iOS shortcut actions not working when “most secure” connection security level is selcted

[caisamuels]

iOS device model, version and app version

Model Name: iPhone 16
Software Version: 26.0.1
App version: 2025.11.2 (2025.1537)

Home Assistant Core Version
2025.11.3

Describe the bug
When selecting “most secure” connection security level in the Home Assistant app, Home Assistant actions in iOS shortcuts stop working. For example, I had an iOS shortcut that would fire a home assistant script, but when most secure is selected, the script doesn’t run. I’m not sure if this is intentional.

To Reproduce
Enable “most secure” connection security level and attempt to run a Home Assistant action in iOS shotcuts

Expected behavior
Expect Home Assistant iOS shortcuts actions to work as usual

Screenshots

Additional context

[bgoncal]

What kind of setup do you have? Do you have an internal and external URL?

Have you allowed location permission "always"? Without the "always" the app cannot determine if you are at home and then it will fail your connection. (Unless you have a remote URL as well)

[caisamuels]

@bgoncal I only have an internal URL. My location is currently set to ‘when using’. So if I set it to the less secure option will that fix it?

[bgoncal]

The app will only work in background for your setup if you allow location always or indeed switch to less secure, but it is not recommended since it may try to reach your home assistant server when you are on public networks as well.

[FunkeeBee]

I'm also experiencing the same issue with iOS shortcuts not working with "Most secure" selected in the companion app.

iOS device model, version and app version
Model Name: iPhone 16 Pro Max
Software Version: 26.1 (23B85)
App version: 2025.11.2 (2025.1537)

Home Assistant Core Version
2025.11.3

Describe the bug
iOS shortcuts not working when "Connection security level" is set to "Most secure" is selected in the companion app's HA server configuration. I use the iOS shortcuts with HA to activate scenes, specifically to turn on/off Govee lights (Govee lights local integration) and TP-Link smart plugs (TP-Link Smart Home integration).

To Reproduce
Enable “Most secure” connection security level and attempt to run a Home Assistant action in iOS shotcuts

Expected behaviour
Expect Home Assistant iOS shortcuts actions to work as usual

Screenshots
When I run the shortcut manually with "Most secure" set in the companion app, it just outputs "No" (lol) without activating the scene. On the flip side, with "Less secure" set, I get a "Yes" output and the corresponding scene is activated correctly. I tested this with both iOS location services set to "while using" (how I had it configured) and "always" for the companion app, and I get the same result with both (note: I only have an internal HA URL).

Additional context
I can see that the iOS companion app was updated yesterday (11/28/2025), and the iOS shortcuts were definitely working prior to that, even after installing HA core 2025.11.3 the day it released, about a week ago.

[bgoncal]

@FunkeeBee read my comments before, it explains the options available.

[FunkeeBee]

@bgoncal So I switched my location setting to "Always" and it was still not working with "Most secure" enabled.

I then thought that maybe my location didn't match my Home zone, that perhaps I was detected outside of it, so I went and increased its size and all of a sudden, it started working again.

The strange part is that I changed the location setting back to "While in use", closed the app completely, and it was still working as before (still on Most secure).

So then I decided to edit my Home zone to a completely random location and it's still working.

I'm not sure why that's the case, but simply editing my Home zone and saving fixed the issue entirely, even with settings I had previously (Most secure, location while in use, internal url only).

[bgoncal]

Thats, in theory, not possible, your internal URL is not used based on GPS, it's based on what you defined as home network (wifi name aka SSID).

[bgoncal]

If you also have an external URL then it should work, because the App will default to it when internal can't be used.