HomeAssistant setup - Documentation Proposition

[inobrevi]

Hi!

So one thing I forgot this time it was how to set up HomeAssistant and instructions leaves important detail: Which credential to type? HomeAssistant or current Windows account?

So it would be nice to add that it should be username and password to HomeAssistant/MQTT integration. For those brain dead tired moments.

While I'm at it, would it be possible to do it little bit different? Because as it is currently it leaves username and password to HA instance in plaintext. Not very secure.

[infeeeee]

Which credential to type?

If you set it up via the configuration menu, all questions are about the broker, so from that it should be clear that you have to add the broker url, than the broker port, than the broker username and finally the broker password. But we have support for adding instructions to questions, we can write some note there.

currently it leaves username and password to HA instance in plaintext. Not very secure.

Yes, I was also thinking about this. I think there are multiple ways to solve this:

• The best way would be if we hash the password when the user submits it, and only send the hash on login. Unfortunately as I see paho-MQTT (the library we use for mqtt), does not support this, so currently it's not possible. Also it would be the same problem, if someone gets the hash could still login with the hash from a different computer.
• Use the OS' secret store or apis to save or crypt/decrypt the password. The problem IoTuring supports all 3 common os-es, so we have to find a library for that, or we have to develop something, I will take a look if we can do that.