Ubiquiti AI Key: Offline Use & Security FAQ

The Ubiquiti AI Key does not require an internet connection for core recording and on-device AI detection, but it does need internet access for initial setup, firmware updates, and remote viewing via the UniFi portal. This FAQ explains exactly what works offline, what does not, and how to secure the device when you intentionally keep it disconnected from the internet.

Background: What the AI Key Actually Does

The Ubiquiti AI Key is a small appliance that plugs into the USB-C port of a UniFi Protect network video recorder (like the Cloud Key Gen2 Plus or a UniFi NVR). It adds on-device artificial intelligence to your camera system, specifically person, vehicle, and animal detection. It does not replace the NVR; it works alongside it, processing video streams from up to 20 cameras (depending on the model) and tagging events with AI classifications.

Unlike cloud-based AI cameras, the AI Key processes everything locally. Video frames are analyzed on the device itself, and no footage is sent to Ubiquiti’s cloud for analysis. This design choice has two big consequences: it works without an internet connection, and it keeps your video data on your own network.

How Offline Use Works: What Functions Remain

When the AI Key has no internet connection, it still performs its primary job: analyzing live video and generating AI metadata for recorded events. The Protect application on your local network will still show AI classifications (person, car, animal) on the timeline, and you can search for those events locally. The NVR continues to record 24/7, and the AI Key tags those recordings in real time.

What stops working offline:

• Remote access – Viewing your cameras or AI events from outside your home network requires the UniFi portal, which needs internet.
• Firmware updates – The AI Key checks for and downloads updates from Ubiquiti’s servers. Without internet, you are stuck on the current firmware.
• Initial setup – Adopting the AI Key into your Protect system requires the device to reach Ubiquiti’s adoption servers, even on a local network.
• Cloud account features – Any feature that relies on your Ubiquiti account (like push notifications to your phone) will not work.

If your internet goes down temporarily, the AI Key simply continues local processing. When the connection returns, it re-syncs any pending metadata and notifications.

Security Considerations for Offline Operation

Running the AI Key without internet reduces its attack surface significantly. There is no remote access path, no cloud dependency, and no firmware updates that could introduce vulnerabilities (though you also miss security patches). However, offline does not mean immune to local threats. The AI Key is still a network device, and it can be compromised by malware already on your LAN or by a rogue device plugged into the same switch.

Key security practices for offline or online use:

• Keep the AI Key on a separate VLAN or subnet from your general IoT devices, so a compromised smart plug cannot reach it.
• Disable unused ports and services in the Protect settings (e.g., SSH, if you do not need it).
• Use a strong, unique password for your UniFi account and enable two-factor authentication if you ever connect it to the internet.
• If you keep it offline permanently, you must manually update firmware by downloading the file from Ubiquiti on another computer and uploading it via the local Protect interface.

How to Set Up for Offline-Only Use

You can configure the AI Key to work without internet after the initial setup, but the first-time adoption is the tricky part. Here is the process:

1. Connect the AI Key to your NVR and your network as usual.
2. During adoption, the Protect app will attempt to reach Ubiquiti’s servers. You must allow this once – there is no fully offline adoption path.
3. After adoption, go to Protect settings and disable any cloud features you do not use (e.g., remote access, cloud backups).
4. Disconnect the AI Key’s internet access at the router level (block its MAC address from WAN) or put it on a VLAN with no internet route.
5. For firmware updates, download the update file from Ubiquiti’s website on a separate computer, then upload it through the Protect interface’s maintenance section.

This approach gives you the privacy of local-only AI processing while still allowing you to apply security patches when needed.

Common Problems and Misconceptions

Misconception: “The AI Key stores video.� It does not. It only processes video that the NVR already records. If you remove the AI Key, your camera footage is untouched; you just lose AI tagging.

Misconception: “Offline means no AI.� Wrong – the AI runs locally. Offline only disables remote access and cloud features.

Problem: AI Key shows “offlineâ€� in Protect even though it is plugged in. This usually happens when the USB-C connection is loose or the NVR’s USB port is not providing enough power. Try a different port, a powered USB hub, or reseat the device.

Problem: AI detections stop after a power outage. The AI Key may need a few minutes to re-index the video buffer. If it does not recover, reboot the device through Protect.

Comparing the AI Key to Cloud-Based AI Cameras

The main alternative is a camera with built-in AI that sends events to a cloud service (e.g., Ring, Nest, or some Reolink models). The trade-offs are clear:

• Privacy: AI Key keeps all video and metadata on your network. Cloud cameras upload clips to the vendor’s servers, even if only for a few seconds.
• Reliability: AI Key works during internet outages. Cloud cameras lose AI detection and often recording during outages.
• Cost: AI Key has a hardware cost but no monthly subscription. Cloud cameras often require a subscription for person/vehicle detection.
• Convenience: Cloud cameras are easier to set up and access remotely. AI Key requires a UniFi Protect system already in place.

Frequently Asked Questions

Will the AI Key work if my internet is completely down for days? Yes. It will continue to analyze and tag video locally. When the internet returns, it will sync any pending metadata and notifications to the Protect app.

Can I use the AI Key without a UniFi account? No. You need a Ubiquiti account to adopt the device and to manage the Protect system. The account is free, but it is required even for local-only operation.

Does the AI Key send any video to the cloud? No. Video analysis is done on the device itself. The only data sent to Ubiquiti’s servers are device status, firmware checks, and (if enabled) push notification metadata – never video frames.

Can I block the AI Key from the internet after setup without breaking anything? Yes. Once adopted, you can block its internet access at the router. Local recording and AI detection will continue. You will lose remote viewing and automatic firmware updates.

How do I update the AI Key firmware if it is offline? Download the firmware file from Ubiquiti’s website on any computer, then go to the Protect app’s system settings, find the AI Key, and choose “Upload Firmware.â€� The file is transferred locally over your network.

Is the AI Key a security risk if left online? Like any network device, it has a potential attack surface. Ubiquiti regularly patches vulnerabilities, so keeping it online and updated is generally safe. If you are highly security-conscious, put it on a separate VLAN and disable remote access.

Related

• Niche Milwaukee Power Tools: What They’re Used For
• Window Power User Overnight: Real Tips
• Power Supply Calculator: Why Use It Before Upgrading