Xiaomi Smart Door Lock 2 Pro falsely grants access to delivery person via facial recognition
A Xiaomi Smart Door Lock 2 Pro falsely identified a delivery person as the homeowner and automatically unlocked the door on August 10, 2025. The homeowner was in bed when the system granted unauthorized access to the stranger. Xiaomi acknowledged the issue and scheduled inspection.
What happened
On the evening of August 10, 2025, a Xiaomi Smart Door Lock 2 Pro user ordered two deliveries. When the second delivery arrived, the door lock's facial recognition system identified the delivery person as the homeowner and automatically unlocked the door.
The homeowner was in bed at the time. According to the lock's access log, at 22:22 on August 10 the system recorded 'Shuoshuos face close-range unlock.' Surveillance video showed the delivery person was surprised after the door opened. The homeowner and delivery person reportedly shared similar facial features.
Reported impact
The incident raised concerns about the security vulnerability of the door lock's facial recognition system. The homeowner expressed that while occasional false rejections are acceptable, false acceptances by strangers are not.
Index analysis
The Xiaomi Smart Door Lock 2 Pro is marketed with '3D structured light facial recognition technology' that uses invisible light to capture facial details and create a unique facial profile. The product page claims it has '3D liveness anti-spoofing detection' to prevent photo and video attacks.
This was the first false acceptance incident reported by the user, though he noted occasional false rejections had occurred in the past. The lock features a 15-second sleep mode after the owner leaves.
Governance controls
Xiaomi customer service acknowledged the issue and scheduled an on-site inspection and repair. A company representative said the situation would be logged and tracked by specialized staff, with findings to be reported to relevant departments.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.