Smart-home features can be a selling point for some shoppers, but for others, they feel like an unnecessary risk.

That tension came into focus when a homeowner asked whether their Bosch electric water heater with built-in Wi-Fi could still be hacked even if it was never connected to a network.

Here's what to know

In a post to Reddit's r/Appliances community, the homeowner wrote, "If I never connect to the network and just use it as if it didn't have Wi-Fi connection, is it still a security vulnerability, can it still be hacked?"

The original poster added, "I really did not want appliances that connect to Wi-Fi, but there was a mixup… Can it still be hacked?"

Most of the replies suggested that leaving the appliance off any network greatly reduces the practical risk compared with using it as a connected device.

"Short answer: Nope, you're totally fine," one commenter wrote. "It's not connected to your WiFi or any of your devices, so I wouldn't worry about it."

Another said, "If you never enroll it in Wi-Fi, it generally cannot be reached through your home network or the vendor's cloud."

Still, the responses were not entirely dismissive. One user wrote, "From a purely theoretical standpoint, there's a nonzero chance of someone being able to connect to your water heater. But the chance of that happening is quite low, and gets even lower if a bad actor doesn't have physical access… The most someone would be able to do (if they did get in) is view your water temperature, and maybe change it."

A few users noted unusual scenarios, such as someone nearby trying to catch the unit in setup mode or a more advanced attacker targeting the device's firmware.

Taken as a whole, though, the thread treated an offline water heater as an extraordinarily minimal everyday cybersecurity concern for a typical home.

More background

The discussion reflects general consumer concerns around connected appliances. While people want lower energy bills and better performance, they do not necessarily want every major device in the house connected to the internet.

Once internet-connected devices join a home network, they can create new security weak points if their software is poorly protected or rarely updated.

If you are buying a new water heater, it is easy enough to avoid these concerns. Confirm whether Wi-Fi is optional and whether you can use the unit fully without ever completing app setup.

If you do decide to connect it to a network, use a strong password, install firmware updates, and consider placing smart appliances on a separate guest network.

Homeowners looking to cut bills may also want to focus less on whether a heater is "smart" and more on whether it is efficient. Cala makes customizable heat pump water heaters that help homeowners decrease their energy bills by heating water exactly when it's needed.

Where can I learn more?

The articles below dig into the same tradeoffs that came up in the Reddit thread, from utility costs and maintenance to the peace of mind that comes with simpler equipment choices. 

• Homeowners weighing replacements found tankless water heater advice from plumbers raised fresh efficiency questions.

• A common winter routine showed how a home heating hack can quietly waste money and energy.

• A home expert said leak detection advice can save thousands by catching plumbing trouble early.

The common thread is that good appliance choices usually hinge on function, efficiency, and how much upkeep a system will need over time.

Get TCD's free newsletters for easy tips, smart advice, and a chance to earn $5,000 toward home upgrades. To see more stories like this one, change your Google preferences here.