Skip to content

Cookie preferences

We use cookies for our own analytics, to see how our campaigns perform and, if you allow it, to load content from other services such as the Google site search. We never sell your data. Necessary cookies keep the site working and cannot be switched off. See our Cookie Policy for details and our Privacy Policy for how we handle personal data.

Security, load balancing and remembering your cookie choice.

Show us which pages people read, how they find the site and where they get stuck, so we can improve it (Google Analytics, Microsoft Clarity).

Show us which of our ad campaigns bring visitors to the site and remember the campaign or partner link you arrived from (Google Ads, LinkedIn, Meta, partner program). We do not use these cookies to build advertising profiles.

Load the site search from Google when you use it. Google sets its own cookies and shows ads in the search results.
© 2026 The ThingsBoard Authors
22.5k Try for free

ThingsBoard Cloud

Choose your data region

Your data stays in the region you choose, for residency and compliance. No credit card required.

North America Data stored in North America Europe Data stored in the European Union

Rather run it yourself? Install on your own servers

Product security

How the platform protects device connections, credentials and secrets, so you don't have to build this layer yourself.

  • Secrets storage

    An AES-256 encrypted vault for API tokens, passwords and certificates used in integrations and rule chains, so credentials don't sit in plain configuration.
    Documentation

  • Device authentication

    • MQTT: access token, MQTT Basic credentials or X.509 certificate.
    • HTTP: access token.
    • CoAP: access token or X.509 certificate.
    • LwM2M: pre-shared key, raw public key or X.509 certificate.
    • SNMP: community string (v1/v2c) or USM credentials (v3).
    • Mutual TLS: on MQTT, CoAP and LwM2M, both the device and the server authenticate with X.509 certificates. For a device fleet, we recommend X.509 with a certificate chain.
    Documentation

  • Encrypted device transport

    Configurable
    MQTT over TLS on port 8883, HTTP over TLS on 443, CoAP over DTLS on 5684, LwM2M over DTLS on 5686 and 5688, and SNMPv3 with USM authentication and encryption.
    Documentation

  • Custom domains with automatic SSL (ThingsBoard Cloud, web UI)

    Bind your own domain name; the platform provisions the SSL certificate automatically.
    Documentation

Read next

Can’t find what you need?

Our security team answers questions, shares documents under NDA and handles vulnerability reports.