How Matter 1.4.2 improves security

  • August 25, 2025
  • Steve Rogerson

The Connectivity Standards Alliance (CSA) has released more details about how Matter 1.4.2 adds enhancements focused on improving security, streamlining certification, optimising infrastructure and enabling better user experiences through tighter coordination across the ecosystem.

The updates in 1.4.2 are rooted in industry best practices and the real-world lessons learned from Matter products already in the market.

While Matter 1.4.2 maintains backwards compatibility, many of its enhancements require coordinated support between device manufacturers and ecosystem platforms. Developers are being encouraged by the CSA to collaborate closely with their partners to implement and deploy these features, increasing their impact for users.

The update introduces support for wifi-only commissioning using wifi unsynchronised service discovery (USD). It lets devices be onboarded to Matter ecosystems over wifi without requiring Bluetooth Low Energy (LE) radios.

For device makers, this provides an opportunity to reduce costs and hardware complexity by removing the Bluetooth LE radio and stack in designs where a Bluetooth LE radio is used solely for commissioning. It also lets existing wifi-only products adopt Matter through a firmware update, without needing hardware revisions. For consumers, it means more device choices and the same simple, consistent setup experience they expect from Matter, even when Bluetooth LE isn’t available in the device.

While it will take some time to achieve the required critical mass of support from commissioners such as phones, hubs and smart speakers, the CSA says this update provides a path to more affordable devices, wider product availability, and the same reliable and simple setup experience, even without Bluetooth LE.

Matter 1.4.2 introduces and enhances several security features:

  • Vendor ID (VID) verification: Matter controllers can now cryptographically verify that the admins installed on a device are genuinely from the vendors they claim. This strengthens trust in multi-admin environments and prevents potential impersonation attacks by bad actors. Admins, which users typically recognise as ecosystems or controllers, can fully control smart-home devices on which their credentials are installed. This update enables greater peace of mind for users that their smart-home devices are only connected to trusted admins.
  • Access restriction lists (ARLs): For network infrastructure devices such as routers and access points (known in Matter as network infrastructure managers, or NIMs), ARLs provide a mechanism to restrict access to sensitive settings and data to only trusted, verified controllers. Enhanced testing support for ARLs included in 1.4.2 ensures implementations are robust and secure. For users, this means stronger protection against tampering or misconfiguration by untrusted apps or services.
  • Certificate revocation lists (CRLs): Using public key infrastructure (PKI), Matter now supports standard mechanisms for revoking unused or compromised device attestation certificates. Ecosystems can use CRLs to flag potentially risky devices, warning users during commissioning and blocking unsecured devices from entering the network. This provides protection from unknowingly adding insecure or fraudulent devices to a home.

Matter 1.4.2 makes scene support certifiable, providing a standard way for controllers to define and activate scenes across multiple Matter devices. Matter scenes allow users to control entire rooms or environments, such as setting mood lighting or initiating bedtime routines, with a single command. The update adds support for time-based behaviour, such as fading lights over time, and can reduce the number of commands needed to synchronise multiple devices. Each ecosystem can define and use its own scenes.

For users, this means smoother, faster and more reliable scene activation with improved coordination between devices. Most users create experiences such as scenes in the native interfaces of their ecosystem apps, which can coordinate both Matter and non-Matter devices. For many users, this enhancement, if implemented by an ecosystem, may improve the responsiveness and performance of scenes involving Matter devices.

As the number of Matter devices in homes increases, so does the volume of data they generate. Matter 1.4.2 extends quieter reporting, a data model optimisation that defines when and how often devices should report attribute changes, to a wider range of features and devices.

By avoiding unnecessary updates, such as repeatedly reporting time remaining on a timer or intermediate values during a long transition, devices can reduce network use and extend battery life. This leads to more efficient, less noisy networks and more responsive homes. Users get better battery life and faster response times, especially in larger homes with many devices.

Smart-home devices often gain capabilities after commissioning, either through firmware updates or user-driven changes. Matter 1.4.2 standardises the way devices notify controllers of changes to their features or configuration. Now, when a device’s capabilities change, it can issue an attribute update, allowing controllers to re-evaluate its configuration. This means features become available automatically, without requiring a device reboot or setup from scratch.

Matter devices often have multiple addressable endpoints, for example individual plugs on a power strip or buttons on a controller. Before 1.4.2, endpoint IDs could be different across admins or after recommissioning, causing user confusion and potential duplication.

Endpoint unique IDs resolve this by ensuring each endpoint has a persistent admin-independent identifier. If devices are linked to ecosystems by a non-Matter external cloud connection, their endpoints’ unique IDs can be communicated through that connection as well, avoiding multiple instances of the same device. This lets ecosystems reliably track and manage complex devices across interfaces.

To support consistent integration of robot vacuum cleaners (RVCs), Matter 1.4.2 standardises expected behaviour, particularly around sequential commands. Previously, device responses varied; for instance, some needed the current job to be cancelled before starting a new one, creating friction for users and controllers.

The new behavioural standard provides predictability and consistency across vendors, enabling faster integration by controllers and more intuitive interactions for users. This means more predictable, reliable vacuum performance, regardless of brand, and easier setup in a smart-home ecosystem.

With smart homes scaling up, Matter 1.4.2 sets updated requirements for network infrastructure managers (NIMs) such as routers and access points. Thread border routers included in NIMs must support at least 150 devices and be certified for Thread 1.4. Wifi access points must support 100 simultaneous associations and target wake time (TWT) for power efficiency. This should increase confidence that smart-home networks can grow without hitting performance limits.

Matter 1.4.2 includes many updates to test plans, scripts and tools, including new and refined test cases for valves, fans, access control and the interaction data model. These updates enhance test automation, reduce ambiguity and streamline certification processes for greater efficiency and repeatability.

Developers interested in learning more about these enhancements can access the Matter 1.4.2 specification and test plan at csa-iot.org/developer-resource/specifications-download-request and the Matter 1.4.2 SDK release at github.com/project-chip/connectedhomeip/releases.