July 2026 guide. Apple Home now separates residents from guests. That distinction matters for security: a resident can control the home broadly, while a guest can be limited to selected doors, locks, and other security accessories on a schedule. Use the narrowest role that completes the job, then test and remove it when the visit ends.
Apple’s current home-sharing guidance says guests receive local-only access to selected security accessories on a set schedule. That makes the guest role a better starting point for cleaners, dog walkers, contractors, and short visits than adding every person as a resident.
Resident, guest, and lock-code access are different
| Access type | What it is for | Main security risk |
|---|---|---|
| Resident | Someone who lives in the home and needs broad accessory control | Too much access for temporary workers or visitors |
| Apple Home guest | Scheduled, local-only control of selected doors, locks, and security accessories | The wrong door, time window, or device may be included |
| Lock access code | A credential managed by a compatible lock or its app | A code can remain valid after Home access is removed |
| Alarm user or PIN | Arming, disarming, or monitoring access in the alarm platform | Removing Apple Home access may not revoke the alarm credential |
Before granting guest access
- Name the person and purpose. Avoid shared labels such as “contractor” if several people will use the same record.
- Choose the minimum doors. A cleaner may need the back door but not the garage, office, or interior storage room.
- Set the real work window. Add a small arrival buffer instead of granting all-day access.
- Separate Apple Home from vendor accounts. List any lock code, alarm PIN, camera share, intercom account, or garage app that must also be managed.
- Prepare a fallback. Keep a physical key or owner-controlled recovery path for battery, phone, hub, or network failure.
Build a door-by-door access map
Write down every route a guest could use: front door, side door, patio door, garage entry, gate, and shared-building entrance. For each one, record the lock, sensor, camera, light, alarm zone, and owner who can revoke access. This prevents a common failure: the scheduled door works, but another credential still opens a connected entrance.
| Door | Guest can unlock? | Open-close alert? | Camera view? | Fallback |
|---|---|---|---|---|
| Front door | Only if needed | Owner alert during guest window | Exterior approach only | Owner-held key |
| Side or service door | Often the best worker entrance | Open-too-long rule | Avoid windows and private rooms | Alternate owner contact |
| Garage entry | Exclude unless the job requires it | Door and interior-entry status | Vehicle and tool privacy | Manual release plan |
| Patio or back door | Use a short window | Confirm closed after departure | Exterior yard only | Owner inspection |
Schedules need a start, stop, and exception rule
A schedule is useful only when somebody owns it. Record the start date, end date, days, hours, time zone, and the person who will remove it. Add an exception process for a delayed cleaner or an emergency repair. Do not stretch a one-hour visit into permanent access because changing the schedule feels inconvenient.
Do not expose more camera access than the visit requires
Door access does not automatically justify indoor camera access. Keep exterior cameras aimed at the approach and disclose them to household members and visitors as required. If a guest needs to enter a living area, review the HomeKit security privacy guide before sharing any camera or recording controls.
Pair lock events with alarm response
An unlock is not the same as a verified arrival, and a door opening is not the same as an alarm emergency. A practical routine can notify the owner when the assigned door unlocks, confirm the contact sensor opens, and flag the door if it remains open after the work window. Keep disarming rules conservative: do not let a single motion, presence, or voice event disarm the alarm.
If the household uses Abode, compare the Abode Lock, Mini Door/Window Sensor, and Smart Security Kit. Confirm current lock, Apple Home, alarm-user, and plan support before purchase. The plans page shows current monitoring choices.
Test the guest path before the real visit
- Stand outside the home during the scheduled window.
- Use only the credential the guest will receive.
- Confirm the correct door unlocks and excluded doors remain unavailable.
- Open and close the door, then check alerts, camera framing, and alarm state.
- Repeat the test before and after the allowed window.
- Test a low-battery or internet-offline scenario with the owner present.
Remove access in every system
At the end of the visit, remove the Apple Home guest, retire any lock code, delete alarm users or PINs, remove camera shares, close garage or gate accounts, and check old phones or tablets. Then run one real access test. The HomeKit member-removal checklist covers the full offboarding path, while the smart-lock turnover checklist is useful for rentals and recurring service staff.
Monthly guest-access audit
- List every current resident, guest, code, alarm user, and camera share.
- Remove expired people and schedules.
- Check that names match real people rather than generic roles.
- Test the most-used service entrance.
- Review battery, door alignment, hub status, and recovery access.
- Record who completed the audit and when.
FAQ
What is the difference between a resident and a guest in Apple Home?
Apple says residents can receive broad local and optional remote control of home accessories. Guests can be limited to selected security accessories and a schedule, with local-only access.
Does removing an Apple Home guest delete a smart-lock code?
Not necessarily. A lock code may live in the lock maker’s app or another account. Remove and test every credential separately.
Should a cleaner be added as a resident?
Usually no. Start with scheduled guest access to the minimum doors or accessories. Add resident access only when the person truly needs broad, ongoing control.
What if the guest’s phone or the home internet fails?
Keep an owner-controlled fallback such as a physical key or alternate entry process. Test the lock, hub, network, and battery failure paths before relying on phone access.