Aliro

Today, using your phone as a door key means using that building's system: their app, their Bluetooth flavour, or a wallet badge that only works with their readers. Aliro is an attempt to make it boring: one way for a phone or watch to talk to an access reader, whoever made either of them.

It comes from the Connectivity Standards Alliance, the same group behind Matter for smart homes. Phone makers, lock and access-control companies and chip vendors all signed up when it was announced in 2024. The idea is to treat the door like a payment terminal: the reader shouldn't care which brand of phone you have.

#What Aliro defines

• The conversation at the door: how a reader and a phone find each other, prove who they are, and agree to open.
• Three transports, all speaking the same credential:
  • NFC: tap, like a card
  • Bluetooth LE: no tap, from nearby
  • UWB: hands-free, with the distance actually measured
• Public-key cryptography: the phone holds a private key and answers a fresh challenge, so there's no fixed number to replay (see Public-key cards).

#What it doesn't do (by itself)

• Decide who gets in. That's still your access-control system. Aliro is how the credential gets to the reader, not the rules behind it.
• Fix the wire behind the reader. A reader still has to tell the controller what happened, ideally over OSDP rather than Wiegand.
• Replace your cards overnight. Buildings will run cards and phones side by side for years, and readers need Aliro support.

#Why the three radios matter

• NFC is the safe default: deliberate, close, works when everything else is flaky.
• Bluetooth lets the reader start the conversation as you approach, so the tap (or no tap) is quick.
• UWB makes hands-free entry trustworthy. The lock measures how far away the phone really is, so it opens when you're at the door, not when you're walking past it or when someone relays your signal.

With Your phone

Nothing to install: Aliro credentials are meant to live in the phone's built-in wallet, like a payment card.