing to attract the world’s best talent to build them here,” Zain Ali, founder of the King’s Cross-based AI legal firm Centuro, told me. “If that continues to happen, King’s Cross won’t just be an AI hub. It’ll become one of the U.K.’s most important strategic assets.”

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

#Thisformernotorious #redlight #districtis #nowone #worlds #top #hubs #TechCrunchUK">This former notorious red-light district is now one of the world’s top AI hubs | TechCrunch

What every U.K. AI startup wants to know these days is, how can I get office space in King’s Cross?  

The area is so hot that a VC firm allegedly recently won a deal by promising a founder office space in the neighborhood. “We stop at nothing to win deals [for] and to support” founders, “including helping them source office space when needed,” the firm told me when asked about the rumor, declining to confirm or deny any details. 

The neighborhood’s popularity began back in 2016 when DeepMind — then newly acquired by Google — moved in. Soon after, a flood of AI startups followed, wanting to be around the Google DeepMind magic. Today, they hope to take advantage of the cluster of AI talent there. 

This has transformed King’s Cross into one of the world’s top AI hubs, rivaled only by San Francisco and Beijing. Around London, it’s known by the sobriquet “Knowledge Quarter,” as it’s home to names like OpenAI, Meta, Isomorphic Labs, Cusp AI, Wayne, Recursive, and, a little farther down the road, Synthesia and Anthropic. The European Technology Network (ETN) just moved into a glossy new office nearby, while University College London sits around the corner.  

Mixed in with the new developments are trendy food spots like Hoppers and BAO. Hop a train from King’s Cross, and founders can be in Cambridge in 45 minutes to source talent or can be in Paris in two hours to strike a deal.  

Who would have guessed that a little more than 20 years ago, this was one of the seediest areas in London?  

“In the ’80s, crack and heroin made the area a major narcotics market,” Hussein Kanji, an investor at Hoxton Ventures, said, recalling syringes in tree trunks and gangs patrolling the streets. “In 1982, the local church was occupied by the English Collective of Prostitutes for 12 straight days.” Then, in the early 2000s, a real estate developer had a dream and, well, “now it is the AI hotbed of the United Kingdom,” Kanji said. “What a change.” 
 
Around 18 months ago, his portfolio company BioCorteX moved from the neighborhood Holborn to the Jellicoe building in King’s Cross, hoping to be near the action. “Lots going on in London right now,” Nik Sharma, co-founder of BioCorteX, told me. “Lots of hyperscalers moving in.” That includes, reportedly, Jeff Bezos’ AI company Prometheus, which is also said to be in talks to move into the Jellicoe.  

There are around 3,600 AI startups in London, which, together, have raised around $12.1 billion out of the $14.8 billion raised in the city since late July, according to Dealroom. Since the start of June, AI-related startups have leased more than 1 million square feet of office space in London, according to the real estate firm Knight Frank. With that, prime rents in King’s Cross have risen 18% over the past three years, Chris Dunn, a commercial insight associate at the firm, told me. 
 
That percentage represents only the largest leases encompassing at least 10,000 square feet, like the ones OpenAI and Prometheus are signing. The shorter deals go for even more, he said, and now the vacancy rate for conventional office space is just 0.9%. “Demand has outstripped supply,” he continued.  

Today, one of the big topics of the area is sovereignty. It was a wake-up call for many when Anthropic shut off access to Mythos and Fable this summer, leaving some in the ecosystem to conclude: “We’d better look after ourselves,” Saul Klein, co-founder of the VC firm Phoenix Court, told me.  

Phoenix Court is located in the King’s Cross area and has three portfolio companies in the vicinity, including Olix (which just announced a $3.3 billion valuation), Early Health and CoMind. Robin Klein, co-founder of the firm, said the shutdown of Fable and Mythos access was a “small but sharp reminder that Europe can’t simply rent its AI capabilities and capacity; it needs to build and hold some of its own.” King’s Cross, he said, is where much of this building is actually happening.  

“The bigger question,” he continued, “is whether the U.K. builds the infrastructure, compute, energy, capital, to make this self-reliance durable, rather than just hosting outposts of U.S. labs.” 

This former notorious red-light district is now one of the world’s top AI hubs | TechCrunch
What every U.K. AI startup wants to know these days is, how can I get office space in King’s Cross?  

The area is so hot that a VC firm allegedly recently won a deal by promising a founder office space in the neighborhood. “We stop at nothing to win deals [for] and to support” founders, “including helping them source office space when needed,” the firm told me when asked about the rumor, declining to confirm or deny any details. 







The neighborhood’s popularity began back in 2016 when DeepMind — then newly acquired by Google — moved in. Soon after, a flood of AI startups followed, wanting to be around the Google DeepMind magic. Today, they hope to take advantage of the cluster of AI talent there. 

This has transformed King’s Cross into one of the world’s top AI hubs, rivaled only by San Francisco and Beijing. Around London, it’s known by the sobriquet “Knowledge Quarter,” as it’s home to names like OpenAI, Meta, Isomorphic Labs, Cusp AI, Wayne, Recursive, and, a little farther down the road, Synthesia and Anthropic. The European Technology Network (ETN) just moved into a glossy new office nearby, while University College London sits around the corner.  

Mixed in with the new developments are trendy food spots like Hoppers and BAO. Hop a train from King’s Cross, and founders can be in Cambridge in 45 minutes to source talent or can be in Paris in two hours to strike a deal.  

Who would have guessed that a little more than 20 years ago, this was one of the seediest areas in London?  

“In the ’80s, crack and heroin made the area a major narcotics market,” Hussein Kanji, an investor at Hoxton Ventures, said, recalling syringes in tree trunks and gangs patrolling the streets. “In 1982, the local church was occupied by the English Collective of Prostitutes for 12 straight days.” Then, in the early 2000s, a real estate developer had a dream and, well, “now it is the AI hotbed of the United Kingdom,” Kanji said. “What a change.”  Around 18 months ago, his portfolio company BioCorteX moved from the neighborhood Holborn to the Jellicoe building in King’s Cross, hoping to be near the action. “Lots going on in London right now,” Nik Sharma, co-founder of BioCorteX, told me. “Lots of hyperscalers moving in.” That includes, reportedly, Jeff Bezos’ AI company Prometheus, which is also said to be in talks to move into the Jellicoe.  


There are around 3,600 AI startups in London, which, together, have raised around .1 billion out of the .8 billion raised in the city since late July, according to Dealroom. Since the start of June, AI-related startups have leased more than 1 million square feet of office space in London, according to the real estate firm Knight Frank. With that, prime rents in King’s Cross have risen 18% over the past three years, Chris Dunn, a commercial insight associate at the firm, told me.  That percentage represents only the largest leases encompassing at least 10,000 square feet, like the ones OpenAI and Prometheus are signing. The shorter deals go for even more, he said, and now the vacancy rate for conventional office space is just 0.9%. “Demand has outstripped supply,” he continued.  

Today, one of the big topics of the area is sovereignty. It was a wake-up call for many when Anthropic shut off access to Mythos and Fable this summer, leaving some in the ecosystem to conclude: “We’d better look after ourselves,” Saul Klein, co-founder of the VC firm Phoenix Court, told me.  

Phoenix Court is located in the King’s Cross area and has three portfolio companies in the vicinity, including Olix (which just announced a .3 billion valuation), Early Health and CoMind. Robin Klein, co-founder of the firm, said the shutdown of Fable and Mythos access was a “small but sharp reminder that Europe can’t simply rent its AI capabilities and capacity; it needs to build and hold some of its own.” King’s Cross, he said, is where much of this building is actually happening.  







“The bigger question,” he continued, “is whether the U.K. builds the infrastructure, compute, energy, capital, to make this self-reliance durable, rather than just hosting outposts of U.S. labs.” 

Image Credits:Phoenix Court

Top founders want to stay 

Simon Kohl, founder of Latent Labs, has offices in King’s Cross and San Francisco. The London office, at the moment, is growing faster, and he’s more bullish than ever on the ecosystem, he said. “The mood right now feels less like London trying to catch up and more like London becoming one of the default places to start a serious AI company,” he said.  Look around and you are likely to see Wayve testing its autonomous cars. Founded in 2017 by co-founder Alex Kendall, the unicorn is one of London’s biggest success stories.  

“Ten years ago, building a frontier AI company from London felt like an unusual choice,” Kendall told me. “Now it feels like an obvious one.” Wayve moved into King’s Cross in 2018 looking for a space that could double as a garage — “a rare combination in Central London,” Kendall said. He has watched the ecosystem mature around him — and it’s now evident that a startup can stay in London, raise serious capital, hire world-class AI talent, and remain globally competitive, he said.  Down the street from Anthropic’s new 158,000-square-foot office is the AI agent builder Sierra and the AI video platform Synthesia. 

Laura Gonzalez Florez, Synthesia’s chief of staff and head of people, says the company moved into its glossy new office building a year ago to accommodate its growing team. They were drawn to the area for the same reason as everyone else: “It’s very close to the airport … very close to where a lot of investors are,” she said. 

Image Credits:Synthesia

Around two-thirds of Synthesia’s engineers are remote, Gonzalez Florez said, letting the company tap into an affordable, international, and diverse talent pool and helping it scale faster. “From London, we can hire and work, without any problem, people from anywhere, from Slovenia to Portugal,” she said.  

Unsurprisingly, London’s AI boom is also causing a talent war.U.K. AI job postings have skyrocketed in the past few years, per data from PwC. When Anthropic announced it moved into town earlier this year, it listed, for example, a salary range of £260,000 to £630,000 for a machine learning research engineer when the average salary in London for the same role is around £102,000. Some founders in the U.K., like those in Silicon Valley, are being forced to raise more and bigger rounds to keep up. 

“The real test is whether more globally significant AI companies are founded, funded, and scaled from the U.K., while continuing to attract the world’s best talent to build them here,” Zain Ali, founder of the King’s Cross-based AI legal firm Centuro, told me. “If that continues to happen, King’s Cross won’t just be an AI hub. It’ll become one of the U.K.’s most important strategic assets.”
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.#Thisformernotorious #redlight #districtis #nowone #worlds #top #hubs #TechCrunchUK
Image Credits:Phoenix Court

Top founders want to stay

Simon Kohl, founder of Latent Labs, has offices in King’s Cross and San Francisco. The London office, at the moment, is growing faster, and he’s more bullish than ever on the ecosystem, he said. “The mood right now feels less like London trying to catch up and more like London becoming one of the default places to start a serious AI company,” he said. 
 
Look around and you are likely to see Wayve testing its autonomous cars. Founded in 2017 by co-founder Alex Kendall, the unicorn is one of London’s biggest success stories.  

“Ten years ago, building a frontier AI company from London felt like an unusual choice,” Kendall told me. “Now it feels like an obvious one.” Wayve moved into King’s Cross in 2018 looking for a space that could double as a garage — “a rare combination in Central London,” Kendall said. He has watched the ecosystem mature around him — and it’s now evident that a startup can stay in London, raise serious capital, hire world-class AI talent, and remain globally competitive, he said. 
 
Down the street from Anthropic’s new 158,000-square-foot office is the AI agent builder Sierra and the AI video platform Synthesia. 

Laura Gonzalez Florez, Synthesia’s chief of staff and head of people, says the company moved into its glossy new office building a year ago to accommodate its growing team. They were drawn to the area for the same reason as everyone else: “It’s very close to the airport … very close to where a lot of investors are,” she said. 

Image Credits:Synthesia

Around two-thirds of Synthesia’s engineers are remote, Gonzalez Florez said, letting the company tap into an affordable, international, and diverse talent pool and helping it scale faster. “From London, we can hire and work, without any problem, people from anywhere, from Slovenia to Portugal,” she said.  

Unsurprisingly, London’s AI boom is also causing a talent war.

U.K. AI job postings have skyrocketed in the past few years, per data from PwC. When Anthropic announced it moved into town earlier this year, it listed, for example, a salary range of £260,000 to £630,000 for a machine learning research engineer when the average salary in London for the same role is around £102,000. Some founders in the U.K., like those in Silicon Valley, are being forced to raise more and bigger rounds to keep up. 

“The real test is whether more globally significant AI companies are founded, funded, and scaled from the U.K., while continuing to attract the world’s best talent to build them here,” Zain Ali, founder of the King’s Cross-based AI legal firm Centuro, told me. “If that continues to happen, King’s Cross won’t just be an AI hub. It’ll become one of the U.K.’s most important strategic assets.”

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

#Thisformernotorious #redlight #districtis #nowone #worlds #top #hubs #TechCrunchUK
Why Remote Server Access Is a Common Attack Vector

Every cloud server exposes at least one remote access point – usually SSH on port 22 – and that port is scanned constantly by bots looking for weak credentials. Password-based login is the most common way a system can be attacked by brute force, and it is quite common with a standard setup that the system is left in a state where an admin/user of that system – “root user” – can log in directly by guessing the user ID and the password combination. Add in shared team credentials, forgotten firewall rules from old projects, and staging servers left publicly reachable, and it’s clear why misconfigured remote access – not zero-day exploits – is behind most cloud server compromises. The fix is simple, though you’ll need to do some setup yourself instead of trusting the default setting.

How to lock down SSH access in the right way

The best way to secure remote access is through a series of small improvements rather than one major overhaul. The following is a real working method:

  1. Switch to SSH key authentication, then turn off password login completely in the same location: sshd_config. Keys are far harder to brute-force than passwords.
  2. Disable root login over SSH and require a non-root user with sudo privileges instead; this is a security advantage that even without any change, one key compromising would limit the impact.
  3. Change the default SSH port away from 22 to cut down on automated scanning noise (not a security measure on its own, but it reduces log clutter).
  4. Restrict access by IP using your firewall or security group, allowing SSH only from known office or VPN IP ranges rather than the entire internet.
  5. Add a VPN as a connection layer for anyone accessing servers from outside a trusted network – a VPN like Planet VPN’s free VPN service can encrypt the connection between a remote worker’s laptop and the server before SSH traffic ever leaves their device, which matters especially on public wi-fi or shared networks.

Every step you take closes the doors that the attacker may open slightly, and when you combine everything, you would have a door to a series of locked gates.

Why Do I Need a Bastion Host?

When it comes to teams working with many servers, deploying a bastion host (jump box) may be a clean and effective way to solve the long-term problem. With this method, you only expose SSH to the bastion, and the other servers accept it only when it’s from the bastion’s internal IP. This centralizes logging and makes auditing access far simpler.

Using a virtual private network (VPN) and a bastion host together is perfectly fine – and many solutions use both: a safe way to access the private network via a VPN, followed by use of a bastion host to restrict which servers can be accessed. Some teams may decide to forgo the bastion because they don’t have the manpower to manage one, and so use a combination of a VPN and a set of firewall rules that still quite a bit lowers the exposure, but without the extra effort.

Mistakes Leading to Leaving Cloud Servers Open

The Mistakes That Cause Leaving Cloud Servers Open: Even the safest development teams may have slip-ups from time to time. One of the most frequent is leaving staged, or test servers with relaxed firewall rules equivalent to those of the production environment – hackers don’t concern themselves with which environment they first land on. Another frequent error is reusing the same SSH key on several servers and clients, causing one hacked laptop to compromise all servers that key has access to.

Another common human error is not removing or changing access when someone leaves the team, so stale credentials remain valid and accessible. At last, putting trust in the strategy of “security through obscurity” – meaning one thinks that setting up the unusual port or hiding the hostname from the public is actually sufficient security – creates a wrong impression of security. This is mostly true; in reality, modern-day attackers scan all ports anyway, and there is no way to hide from them.

System Administrators Guide to Secure Remote Access 

Prohibit SSH password logins totally and depend exclusively on key-based authentication

  • Surely no one wants to type in the password every time; because of this, use only key-based authentication 
  • Deter the user from logging in as root by default and instead use the sudo command to do root tasks
  • A firewall or security group rule can provide great help with IP address-based restrictions on SSH logins 
  • For access that comes from untrusted sources or external networks, use a secure tunnel like a vpn or bastion host
  • Periodically change SSH keys and inspect access lists
  • Maintain records of login attempts and detect brute-force attacks as quickly as possible

Frequently Asked Questions

What is the principal means by which cloud servers suffer break-ins through remote access?

By far the biggest reason why this can happen is unauthorized password-based SSH logins that have been cracked by brute force. The scenario is most likely to develop where the administrator allows root login via password and leaves the default port open.

Sufficient security measures for the server via SSH keys: Do you think it is safe to rely only on key authentication? 

It is true that SSH keys drastically decrease the danger of a successful brute-force attack. However, if there is only key authentication on the server, there are still risks – the server administrator can always enable root login or disable the IP-based login restrictions. So it is recommended to always have these three in the server configuration: disabled root login, restricted access to known IPs, and rotating the keys regularly as the main components of meaningful protection. 

Is it really necessary to set up a separate VPN network while I am able to connect via SSH keys? 

A VPN gives extra security by first encrypting your computer traffic before it reaches your network, where the SSH connection will be used. This is mostly important when working on untrusted networks – like public wi-fi – where there is a threat of a potential hacker in your local network looking at your data.

Bastion host vs VPN as methods of accessing the server? 

The bastion host works by funneling SSH sessions from many users through a single, carefully monitored server point while the rest of the network (and mostly the servers) remains protected from the internet. At the same time, a vpn will fully encrypt the communication between the user and the corporate network or servers. The combination is very common among larger security teams as a part of the defense-in-depth principle. 

How often should SSH keys be rotated? 

The ideal period to change your SSH keys depends on the security practices of your organization, but generally a good practice is to change SSH keys between 90 and 180 days, or in the case that the user who had access with the key leaves or is no longer able to be contacted, such as when a team member leaves.

Why is only changing the port number for SSH enough to secure that port?

Changing the port reduces automated scanning noise in your logs but isn’t a real security control on its own — port scanners check all ports, so it should never replace key-based auth and firewall rules.

#Secure #Remote #Access #Cloud #ServerCloud,remote access">How to Secure Remote Access to Your Cloud Server in 2026
	
Protection against unauthorized remote logins to your cloud server is a matter of SSH key-based authentication, a strict security policy on the firewall, two-factor authentication, and a secure communication channel – no individual component will give adequate protection by itself. The major risk point in breaches is not the server but the open door to remote login. To patch that vulnerability, you need a series of countermeasures, not a magical setting.





Why Remote Server Access Is a Common Attack Vector



Every cloud server exposes at least one remote access point – usually SSH on port 22 – and that port is scanned constantly by bots looking for weak credentials. Password-based login is the most common way a system can be attacked by brute force, and it is quite common with a standard setup that the system is left in a state where an admin/user of that system – “root user” – can log in directly by guessing the user ID and the password combination. Add in shared team credentials, forgotten firewall rules from old projects, and staging servers left publicly reachable, and it’s clear why misconfigured remote access – not zero-day exploits – is behind most cloud server compromises. The fix is simple, though you’ll need to do some setup yourself instead of trusting the default setting.



How to lock down SSH access in the right way



The best way to secure remote access is through a series of small improvements rather than one major overhaul. The following is a real working method:




Switch to SSH key authentication, then turn off password login completely in the same location: sshd_config. Keys are far harder to brute-force than passwords.



Disable root login over SSH and require a non-root user with sudo privileges instead; this is a security advantage that even without any change, one key compromising would limit the impact.



Change the default SSH port away from 22 to cut down on automated scanning noise (not a security measure on its own, but it reduces log clutter).



Restrict access by IP using your firewall or security group, allowing SSH only from known office or VPN IP ranges rather than the entire internet.



Add a VPN as a connection layer for anyone accessing servers from outside a trusted network – a VPN like Planet VPN’s free VPN service can encrypt the connection between a remote worker’s laptop and the server before SSH traffic ever leaves their device, which matters especially on public wi-fi or shared networks.




Every step you take closes the doors that the attacker may open slightly, and when you combine everything, you would have a door to a series of locked gates.



Why Do I Need a Bastion Host?



When it comes to teams working with many servers, deploying a bastion host (jump box) may be a clean and effective way to solve the long-term problem. With this method, you only expose SSH to the bastion, and the other servers accept it only when it’s from the bastion’s internal IP. This centralizes logging and makes auditing access far simpler.



Using a virtual private network (VPN) and a bastion host together is perfectly fine – and many solutions use both: a safe way to access the private network via a VPN, followed by use of a bastion host to restrict which servers can be accessed. Some teams may decide to forgo the bastion because they don’t have the manpower to manage one, and so use a combination of a VPN and a set of firewall rules that still quite a bit lowers the exposure, but without the extra effort.



Mistakes Leading to Leaving Cloud Servers Open



The Mistakes That Cause Leaving Cloud Servers Open: Even the safest development teams may have slip-ups from time to time. One of the most frequent is leaving staged, or test servers with relaxed firewall rules equivalent to those of the production environment – hackers don’t concern themselves with which environment they first land on. Another frequent error is reusing the same SSH key on several servers and clients, causing one hacked laptop to compromise all servers that key has access to.



Another common human error is not removing or changing access when someone leaves the team, so stale credentials remain valid and accessible. At last, putting trust in the strategy of “security through obscurity” – meaning one thinks that setting up the unusual port or hiding the hostname from the public is actually sufficient security – creates a wrong impression of security. This is mostly true; in reality, modern-day attackers scan all ports anyway, and there is no way to hide from them.



System Administrators Guide to Secure Remote Access 



Prohibit SSH password logins totally and depend exclusively on key-based authentication




Surely no one wants to type in the password every time; because of this, use only key-based authentication 



Deter the user from logging in as root by default and instead use the sudo command to do root tasks



A firewall or security group rule can provide great help with IP address-based restrictions on SSH logins 



For access that comes from untrusted sources or external networks, use a secure tunnel like a vpn or bastion host



Periodically change SSH keys and inspect access lists



Maintain records of login attempts and detect brute-force attacks as quickly as possible




Frequently Asked Questions



What is the principal means by which cloud servers suffer break-ins through remote access? By far the biggest reason why this can happen is unauthorized password-based SSH logins that have been cracked by brute force. The scenario is most likely to develop where the administrator allows root login via password and leaves the default port open.  Sufficient security measures for the server via SSH keys: Do you think it is safe to rely only on key authentication?  It is true that SSH keys drastically decrease the danger of a successful brute-force attack. However, if there is only key authentication on the server, there are still risks – the server administrator can always enable root login or disable the IP-based login restrictions. So it is recommended to always have these three in the server configuration: disabled root login, restricted access to known IPs, and rotating the keys regularly as the main components of meaningful protection.   Is it really necessary to set up a separate VPN network while I am able to connect via SSH keys?  A VPN gives extra security by first encrypting your computer traffic before it reaches your network, where the SSH connection will be used. This is mostly important when working on untrusted networks – like public wi-fi – where there is a threat of a potential hacker in your local network looking at your data.  Bastion host vs VPN as methods of accessing the server?  The bastion host works by funneling SSH sessions from many users through a single, carefully monitored server point while the rest of the network (and mostly the servers) remains protected from the internet. At the same time, a vpn will fully encrypt the communication between the user and the corporate network or servers. The combination is very common among larger security teams as a part of the defense-in-depth principle.   How often should SSH keys be rotated?  The ideal period to change your SSH keys depends on the security practices of your organization, but generally a good practice is to change SSH keys between 90 and 180 days, or in the case that the user who had access with the key leaves or is no longer able to be contacted, such as when a team member leaves.  Why is only changing the port number for SSH enough to secure that port? Changing the port reduces automated scanning noise in your logs but isn’t a real security control on its own — port scanners check all ports, so it should never replace key-based auth and firewall rules.  





#Secure #Remote #Access #Cloud #ServerCloud,remote access

  1. free VPN service can encrypt the connection between a remote worker’s laptop and the server before SSH traffic ever leaves their device, which matters especially on public wi-fi or shared networks.

Every step you take closes the doors that the attacker may open slightly, and when you combine everything, you would have a door to a series of locked gates.

Why Do I Need a Bastion Host?

When it comes to teams working with many servers, deploying a bastion host (jump box) may be a clean and effective way to solve the long-term problem. With this method, you only expose SSH to the bastion, and the other servers accept it only when it’s from the bastion’s internal IP. This centralizes logging and makes auditing access far simpler.

Using a virtual private network (VPN) and a bastion host together is perfectly fine – and many solutions use both: a safe way to access the private network via a VPN, followed by use of a bastion host to restrict which servers can be accessed. Some teams may decide to forgo the bastion because they don’t have the manpower to manage one, and so use a combination of a VPN and a set of firewall rules that still quite a bit lowers the exposure, but without the extra effort.

Mistakes Leading to Leaving Cloud Servers Open

The Mistakes That Cause Leaving Cloud Servers Open: Even the safest development teams may have slip-ups from time to time. One of the most frequent is leaving staged, or test servers with relaxed firewall rules equivalent to those of the production environment – hackers don’t concern themselves with which environment they first land on. Another frequent error is reusing the same SSH key on several servers and clients, causing one hacked laptop to compromise all servers that key has access to.

Another common human error is not removing or changing access when someone leaves the team, so stale credentials remain valid and accessible. At last, putting trust in the strategy of “security through obscurity” – meaning one thinks that setting up the unusual port or hiding the hostname from the public is actually sufficient security – creates a wrong impression of security. This is mostly true; in reality, modern-day attackers scan all ports anyway, and there is no way to hide from them.

System Administrators Guide to Secure Remote Access 

Prohibit SSH password logins totally and depend exclusively on key-based authentication

  • Surely no one wants to type in the password every time; because of this, use only key-based authentication 
  • Deter the user from logging in as root by default and instead use the sudo command to do root tasks
  • A firewall or security group rule can provide great help with IP address-based restrictions on SSH logins 
  • For access that comes from untrusted sources or external networks, use a secure tunnel like a vpn or bastion host
  • Periodically change SSH keys and inspect access lists
  • Maintain records of login attempts and detect brute-force attacks as quickly as possible

Frequently Asked Questions

What is the principal means by which cloud servers suffer break-ins through remote access?

By far the biggest reason why this can happen is unauthorized password-based SSH logins that have been cracked by brute force. The scenario is most likely to develop where the administrator allows root login via password and leaves the default port open.

Sufficient security measures for the server via SSH keys: Do you think it is safe to rely only on key authentication? 

It is true that SSH keys drastically decrease the danger of a successful brute-force attack. However, if there is only key authentication on the server, there are still risks – the server administrator can always enable root login or disable the IP-based login restrictions. So it is recommended to always have these three in the server configuration: disabled root login, restricted access to known IPs, and rotating the keys regularly as the main components of meaningful protection. 

Is it really necessary to set up a separate VPN network while I am able to connect via SSH keys? 

A VPN gives extra security by first encrypting your computer traffic before it reaches your network, where the SSH connection will be used. This is mostly important when working on untrusted networks – like public wi-fi – where there is a threat of a potential hacker in your local network looking at your data.

Bastion host vs VPN as methods of accessing the server? 

The bastion host works by funneling SSH sessions from many users through a single, carefully monitored server point while the rest of the network (and mostly the servers) remains protected from the internet. At the same time, a vpn will fully encrypt the communication between the user and the corporate network or servers. The combination is very common among larger security teams as a part of the defense-in-depth principle. 

How often should SSH keys be rotated? 

The ideal period to change your SSH keys depends on the security practices of your organization, but generally a good practice is to change SSH keys between 90 and 180 days, or in the case that the user who had access with the key leaves or is no longer able to be contacted, such as when a team member leaves.

Why is only changing the port number for SSH enough to secure that port?

Changing the port reduces automated scanning noise in your logs but isn’t a real security control on its own — port scanners check all ports, so it should never replace key-based auth and firewall rules.

#Secure #Remote #Access #Cloud #ServerCloud,remote access">How to Secure Remote Access to Your Cloud Server in 2026

Protection against unauthorized remote logins to your cloud server is a matter of SSH key-based authentication, a strict security policy on the firewall, two-factor authentication, and a secure communication channel – no individual component will give adequate protection by itself. The major risk point in breaches is not the server but the open door to remote login. To patch that vulnerability, you need a series of countermeasures, not a magical setting.

Why Remote Server Access Is a Common Attack Vector

Every cloud server exposes at least one remote access point – usually SSH on port 22 – and that port is scanned constantly by bots looking for weak credentials. Password-based login is the most common way a system can be attacked by brute force, and it is quite common with a standard setup that the system is left in a state where an admin/user of that system – “root user” – can log in directly by guessing the user ID and the password combination. Add in shared team credentials, forgotten firewall rules from old projects, and staging servers left publicly reachable, and it’s clear why misconfigured remote access – not zero-day exploits – is behind most cloud server compromises. The fix is simple, though you’ll need to do some setup yourself instead of trusting the default setting.

How to lock down SSH access in the right way

The best way to secure remote access is through a series of small improvements rather than one major overhaul. The following is a real working method:

  1. Switch to SSH key authentication, then turn off password login completely in the same location: sshd_config. Keys are far harder to brute-force than passwords.
  2. Disable root login over SSH and require a non-root user with sudo privileges instead; this is a security advantage that even without any change, one key compromising would limit the impact.
  3. Change the default SSH port away from 22 to cut down on automated scanning noise (not a security measure on its own, but it reduces log clutter).
  4. Restrict access by IP using your firewall or security group, allowing SSH only from known office or VPN IP ranges rather than the entire internet.
  5. Add a VPN as a connection layer for anyone accessing servers from outside a trusted network – a VPN like Planet VPN’s free VPN service can encrypt the connection between a remote worker’s laptop and the server before SSH traffic ever leaves their device, which matters especially on public wi-fi or shared networks.

Every step you take closes the doors that the attacker may open slightly, and when you combine everything, you would have a door to a series of locked gates.

Why Do I Need a Bastion Host?

When it comes to teams working with many servers, deploying a bastion host (jump box) may be a clean and effective way to solve the long-term problem. With this method, you only expose SSH to the bastion, and the other servers accept it only when it’s from the bastion’s internal IP. This centralizes logging and makes auditing access far simpler.

Using a virtual private network (VPN) and a bastion host together is perfectly fine – and many solutions use both: a safe way to access the private network via a VPN, followed by use of a bastion host to restrict which servers can be accessed. Some teams may decide to forgo the bastion because they don’t have the manpower to manage one, and so use a combination of a VPN and a set of firewall rules that still quite a bit lowers the exposure, but without the extra effort.

Mistakes Leading to Leaving Cloud Servers Open

The Mistakes That Cause Leaving Cloud Servers Open: Even the safest development teams may have slip-ups from time to time. One of the most frequent is leaving staged, or test servers with relaxed firewall rules equivalent to those of the production environment – hackers don’t concern themselves with which environment they first land on. Another frequent error is reusing the same SSH key on several servers and clients, causing one hacked laptop to compromise all servers that key has access to.

Another common human error is not removing or changing access when someone leaves the team, so stale credentials remain valid and accessible. At last, putting trust in the strategy of “security through obscurity” – meaning one thinks that setting up the unusual port or hiding the hostname from the public is actually sufficient security – creates a wrong impression of security. This is mostly true; in reality, modern-day attackers scan all ports anyway, and there is no way to hide from them.

System Administrators Guide to Secure Remote Access 

Prohibit SSH password logins totally and depend exclusively on key-based authentication

  • Surely no one wants to type in the password every time; because of this, use only key-based authentication 
  • Deter the user from logging in as root by default and instead use the sudo command to do root tasks
  • A firewall or security group rule can provide great help with IP address-based restrictions on SSH logins 
  • For access that comes from untrusted sources or external networks, use a secure tunnel like a vpn or bastion host
  • Periodically change SSH keys and inspect access lists
  • Maintain records of login attempts and detect brute-force attacks as quickly as possible

Frequently Asked Questions

What is the principal means by which cloud servers suffer break-ins through remote access?

By far the biggest reason why this can happen is unauthorized password-based SSH logins that have been cracked by brute force. The scenario is most likely to develop where the administrator allows root login via password and leaves the default port open.

Sufficient security measures for the server via SSH keys: Do you think it is safe to rely only on key authentication? 

It is true that SSH keys drastically decrease the danger of a successful brute-force attack. However, if there is only key authentication on the server, there are still risks – the server administrator can always enable root login or disable the IP-based login restrictions. So it is recommended to always have these three in the server configuration: disabled root login, restricted access to known IPs, and rotating the keys regularly as the main components of meaningful protection. 

Is it really necessary to set up a separate VPN network while I am able to connect via SSH keys? 

A VPN gives extra security by first encrypting your computer traffic before it reaches your network, where the SSH connection will be used. This is mostly important when working on untrusted networks – like public wi-fi – where there is a threat of a potential hacker in your local network looking at your data.

Bastion host vs VPN as methods of accessing the server? 

The bastion host works by funneling SSH sessions from many users through a single, carefully monitored server point while the rest of the network (and mostly the servers) remains protected from the internet. At the same time, a vpn will fully encrypt the communication between the user and the corporate network or servers. The combination is very common among larger security teams as a part of the defense-in-depth principle. 

How often should SSH keys be rotated? 

The ideal period to change your SSH keys depends on the security practices of your organization, but generally a good practice is to change SSH keys between 90 and 180 days, or in the case that the user who had access with the key leaves or is no longer able to be contacted, such as when a team member leaves.

Why is only changing the port number for SSH enough to secure that port?

Changing the port reduces automated scanning noise in your logs but isn’t a real security control on its own — port scanners check all ports, so it should never replace key-based auth and firewall rules.

#Secure #Remote #Access #Cloud #ServerCloud,remote access

Post Comment