Mosquitto MQTT Essentials: Users, TLS and ACLs
MQTT is the nervous system of a smart home, yet most guides stop at “install and go”. An unauthenticated broker becomes a liability the moment an untrusted device joins.
The bus needs permissions too
- Enable password files and listeners: two accounts — sensors publish-only, controllers subscribe;
- Isolate by topic prefix: zigbee2mqtt/# writable only by Z2M, home/# control topics only by HA;
- TLS across segments: port 8883 with self-signed certs; encrypt even inside the LAN.
Back up the broker config including password files weekly — losing it means re-pairing the whole house.
Related products: RK3588 Mini PC, RT28 industrial router. Datasheets, firmware and SDKs are free at the Hugsun Documentation Center; for selection advice or volume pricing, talk to us.
