A cyberattack targeting refrigeration systems at French supermarkets caused food losses and disruptions, according to ACHR News coverage of the refrigeration attack. The incident involved commercial equipment, but it raises a useful residential question: When a thermostat, heat pump controller, zoning panel, or service portal is connected, who can actually log in?
For a homeowner, the answer may include more people and systems than expected. There can be a thermostat account, a manufacturer account, a utility program, an installing contractor, a monitoring service, and several household phones. The goal is not to treat every connected control as a threat. It is to document the access path before a failed login, equipment replacement, or ownership change turns into a service problem.
Start with the equipment, not the apps
Walk the mechanical spaces and record the make, model, and serial number of every device with network capability. Check the thermostat, indoor unit, outdoor unit, zoning controls, ventilation equipment, humidifier controls, and any gateway mounted near the air handler. A Wi-Fi symbol or Ethernet cable is an obvious clue, but some accessories communicate through a separate hub.
Photograph the equipment labels and the overall installation. Do not photograph passwords, recovery codes, or QR setup labels into a general home album that is shared with other people. Store those credentials separately.
Then list every app associated with the system. Open each one and note the account email, the named home, the equipment shown, and the users who have access. If an old phone, former resident, previous contractor, or unused family account still appears, determine whether it can be removed without disrupting service.
Ask who owns the primary account
The person who receives alerts is not necessarily the account owner. During installation, a technician may create an account on the homeowner's behalf or send an invitation from a contractor portal. That can work smoothly until the homeowner changes email addresses, hires another company, or sells the house.
Ask the installer these questions before commissioning:
- Which email address will own the equipment account?
- Can the homeowner add and remove users without contractor assistance?
- Does the contractor have permanent access, temporary access, or no remote access?
- Can remote access change operating settings, or can it only display status?
- What functions remain available at the wall control if the internet connection fails?
- How is the equipment transferred to a new owner?
Write the answers into the equipment file. A verbal explanation at startup is easy to forget two heating seasons later.
Separate the equipment network where practical
Connected HVAC devices do not need to share credentials with every laptop, television, camera, and guest phone in the house. Many routers support a guest network or a separate network for connected devices. Whether that arrangement is appropriate depends on the router and on how the HVAC equipment communicates with local phones, hubs, and manufacturer services.
Before moving anything, confirm the setup procedure and make sure someone has the current account credentials. Changing the Wi-Fi name or password can disconnect thermostats, gateways, leak detectors, and water equipment at the same time. Include connected plumbing controls in the inventory, especially if equipment from a water treatment shop like Jones Air & Water uses an app, gateway, or remote alert service.
This is configuration work, not a reason to open energized HVAC or electrical enclosures. Network settings can usually be checked from the router, app, or user interface. Equipment wiring and control-board changes belong in the service scope.
Build a clean handoff after service
When a contractor replaces a thermostat, control board, gateway, or complete system, make account cleanup part of the closeout. Confirm that the removed device no longer appears online, the new device is registered to the correct owner, and alerts reach the intended phone or email. Change any password that was shared temporarily for setup.
Keep a one-page record with the equipment list, account owner, approved users, router network, installer contact, and transfer procedure. Do not put the passwords themselves on that sheet. Note where the credentials and recovery codes are stored.
The practical lesson from the refrigeration story is not that homeowners should disconnect useful controls. It is that connected mechanical equipment deserves the same basic inventory discipline as the rest of the home network. If you cannot name the devices and the people with access, you cannot make a clean repair, reset, or handoff when something changes.