Apple Safety Check can help you review personal sharing, connected devices, and Apple Account security after a relationship change or another access concern. It should also trigger a separate Apple Home security audit. A person may no longer appear in one sharing screen yet still have access through the Home app, a lock-maker account, a camera app, an alarm account, a shared code, or a device that remains signed in.
This 2026 checklist separates those control planes. It is written for Apple Home users who need to check locks, cameras, alarm systems, residents, hubs, automations, and recovery paths without assuming that one reset fixes everything.
Apple Safety Check and HomeKit audit: quick navigation
What Apple Safety Check does—and what it does not prove
Apple documents Safety Check as an iPhone feature for reviewing and changing information sharing, connected devices, privacy permissions, and Apple Account security. Depending on the situation, a user can choose Emergency Reset or work through Manage Sharing & Access. Apple also provides a Quick Exit control for leaving the screen quickly.
That is a valuable account-level review. It is not proof that every smart-home path has been closed. Apple Home membership is one path. Manufacturer apps, monitoring portals, PINs, physical keys, garage remotes, Wi-Fi credentials, and exported camera clips are others.
Use Apple’s current instructions rather than a remembered menu path:
- Apple Personal Safety User Guide: use Safety Check
- Apple Support: share control of your home
- Apple Support: add a smart home accessory to the Home app
Before changing access: make a map
Start with an inventory. A rushed reset can lock out the owner, break monitoring, erase useful evidence, or leave a secondary account untouched.
| Control plane | What to list | What success looks like |
|---|---|---|
| Apple Account | Trusted devices, phone numbers, recovery contacts, signed-in browsers | Only expected devices and recovery paths remain |
| Apple Home | Homes, residents, administrators, hubs, cameras, locks, automations | Membership and permissions match the current household |
| Vendor apps | Alarm, camera, lock, garage, router, voice assistant, cloud storage | Owner email, MFA, sessions, and guests are known |
| Local credentials | Alarm PINs, lock codes, keypad codes, physical keys, remotes | Old credentials fail; current credentials work |
| Network | Router administrator, Wi-Fi networks, shared passwords, remote access | Only approved people and devices can connect |
Take screenshots or written notes only if it is safe to do so. Record the date, the account owner shown by each service, and the change made. Do not put passwords or setup codes into a shared note.
For a broader account inventory, use the home security digital estate plan. For a device-by-device code inventory, see the HomeKit setup code checklist.
Audit Apple Home residents and permissions
- Open every Home. Some users have an old test home, vacation property, or prior address alongside the current home.
- Review People. Compare each resident with the current household. Do not assume an old invitation expired.
- Review permission level. Check who can add or edit accessories and who can control devices remotely.
- Review camera access. Camera viewing and recording permissions deserve a separate check because they affect privacy inside and around the home.
- Remove access deliberately. Follow Apple’s current Home-sharing instructions and then verify from a second approved device.
- Check other Homes again. Removal from one Home does not prove removal from another.
If an invitation or membership state looks wrong, work through the HomeKit invitation failure checklist. If a former resident must be removed, the HomeKit member removal checklist covers lock, camera, and access tests.
Do not confuse Apple Home access with alarm access
A Home app resident and an alarm-system user are often separate records. Removing one does not necessarily remove the other. Open the security-system app or web portal and check:
- account owner and billing email;
- administrators, household members, installers, and temporary users;
- active sessions or remembered devices, where the service exposes them;
- alarm PINs, duress codes, verbal passwords, and emergency contacts;
- professional monitoring contacts and dispatch instructions.
For Abode users, document the Abode account, alarm users, PINs, CUE automations, cameras, monitoring contacts, and HomeKit connection as separate rows. Use the official product or support instructions for the exact model and current app version.
Audit vendor accounts, shared codes, and physical access
Smart-home access survives in places people forget. Review each manufacturer app even if the accessory appears in Apple Home.
Vendor account checklist
- Confirm the owner email and phone number.
- Change the password from a trusted device if compromise is suspected.
- Enable or review multi-factor authentication where offered.
- Remove unknown users, guests, integrations, and signed-in devices.
- Check linked voice assistants and third-party automations.
- Review cloud recording subscriptions, shared albums, and export locations.
- Record which change invalidates old sessions; do not assume a password change does.
Codes and keys checklist
- Delete old smart-lock codes and test that each one fails.
- Change alarm PINs and any verbal passphrase used by the monitoring center.
- Review garage remotes, keypad codes, vehicle integrations, and delivery access.
- Rekey a physical cylinder if an unreturned key could still work.
- Replace hidden spare keys and update trusted keyholders.
The smart-lock rekeying checklist explains the difference between changing an app code and changing the physical key path.
Check home hubs, cameras, automations, and network paths
Home hubs
Review each Apple TV and HomePod associated with the Home. Confirm that it belongs at the property, runs current software, and appears under the expected Apple Account. A removed or offline hub can affect remote control and automations, so make one change at a time and retest.
Cameras
For every camera, test live view, event recording, notifications, and export from an approved account. Review access in both Apple Home and the maker’s app. Check whether clips were also saved to Photos, Files, email, a NAS, or another cloud service. Removing live access cannot recall copies that were already exported.
Use the HomeKit Secure Video recording gap audit to check hubs, iCloud settings, event capture, and exports.
Automations and scenes
Read each automation as if it were code. Note the trigger, conditions, actions, and which person or device affects it. Pay special attention to:
- arrive and leave automations;
- door unlock or garage opening actions;
- alarm arm and disarm routines;
- camera privacy or recording changes;
- shortcuts, webhooks, and voice-assistant routines outside Apple Home.
Disable a suspect automation before deleting it, document the reason, and test the replacement. That leaves a clearer rollback path if the automation handled another safety function.
Router and Wi-Fi
Review the router administrator account, remote-management setting, DNS setting, Wi-Fi passwords, guest networks, and connected devices. If you change Wi-Fi credentials, plan for bridges, cameras, locks, and hubs that may need to be reconnected. The HomeKit Wi-Fi password change checklist has a staged recovery order.
45-minute Apple Home access acceptance test
Do not stop at “the name disappeared.” Prove the home works for approved users and rejects removed credentials.
| Minutes | Test | Pass condition |
|---|---|---|
| 0–5 | Review Apple Account devices and recovery paths | Only expected devices, numbers, and recovery contacts appear |
| 5–10 | Review every Apple Home and resident | Membership and permissions match the current household |
| 10–18 | Test lock and alarm credentials | Approved code works; removed code fails; physical backup works |
| 18–25 | Test camera live view, recording, notification, and export | Approved account receives the expected result |
| 25–32 | Test away-from-home control on cellular data | Approved user can control intended devices remotely |
| 32–38 | Trigger one arrival/leave and one security automation | Only intended actions run |
| 38–42 | Review vendor apps and active users again | No unknown user, guest, device, or integration remains |
| 42–45 | Record results and rollback notes | Owner has a dated record without passwords or setup codes |
Run the test from an approved second device where possible. If a removed person is cooperating and it is safe, ask them to confirm that access no longer works. Do not create a risky contact just to complete a test.
Failure and rollback rules
- If the owner loses access, stop making more changes and use the official account-recovery path.
- If monitoring breaks, restore the last known-good account or hub state before changing unrelated settings.
- If a lock fails, use the documented physical-entry method; do not depend on an untested app-only path.
- If camera recording stops, note the exact time and test the hub, iCloud plan, camera settings, and vendor service separately.
- If an unknown device or user returns after removal, treat it as an unresolved account or integration issue and escalate to the relevant provider.
Frequently asked questions
Does Apple Safety Check remove someone from my HomeKit home?
Do not treat Safety Check as proof that all Home access is removed. Review every Home, resident, permission, hub, and camera in the Home app, then check the manufacturer apps and local codes separately.
Will changing my Apple Account password remove all smart-home access?
No single password change proves that every path is closed. Alarm, camera, lock, router, voice-assistant, and monitoring services can have separate users, sessions, codes, and recovery methods.
Should I reset every HomeKit accessory?
Usually not as a first step. A full reset can erase settings and create downtime. Map the accounts and access paths first, remove unwanted users and credentials, then reset only the device or service whose ownership cannot be verified.
What if a former resident still knows a physical key?
Deleting app access or a keypad code does not change the mechanical key. Rekey or replace the cylinder when an unreturned key may still work, and test the new key from both sides of the door.
How often should I repeat this audit?
Repeat it after a household change, lost device, account alert, installer visit, router replacement, or unexplained access event. A scheduled quarterly review is also reasonable for homes with many residents, cameras, locks, or temporary users.
