Aliro: The Standard Behind Tap-to-Unlock on Phones and Watches

What it is

Aliro is the open standard behind the next wave of tap-to-unlock doors, badges, and locks. Think of it as the Connectivity Standards Alliance's attempt to do for access control what Matter did for the smart home: instead of every lock brand shipping its own app and its own proprietary credential format, Aliro defines one shared way for a phone or watch to talk to a reader. A credential issued under one vendor's system can work with another's.

More than 220 member companies back the standard — platform owners (Apple, Google, and Samsung), lock manufacturers like ASSA ABLOY, Allegion, HID, and Kwikset, and chipmakers including NXP, Nordic Semiconductor, and STMicroelectronics. It didn't come from nowhere: Aliro grew directly out of Apple's Home Key feature, first floated as an industry initiative back in 2023, and it formally launched as Aliro 1.0 in February 2026.

How it actually works

Aliro defines three ways your device can talk to a reader, and each one fits a different situation.

• NFC handles the classic tap — hold your phone or watch near the reader, same motion as tapping to pay.
• Bluetooth Low Energy covers longer-range, user-initiated access, for when a reader needs to spot your device before you're close enough to tap.
• UWB combined with BLE is what enables hands-free unlocking. The system can pinpoint your device's exact position, so a door can unlock automatically as you walk up with your phone in your pocket or watch on your wrist.

Security relies on asymmetric cryptography: your device and the reader each hold one half of a key pair, rather than both sides trusting a single shared secret the way many legacy badge systems do. A certification program with independent test labs keeps different vendors' readers and credentials interoperable — the same discipline that made the NFC vs. Ultra Wideband car key split work reliably across brands.

Where you'll see it

Aliro's scope runs wider than Home Key's original residential and hotel focus. The announcement calls out enterprise offices, healthcare facilities, and universities as target deployments, on top of apartments, homes, and hospitality.

Credentials are designed to live inside your phone or watch's mobile wallet — Apple Wallet, Google Wallet, or Samsung Wallet — the same place your transit pass or boarding pass sits. That's already the pattern for hotel and home keys and for corporate badges and student IDs in Apple Wallet today. Aliro just stretches that pattern across more lock brands instead of locking it to one vendor's hardware. And Apple's existing Home Key isn't disappearing overnight — expect it to keep working for years even as Aliro-certified hardware rolls out.

Tips, gotchas, and a quick how-to with NFCore

An Aliro credential isn't something you create yourself. A building operator, employer, or property manager provisions it into your wallet app, the same way a hotel issues a digital room key — there's no "add Aliro credential" button to go looking for.

It's worth knowing what Aliro credentials aren't, too: they live inside your phone's secure element, not on a physical NFC tag, so a reader app — NFCore included — can't read, write, or clone one. That's by design, the same reason you can't pull a card number out of an Apple Pay session. Where NFCore actually helps is on the other side of that line: reading and writing the NFC tags you own — access cards, NDEF stickers, business cards — and checking what's stored on a tag before you rely on it. NFCore's free tier covers that on both iOS and Android, though iOS's Core NFC framework is more limited than Android's full reader/writer stack for some tag types.

Frequently Asked Questions

Is Aliro the same thing as Apple Home Key?

No. Home Key is Apple's own tap-to-unlock feature for HomeKit-compatible locks. Aliro is the open, cross-vendor standard the Connectivity Standards Alliance built using Home Key's approach as a starting point, so it works across Apple, Google, and Samsung devices and across many lock manufacturers instead of just one ecosystem.

Do I need a new phone to use an Aliro-compatible lock?

Not necessarily. NFC tap-to-unlock works on any recent NFC-capable phone, which covers most phones sold in the last several years. The hands-free Ultra-Wideband mode needs a UWB chip, found in recent iPhone models and some Android and Samsung flagship models — check your device's spec sheet if you want the walk-up-and-unlock experience.

How is Aliro more secure than older access control systems?

Aliro uses asymmetric cryptography: your phone and the door reader each hold a different half of a key pair instead of sharing one secret value that could be cloned or extracted. That's a real step up from many legacy badge and fob systems, which often rely on static or shared-secret credentials.

Can I read or write an Aliro credential with NFCore?

No. Aliro credentials live inside a phone's secure element and mobile wallet, not on a standard NFC tag, so they're not something a reader app like NFCore can read, write, or clone — by design, the same way you can't read the card number out of an Apple Pay session.

Conclusion

Aliro marks a shift from one-vendor lock apps toward a shared, cryptographically sound standard that any certified lock, phone, or wallet can speak. Certification is open now, and the companies behind it expect compatible hardware to keep landing through the rest of 2026. You won't need NFCore to use an Aliro credential — but if you're curious about the NFC tags and access cards you already own, it's a solid way to see what's actually stored on them.