Matter 1.4.2 Improves Security, Standardisation, and More…

When Matter was launched, the aim was to enable device makers to build reliable, secure smart home products, and to help users set up and expand their connected homes. The CSA (Connectivity Standards Alliance) claims the release of Matter 1.4.2 adds further improvements towards that goal.

This version of Matter introduces changes that improve security, streamline certification, optimise infrastructure, and enhance user experience through better coordination across the ecosystem. The updates are based on industry best practice and feedback from products already in use.

The good news is that Matter 1.4.2 is fully backwards compatible. Some enhancements require coordinated support between device manufacturers and ecosystem platforms.

Key changes in Matter 1.4.2

Wi-Fi-only commissioning
This release adds support for Wi-Fi-only commissioning using Wi-Fi Unsynchronised Service Discovery (USD). Devices can now be added to Matter ecosystems over Wi-Fi without needing Bluetooth Low Energy (LE) radios. For manufacturers, this can reduce cost and hardware complexity where Bluetooth LE was only used for commissioning. Existing Wi-Fi-only products can adopt Matter through a firmware update without hardware changes. For users, it allows a wider range of devices to be set up without requiring Bluetooth LE, although wider adoption by commissioning devices such as phones, hubs and smart speakers will take time.

Security updates

• Vendor ID (VID) verification: Controllers can now verify that Admins installed on a device are from the claimed vendor. This improves trust in multi-Admin environments and reduces the risk of impersonation attacks.
• Access Restriction Lists (ARLs): For network infrastructure devices such as routers and access points (Network Infrastructure Managers or NIMs), ARLs restrict access to sensitive settings and data to trusted Controllers only.
• Certificate Revocation Lists (CRLs): Matter now supports mechanisms to revoke unused or compromised Device Attestation Certificates, allowing ecosystems to block insecure devices from joining.

For the consumer, these changes provide stronger safeguards against unauthorised access, tampering and insecure devices.

Improved scenes management
Scene support is now certifiable, providing a standard way for Controllers to define and activate scenes across devices. This includes support for timed actions such as light fading, and reduces the number of commands needed to coordinate devices. For end users, this may result in faster, more reliable scene activation, depending on implementation by their ecosystem.

Efficient network communication
The “Quieter Reporting” feature is extended to more devices and functions. Devices report changes only when necessary, reducing network traffic and improving battery life. Users may see faster response times and longer battery life, particularly in larger installations.

Standardised node reconfiguration
Devices can now notify Controllers of capability changes after commissioning, for example after a firmware update, without needing a reboot or re-commissioning. For users, new features become available without extra setup.

Consistent endpoint unique IDs
Endpoints, such as individual plugs on a power strip, now retain the same ID across Admins and recommissions. This avoids duplicate entries and confusion when devices are reconfigured or reconnected.

Standardised robot vacuum cleaner behaviours
Expected behaviours for robot vacuums are now defined, improving consistency in how they handle sequential commands. For users, this should mean more predictable operation regardless of brand.

Network infrastructure requirements

• Thread Border Routers must support at least 150 devices and be Thread 1.4 certified.
• Wi-Fi access points must support 100 simultaneous associations and Target Wake Time (TWT) for better power efficiency.

These changes aim to ensure networks can scale without performance issues.

Certification process updates
Test plans, scripts and tools have been updated, including new test cases for valves, fans, access control and the interaction data model. For users, this should result in better-tested products reaching the market sooner.