Tapo library now speaks TPAP, so you can turn off TP-Link's risky Third-Party Compatibility switch

Tapo (Rust/Python library) now speaks TP-Link's TPAP protocol

The unofficial Rust and Python Tapo client v0.11.1 adds support for TP-Link's TPAP protocol, meaning lights, plugs, hubs, and some cameras can work with Third-Party Compatibility turned off. TPAP uses SPAKE2+ for password-authenticated key exchange, making recorded logins useless for offline password guessing and keeping past sessions private. The release also adds H200 and H500 camera hub support with recording downloads, plug schedules and timers, and updates the MCP server.

The switch is a security downgrade with a friendly name.

More from this day

2026-10-06