
Resilience · Offline · Audit
Nine Devices, One Question: What Happens When the Wi-Fi Dies?
SMARTS · 22 August 2026 · 12 min read
At two in the morning, the internet dies. Not the power — the internet. The router’s lights run through their small theatre, and then the house is left with every device it has been trained to trust and none of the servers those devices talk to. This is the moment the smart home stops being a collection of features and becomes a collection of answers to a single question: what still works? The question is worth asking at 2 a.m. It is better asked at 2 p.m. on a Saturday, deliberately, with a notepad. This article is an audit protocol for the connected home: nine categories of device, one diagnostic question each, and a written result. It is the only feature review you can perform yourself, for free, before anything goes wrong — and the only one the industry cannot stage for you.
The Feeling First
The Only Feature You Can Verify Yourself
Every feature a smart device is sold on — remote monitoring, app control, automation, voice — is a promise made by the seller, demonstrated in the seller’s videos, and unverifiable at the point of sale. Offline behaviour is different. It is the one property of the device that is entirely in your hands: disconnect the house from the internet and watch what happens. No reviewer, no laboratory, no marketing department is required. The emotional value of the exercise is not the data. It is the calm that comes from knowing the data. A household that has performed this audit once does not wonder at 2 a.m. It knows.
The alternative emotion is the one the industry banks on: the learned helplessness of the blackout, the flashlight tour of the house where every device is a small betrayal — the lock that says it cannot verify you, the camera that shows nothing, the speaker that does not answer. The audit converts that night from an unknown into a record. That is the whole difference between owning a system and being managed by one, and it costs nothing but an hour and a piece of paper.
The Market
Why the Question Is More Urgent Than It Was a Year Ago
The connected home is converging on network dependence at the same moment the standards bodies are pushing toward local operation — and the audit tests which side each device in your house actually lives on. The Matter standard added camera support in version 1.5 and improved camera feed delivery in 1.5.1, per the Connectivity Standards Alliance — an explicit effort to make devices interoperate locally rather than through a single vendor’s cloud. In the lock category, Aliro 1.0 arrived in February 2026 to unify smart-lock access within the Apple, Google and Samsung wallets over NFC and Bluetooth, per Matter Alpha, as an open CSA standard for digital door keys across platforms, per Matter Smarthome. The direction of the industry is local. The installed base is mostly not. The audit tells you which camp each of your devices belongs to.
The regulatory clock is running in the same direction. The EU Cyber Resilience Act’s vulnerability-reporting obligations take effect on 11 September 2026, with full application on 11 December 2027, per the European Commission. And the FTC’s audit of connected-product pages found that only 21 of 184 — 11.4 percent — disclosed how long software support would last, per the FTC report. Both point at the same weakness the audit tests: the software lifespan of a device is the least visible part of its purchase, and it is exactly what the 2 a.m. test reveals.
The Pain
Nine Categories, One Question
Each category has a diagnostic question. The point is not to theorise about the answers. The point is to find out.
1. The lock: can you still get in? The question splits in two. First, the mechanical override: does the keyway exist and does the key turn the lock with the power state of everything else irrelevant? Second, the credential: does the lock validate a code, a fingerprint or a digital key locally, or does it phone home for permission? This matters more as digital keys standardise — Aliro aims to put door credentials in the phone wallets of three platforms, per Matter Alpha — because a credential that lives in a phone is only as good as the phone’s ability to present it. Test with the mechanical key in hand, never without it.
2. The camera: local recording, or nothing? The question is whether the camera records to local storage when the cloud is unreachable, or whether its recordings exist only on the vendor’s server. The industry’s own standardisation work — Matter 1.5 and 1.5.1 improving camera performance and feed delivery, per the Connectivity Standards Alliance — assumes cameras are part of the local network. Whether yours is depends on the firmware and the subscription you bought, which is precisely why it must be tested rather than assumed.
3. The thermostat: does the schedule hold? The test is simple: disconnect the internet, change nothing, and watch whether the heating and cooling schedule survives the night. The thermostat is also the device where the connectedness is load-bearing for reasons beyond your convenience — smart thermostats are central to the demand-response strategies utilities are building around, per ACEEE — which makes the offline-schedule question not a curiosity but a resilience test of a genuinely dual-use device.
4. The television: does the interface still navigate? A modern set is a data appliance when online — automated content recognition identifies what you watch to target ads and suggest content, per PCMag — and the offline test shows what the set is without its feed: whether you can still reach inputs, settings and local playback, or whether the remote is steering a frozen ad panel.
5. The robot: does it clean without the app? The question is whether the machine can start, map and clean with the app dead. The category context is sharp: the FCC has added foreign-made advanced robotic devices to its Covered List, prohibiting them from receiving equipment authorisation, per the FCC’s own FAQ — with the ban applying only to new units and existing devices unaffected, per NBC News. The lesson for the audit is about dependence: a category whose supply and support can shift under regulatory or commercial pressure is exactly the category where app dependence is a risk you can measure today, by unplugging the internet and pressing start.
6. The presence sensor: does it still see? Wi-Fi sensing detects motion in the zone between the router and a stationary connected device, per Kaspersky, and vendors describe it as enabling motion detection, activity recognition and localisation without cameras, per component maker Suntsu. Because the sensing runs on the local signal between router and device, it may keep working when only the internet dies — but a sensor that reports to a cloud is blind the moment the link drops. The test distinguishes the local sensor from the remote one, and the difference is the difference between presence and absence on the night the house needs to know someone is home.
7. The doorbell: does the chime still ring? The oldest question in the category and the one with the most at stake for the person standing in the rain. Whether the visitor triggers a local chime, or whether the announcement exists only as a push notification to a phone that is itself offline, is a question with a social answer.
8. The speaker: does it do anything without the feed? The assistant is the device most honestly dependent on the network — but whether the speaker can still play music from a local source, or whether it becomes a mute black cylinder, is a fact about your particular unit that only the test establishes.
9. The alarm: does the panel still arm? The most serious category, with the most serious caution: this test must not be performed without notifying your monitoring provider first. A triggered alarm is a real call to real responders, and the test that saves you money in monitoring fees must never cost you a false dispatch.
The Numbers
The Numbers Behind the Test
The audit is framed by a handful of figures, each of which argues for doing it. The FTC found that 21 of 184 connected-product pages — 11.4 percent — disclosed how long software support would last, per the FTC report, and 72 percent of Americans with smart devices say support-duration disclosure should be mandatory, per Consumer Reports and allied groups: the longevity of your devices is the least disclosed fact about them, and the audit is the only disclosure mechanism available to you. The EU’s Cyber Resilience Act’s reporting obligations begin 11 September 2026, per the European Commission: the regulatory world assumes devices are updatable and accountable, which makes the update question in the audit a compliance question in miniature. And the FCC’s Covered List action on foreign-made robotic devices, per the FCC FAQ with existing units unaffected per NBC News, is a reminder that whole categories can shift under a single rule change — and the audit is the only test that tells you whether your devices will notice.
“Resilience is the only feature you can verify yourself, for free, before anything goes wrong.”
The Buy
The Audit Protocol
Perform the audit in eight steps, in the order given, and write down the result of each. The written record is not documentation of the test. It is the deliverable.
01
Prepare the expectation list
For each of the nine categories, write down what you expect to survive the disconnect. The gap between expectation and result is the entire finding of the audit.
02
Disconnect the internet, not the power
Unplug the modem and the router from the network. Keep power on. Local protocols — Matter and its camera support, per the CSA — keep devices talking to each other. The test is the internet, not the electricity.
03
Lock and doorbell
Mechanical key first, then the offline credential. Then ring the doorbell from outside and listen for a local chime. Never begin until the keyway is verified.
04
Camera and thermostat
Check whether the live view resolves locally and whether recordings exist without the cloud. Change nothing on the thermostat; watch whether the schedule holds overnight.
05
Television and speaker
Navigate the TV interface to inputs and settings; test local playback on the speaker. The question is whether the interface is a set of menus or a set of ad placeholders, per PCMag on ACR behaviour.
06
Robot and presence sensors
Start a clean from the machine itself, not the app. Walk through a sensing zone and check whether an event is registered locally — Wi-Fi sensing operates on the local signal, per Kaspersky.
07
Alarm — with the provider notified
Notify the monitoring provider in advance and follow their instruction for a test. Arm and disarm the panel offline. This is the only step with real-world consequences; treat it accordingly.
08
Reconnect, date, file, repeat
Restore the internet, note the firmware versions of every device, date the audit, and keep the record. Repeat the audit every six months and after every significant firmware update.
What to buy differently next time, on the strength of the record: prefer devices with a mechanical override, local recording, local schedules and an optional app; prefer standards-based local devices where the choice exists — Matter’s local interoperability, per the CSA, and Aliro’s cross-platform digital keys, per Matter Alpha, are the two standards most likely to keep working when the internet does not; and demand the support-duration answer in writing at purchase, because only 11.4 percent of product pages volunteer it, per the FTC report.
The Fine Print
How Not to Run the Audit
1. Do not test the alarm without notifying the monitoring provider. Pulling the internet is safe for most devices, but a monitored alarm system is connected to real people. Notify the provider in advance, follow their test procedure, and never let a genuine false dispatch be the first data point of your audit.
2. Do not test the lock without verifying the keyway first. The audit must never be the moment you discover the mechanical key is lost. The test that locks you out of your own house has failed twice.
3. Behaviour differs by firmware version. Two units of the same model can behave differently after different updates. The audit tests your device, on your firmware, on your network, today — it is not a review of the product line, and it should not be generalised to one.
4. Offline today does not mean offline after an update. A device that works without the internet now may lose that behaviour in a future firmware release — the update may be the very thing that adds the cloud dependency. That is why the audit is dated and repeated, and why the support-duration question, asked of only 11.4 percent of product pages by the makers themselves, per the FTC report, belongs in writing at the point of purchase.
5. The audit is not a security review. A device that works offline may still phone home when it is online, and the ACR behaviour of connected TVs, per PCMag, is a reminder that offline capability and online discretion are unrelated properties. Resilience and privacy are both worth auditing. They are not the same audit.
The Last Word
At two in the morning, the internet dies, and the house answers with the truth of its own design. Nothing in the marketing, nothing in the review sites, and nothing in the 11.4 percent of product pages that disclose their support commitments, per the FTC report, has told you what that truth is. Only the test will. The audit takes an hour, costs nothing, and produces the one document the industry will never write for you: a record of what your house actually does when the network leaves. Resilience is the only feature you can verify yourself, for free, before anything goes wrong. This weekend is the cheapest moment in the life of your smart home to find out what it is worth — and the record you keep, dated and repeated, is the difference between a house that runs a system and a house that is run by one.
— THE SMARTS DESK
Sources
Research Appendix
Every statistic in this article links to its primary source. Full list, as of 22 August 2026:
| Data point | Institution | Date | Source |
|---|---|---|---|
| ACR identifies what you watch to target ads and suggest content; the manufacturer can sell that data | PCMag | 1 Aug 2026 | Explainer |
| Aliro 1.0 released to unify smart lock access within Apple, Google and Samsung wallets; uses NFC and BLE | Matter Alpha | 26 Feb 2026 | Report |
| Aliro is an open CSA standard aiming to make digital door keys work across manufacturers and platforms | Matter Smarthome | 6 Jan 2026 | Explainer |
| Wi-Fi sensing detects motion in the zone between the router and a stationary connected device | Kaspersky | 17 Jul 2025 | Explainers |
| Vendor claim: Wi-Fi sensing enables motion detection, activity recognition and localisation without cameras (vendor blog) | Suntsu | 11 Jun 2025 | Blog |
| FCC Covered List includes foreign-made advanced robotic devices; prohibited from receiving FCC equipment authorisation | US Federal Communications Commission | — | Official FAQ |
| The ban applies only to new foreign-produced advanced robotic devices; existing devices are not affected | NBC News | 11 Aug 2026 | Report |
| Matter 1.5 added cameras; Matter 1.5.1 improved camera feed delivery | Connectivity Standards Alliance | 31 Mar 2026 | Newsroom |
| EU Cyber Resilience Act: vulnerability-reporting obligations from 11 Sept 2026; full application 11 Dec 2027 | European Commission | — | Policy page |
| FTC audit: only 21 of 184 connected-product pages (11.4%) disclosed software-support duration | US Federal Trade Commission | — | Audit |
| 72% of Americans with smart devices want mandatory support-duration disclosure | Consumer Reports / US PIRG / SRFF | 12 Mar 2025 | Proposal |
| Smart thermostats as a demand-side resource for load growth | ACEEE | 4 Feb 2026 | Resource |
Leave a comment