If your Lockin Smart password may have leaked, change it immediately from the official app or account recovery flow, then check whether the account, household access, and connected devices still match what you expect. Do not reuse the exposed password anywhere else. If you cannot sign in, use Lockin’s recovery process; five incorrect account-password attempts within one hour can trigger a documented 30-minute account lockout. Lockin FAQ
This is an account-containment problem, not automatically a reason to factory-reset your smart lock. Keep an already-authorized entry method available while you restore account control, and contact Lockin support if the account or device state does not look right.
1. Change the exposed password first
Use the Lockin Smart app or the official Lockin sign-in and recovery path—not a link in an unexpected email or message. Set a new, unique password that has never been used for another account. If the leaked password was reused for your email, password manager, shopping, banking, or smart-home accounts, change it there too, starting with the email account that receives recovery messages.
Do not send the new password, an active door PIN, a verification code, or a screenshot containing any of them to support or another household member. A password leak does not prove that someone has entered the home, but it does mean the old credential should no longer be trusted.
2. If you are locked out, stop guessing
Lockin’s current FAQ says that entering the account password incorrectly five times within one hour locks the account for 30 minutes. Wait out that account cooldown, then change the password and sign in again. The FAQ does not say that a password change bypasses the active wait early, so do not keep retrying or create a replacement account as a workaround.
If the cooldown has passed but recovery still fails, record the exact error and contact Lockin support. Do not confuse this account restriction with wrong PIN, fingerprint, or palm-vein attempts at the door; those are separate access methods with separate behavior.
3. Check the account and household access
After signing in with the new password, confirm that the expected Lockin device, household, and administrator information are present. Look for anything you did not create, such as an unfamiliar household member, an unexpected device, or a change to the account identifier.
Lockin’s FAQ says the service does not allow multiple device logins to the same account. If a household has been sharing one account, move to the documented household-sharing arrangement—separate Lockin Smart accounts invited through Home Management—rather than passing the new password around. Household access guidance
Do not assume that changing the password automatically revokes every existing session, invitation, or connected-platform authorization. The current Lockin FAQ documents password change and its multiple-device-login rule, but it does not document a universal “sign out all devices” control. If you see an unknown person or device, ask support what they can invalidate before deleting the lock or resetting it.
4. Review the lock’s access entries separately
An account-password leak is not the same as a leaked door credential. Review the access list in the Lockin Smart app and remove only entries you can identify as unauthorized. The FAQ’s documented path for Veno-series access data is: select the lock, open Device Settings, enter Manage Access, then locate the specific password, fingerprint, or palm-vein entry to manage or delete. Lockin FAQ
| What may be exposed | What to do |
|---|---|
| Lockin Smart account password | Replace it immediately and change reused copies elsewhere. |
| A door PIN | Remove or update that specific PIN in Manage Access; do not guess at the keypad. |
| A household member or guest invitation | Confirm the person and permission; remove an unauthorized entry or ask support if the control is unclear. |
| Fingerprint or palm-vein access | Check the named user and delete only the unauthorized credential. Lockin says biometric data for the Veno series is stored locally on the device. |
| Mechanical key | Treat a missing or copied key as a physical-security issue; rekeying or hardware advice requires the exact lock and support guidance. |
The app account may control the lock, but a password leak alone does not establish that a door PIN, biometric template, or mechanical key was exposed. Make the narrowest change that addresses the evidence.
5. Confirm a safe way into the home
Before you finish the review, test one authorized entry method at a suitable time. Depending on the model and what you enrolled, that may be a palm vein, fingerprint, door PIN, app control, or mechanical key. Keep a backup method available while account access is being repaired. Lockin’s Veno FAQ also documents USB-C emergency power and a mechanical key for a depleted battery; those are power and physical-entry backups, not account-recovery methods.
Do not factory-reset a working lock merely because the account password leaked. A reset can change device binding and remove access data, and the exact reset process varies by model. Use the Lockin user-manual library for the exact model and ask support before resetting when the account, device, or administrator state is uncertain.
6. Protect the recovery path
Secure the email account and phone used for Lockin recovery, because control of that channel can undermine a password change. Turn on multi-factor authentication wherever the email or account offers it, and use a unique password. The FTC also recommends changing a compromised password anywhere it was reused, signing out of unfamiliar sessions when the service supports it, checking recovery information, and enabling two-factor authentication. FTC hacked-account guidance
Update the Lockin Smart app and your phone’s operating system through their normal official channels. If you entered the leaked password into a suspicious page or installed an unexpected app, secure the device before changing more passwords and seek trusted technical help.
When to contact Lockin support
Contact Lockin support if:
- you cannot change the password after the documented wait;
- the lock, household, administrator, or access list is missing or changed;
- you see an unknown device, member, invitation, or credential;
- you suspect a door PIN, biometric credential, key, or physical lock—not only the account password—was exposed; or
- you are unsure whether a reset would remove the device from the account.
Share the model, account-error wording, approximate times, and the non-secret steps you already tried. Do not share passwords, door PINs, verification codes, full recovery links, or unnecessary personal data.
For a Lockin smart-lock account after a password leak, the safest sequence is: replace the password, secure any reused copies and the recovery email, verify household and device state, review only the access entries that may actually be exposed, and get model-specific support before a reset. This restores control without treating every account incident as a door-hardware failure.