Most hub-free starter kits are not, because Matter over Thread needs a border router. What genuinely runs on your existing Wi-Fi, which device has a measurable payback, and the support and subscription traps regulators have documented.
The phrase “no hub required” is doing more work on product boxes than it can bear. A great many devices sold as hub-free need a piece of hardware sitting quietly in your house doing exactly what a hub does. If you want a genuinely hub-free, subscription-free smart home, the constraint has to shape what you buy, not just how you feel about what you bought.
Here is the constraint, the four devices that satisfy it, and the things that will quietly reintroduce a hub or a monthly charge if you are not watching.
The Thread trap
Matter is the interoperability standard maintained by the Connectivity Standards Alliance, an industry consortium rather than a government body. Its promise, in the CSA’s own words, is “one protocol to connect compatible devices and systems with one another,” so that “devices from multiple brands work natively together.” The current release is Matter 1.5.1, published in March 2026.
Matter runs over two different network layers, and the difference decides whether you need a hub. Over Wi-Fi, a device joins the router you already own. Over Thread, it joins a low-power mesh network that cannot reach the rest of your house on its own.
The Thread Group’s own border router white paper states the position without hedging: “In principle, a Thread mesh without a Border Router can use Matter if configured properly; however, in practice, a Border Router is required to enable the majority of use-cases.” The reason is that phones and speakers do not have Thread radios, so something must translate between the mesh and ordinary IP networking.
A Thread border router is a hub. It is usually hidden inside a smart speaker, a display or a streaming box, which is why people buy one without noticing they have. If your household already owns one and is content to, fine. If your requirement is genuinely no extra box, the answer is Wi-Fi.
| Protocol | What it is | What it needs |
|---|---|---|
| Wi-Fi | Standard IP networking on 2.4 and 5 GHz; Matter runs natively over it | Your existing router. Nothing else. |
| Thread | Low-power 802.15.4 mesh carrying IPv6 | A Thread border router, usually built into a speaker, display or streaming box |
| Zigbee | Low-power 802.15.4-family mesh, maintained by the same industry alliance as Matter | A coordinator or gateway device |
A practical note on Wi-Fi: cheap devices are usually 2.4 GHz only. If your router presents a single combined network name, some devices will refuse to join during setup. That is a configuration annoyance rather than a design flaw, and it is worth knowing before you conclude the device is broken.
The four devices, and why these four
The selection principle is payoff per dollar, with the added condition that each must work over Wi-Fi and must do something useful with no cloud subscription attached.
Smart plugs. The most useful thing you can buy first, because they convert anything with a physical switch into something schedulable. Lamps, fans, a coffee maker, seasonal lights. They fail safely: if the cloud service dies, the plug is still a plug.
Smart bulbs, but only where you dim. Bulbs are more expensive than plugs and do less in a room where the light is simply on or off. Their honest case is rooms where you change the brightness or colour temperature regularly. Everywhere else, a plug and an ordinary bulb is the better buy.
A smart thermostat. The only device on this list with a measured energy payback, discussed below.
A leak or open-door sensor where the consequence is expensive. Under the water heater, behind the washing machine, on a door you forget. These are cheap, and the value is entirely in the alert rather than in any automation.
What is deliberately absent: cameras, video doorbells and smart locks. Not because they are bad, but because they are the categories where the subscription and the security exposure both live, and a starter kit defined by no hub and no subscriptions is not the place for them.
The thermostat is the only one with real arithmetic
ENERGY STAR still certifies smart thermostats and publishes a savings figure. Its FAQ states that “on average, savings are approximately 8 percent of heating and cooling bills or 50 dollars per year.” Unusually, that number is not a laboratory estimate: certification rests on “real-world data from a large sample of homes that use the product,” analysed and aggregated “to show savings that reflect the actual energy usage.”
The context figure from the same programme: “For the average American household, almost half of the annual energy bill goes to heating and cooling, that’s more than 900 dollars a year.”
Payback then becomes simple division. The price brackets below are illustrative, not sourced; the 50 dollar annual saving is ENERGY STAR’s.
| If you pay | Years to pay back at 50 dollars a year |
|---|---|
| 80 dollars | 1.6 |
| 130 dollars | 2.6 |
| 200 dollars | 4.0 |
| 250 dollars | 5.0 |
Two honest caveats. Fifty dollars is an average across a large sample, and your own saving depends on your climate, your house and how badly you were managing the schedule before. And if you already turn the heating down when you leave and at night, much of the available saving has already been captured and the device will not find it twice.
The lighting side is smaller than people assume. DOE reports that “lighting accounts for around 15 percent of an average home’s electricity use” and that “the average household saves about 225 dollars in energy costs per year by using LED lighting,” with LEDs using “up to 90 percent less energy” than incandescent bulbs. That saving comes from the LED, not from the smart part. A smart bulb that is off for an extra hour a day saves a fraction of a fraction.
Standby power is the quiet one. Lawrence Berkeley National Laboratory’s standby power project estimates that devices drawing power while apparently off “amount to 5 to 10 percent of residential electricity use.” Smart plugs can cut some of that, though the plugs themselves draw a small standing load, so the gain is real but modest.
One label you cannot use yet, and one that no longer exists
The FCC created a voluntary cybersecurity label for consumer connected devices, the US Cyber Trust Mark, in a March 2024 order published in the Federal Register. The intent is that “consumers who purchase an IoT product that bears the FCC IoT Label can be assured that their product meets the minimum cybersecurity standards,” with “a QR code linked to a dynamic, decentralized, publicly available registry of more detailed cybersecurity information.” Its technical basis is NIST’s consumer IoT baseline, NIST IR 8425.
The programme has had a difficult two years. The originally designated lead administrator withdrew, the FCC reopened applications in January 2026, and a new administrator was named in April 2026. We could not find any primary source establishing that labelled products are on shelves. Treat the mark as a thing that exists in rule and does not yet exist in a shop, and do not wait for it.
The label that did exist for bulbs is gone. EPA finalised “the sunset of the ENERGY STAR specifications for lamps and luminaires effective December 31, 2024.” Recessed downlights continue under a separate specification. ENERGY STAR has never certified smart plugs. So as of 2026 the only device on the four-item list you can choose using an ENERGY STAR label is the thermostat.
The support question nobody answers
A smart device is a computer that stops being smart when the updates stop. In November 2024 the FTC published a staff review of 184 connected devices across 64 product categories and found that “nearly 89 percent of the manufacturers’ product webpages did not disclose the connected device support duration or end date.”
The staff report is blunt about the consequence: “If the manufacturer stops providing these updates, the product may lose its smart functionality, become insecure, or completely cease to operate.” It also notes that failing to disclose support duration on a product sold with a written warranty “may violate the Magnuson Moss Warranty Act,” and that marketing features and then withdrawing the updates that sustain them “raises concerns about consumer harm resulting from deceptive practices.”
The FTC’s accompanying consumer alert suggests searching the manufacturer’s site before buying, contacting the company if nothing is stated, and thinking about what the device does after updates stop. That last test is the useful one, and it is why a plug beats a camera in a starter kit. A smart bulb whose cloud service dies still turns on from the wall switch. A camera whose service dies is a paperweight.
Subscriptions, and the rule that no longer protects you
Plugs, bulbs, thermostats and leak sensors do their core job without a monthly charge. Cameras, doorbells and anything offering cloud video history generally do not, and the free tier tends to shrink after purchase.
If you are relying on a federal right to cancel easily, you should know that it does not currently exist. The FTC’s click-to-cancel rule was vacated by the Eighth Circuit in 2025, and in February 2026 the Commission published a final rule that “revises the Negative Option Rule to restore it in the form it existed before the 2024 Rule became effective.” What applies now is the 1973-era prenotification rule governing physical merchandise clubs, which contains no modern cancellation requirement. The FTC opened a new rulemaking in March 2026; it is at the advance-notice stage.
So the protection is your own record-keeping. Note what each device does with no subscription, in writing, on the day you buy it.
Twenty minutes of security work
CISA’s home Wi-Fi guidance contains one instruction that is unusually well matched to this situation: “Connect any smart home and other IOT devices to your Guest Wi-Fi if internet access is the only thing they require. This will prevent these devices from discovering other devices on your home network.”
The rest of its list is short. Update router firmware, because “routine updates will protect you against known vulnerabilities.” Change default credentials, because “your default router information may be publicly available for anyone to find.” Disable UPnP, because “threat actors can use UPnP to spread malware to devices in your network and control them remotely.” Disable WPS and remote management.
That this matters is not hypothetical. In May 2023 the FTC obtained a settlement requiring 5.8 million dollars in refunds from Ring, alleging the company allowed “any employee or contractor to access consumers’ private videos” and failed to implement basic defences, with roughly 55,000 US customers’ accounts compromised. On the same day, Amazon agreed to a 25 million dollar civil penalty over allegations that it retained children’s Alexa voice recordings indefinitely and failed to honour parents’ deletion requests.
The honest summary
A hub-free, subscription-free smart home is achievable, and it is smaller than the version in the advertising. Four Wi-Fi devices, one of which has a measurable payback and three of which are conveniences. A guest network. A written note of what each thing does when its company loses interest.
What you are really buying is a set of small frictions removed, and that is a legitimate thing to want. It is worth being clear-eyed that the industry’s own record on software support is poor by its own regulator’s measurement, that the security label meant to fix the trust problem is two years late, and that the cancellation protections people assume exist were withdrawn in February. Buy devices that degrade into dumb ones, and none of that can cost you much.
General information, current as of September 2026, and not personalised advice. Standards, labels and rules change; check the primary sources before relying on any figure here.
Frequently asked questions
Does Matter mean I do not need a hub?
Not always. Matter over Wi-Fi needs no hub. Matter over Thread needs a Thread border router, which is a hub even when it is built into a speaker or TV box.
Which smart home devices carry an ENERGY STAR label?
Only thermostats among the four here. EPA sunset the ENERGY STAR specifications for lamps and luminaires at the end of 2024, and smart plugs were never a certified category.
Is there a federal right to cancel a subscription easily?
Not currently. The click-to-cancel rule was vacated in 2025 and the FTC restored the older rule in February 2026. A new rulemaking is at an early stage.
How should I secure smart devices?
CISA advises putting them on your guest Wi-Fi network, updating router firmware, changing default credentials and disabling UPnP and remote management.
Sources
- Connectivity Standards Alliance, Matter
- Thread Group, Thread Border Router white paper
- Federal Register, FCC Cybersecurity Labeling for Internet of Things
- Federal Trade Commission, Smart Device Makers Failure to Provide Updates May Leave You Smarting
- Federal Trade Commission, consumer alert on smart device software updates
- Federal Trade Commission, action against Ring over privacy and security failures
- Federal Register, restoration of the Negative Option Rule, February 2026
- CISA, Securing Your Home Wi-Fi
- ENERGY STAR, Smart Thermostats FAQ
- ENERGY STAR, lighting specification sunset memo
- Department of Energy, Lighting Choices to Save You Money
- Lawrence Berkeley National Laboratory, Standby Power


