Secluso: Building a Truly Private, End-to-End Encrypted Home Security System

The home security market is dominated by giants like Ring and Nest, offering convenience at the cost of significant privacy trade-offs. For those wary of cloud-based surveillance where the provider holds the decryption keys, the alternative has often been complex self-hosting setups that require deep technical expertise to secure.

Secluso (formerly known as Privastead) aims to bridge this gap by providing an open-source, end-to-end (E2E) encrypted home security camera system. By leveraging modern cryptographic standards and accessible hardware, it offers a path toward private surveillance that doesn't require trusting a corporate entity with your home's most intimate video feeds.

The Architecture of Secluso

At its core, Secluso is designed to remove the "trusted third party" from the video pipeline. The system utilizes OpenMLS (Messaging Layer Security) to ensure that video data is encrypted from the camera device directly to the user's mobile application.

Hardware and Deployment

Secluso is primarily built around the Raspberry Pi ecosystem. Users can attach a Pi camera to a Raspberry Pi, which then serves as the camera device. To lower the barrier to entry, the project provides a GUI deploy tool that allows users to set up the system in under five minutes without requiring extensive technical knowledge.

The Software Stack

To ensure the highest level of security and transparency, the developers have focused on the entire vertical stack:

  • Custom OS: The camera runs on a minimal, customized operating system based on the Yocto project.
  • Reproducible Builds: Almost every component—including the Android app, camera/server binaries, the deploy tool, and the OS itself—features reproducible builds. This allows independent auditors to verify that the distributed binaries match the source code.
  • Mobile Integration: The system includes dedicated apps for iOS and Android, with support for UnifiedPush to ensure that push notifications remain privacy-preserving.

Comparing Secluso to Traditional NVRs

While Secluso offers a streamlined, encrypted path from camera to phone, it represents a different philosophy than traditional Network Video Recorders (NVRs) like Frigate.

The NVR Approach (e.g., Frigate)

As noted by the community, tools like Frigate typically act as a local hub. They pull feeds from a wide variety of off-the-shelf IP cameras over a local area network (LAN). The NVR then performs heavy lifting locally, such as:

  • Hardware-accelerated object and audio detection.
  • Face recognition and ALPR (Automatic License Plate Recognition).
  • Semantic search over recorded video.

For power users, this approach is often preferred because it allows the use of cheaper, diverse hardware and keeps all processing on a local server. Security is typically managed by placing cameras on a dedicated VLAN to isolate them from the internet.

The Secluso Approach

Secluso prioritizes a "plug-and-play" privacy model. By using a specific hardware target (Raspberry Pi) and a custom OS, it eliminates the risk of "shady IP camera vendors" and their proprietary, often insecure, firmware. The use of a cloud relay service—which simply "shovels" encrypted bytes without having the ability to decrypt them—simplifies connectivity without requiring the user to manage complex STUN/TURN configurations or open firewall ports.

Community Insights and Open Questions

The introduction of Secluso has sparked several technical discussions regarding the future of home surveillance:

Hardware Efficiency

Some users have questioned the necessity of a Raspberry Pi for every single camera, suggesting that ESP32-based cameras (using RISC-V CPUs) could reduce costs and power consumption. There are also suggestions to move toward ChaCha20-based ciphers for better performance on low-power hardware that lacks AES acceleration.

Storage and Intelligence

One of the primary trade-offs of a streamlined E2E system is the addition of "smart" features. While NVRs can easily run AI detection locally, E2E systems must decide where that intelligence lives. Community members have expressed interest in pet detection and historical video playback—features that are more complex to implement when the data is encrypted end-to-end.

The "Last Mile" of Security

Despite the privacy gains, some users remain tied to cloud providers for specific high-stakes features, such as automated police or authority notifications when a trigger occurs and the user is away. This remains a significant challenge for open-source alternatives: replicating the reliability and legal integration of professional monitoring services without sacrificing the privacy of the data.

Conclusion

Secluso represents a significant step forward for users who want the ease of a consumer product but the security of an open-source, audited stack. While it may not replace the feature-rich environment of a local NVR for the hobbyist, its focus on reproducible builds and OpenMLS encryption provides a robust blueprint for the future of private home monitoring.

Sources