Tapo DL130 Review: A Deadbolt That Reads Your Palm
TP-Link's palm access smart lock scans the veins under your skin in under half a second, keeps that scan on the lock instead of in the cloud, and gives you seven separate ways through your own front door.
https://www.youtube.com/watch?v=Eunuh9rrgtY
THE VERDICT
The palm scan is the headline and it deserves to be. You hold your hand a few inches off the lock, the deadbolt turns, and you walk in with both arms full of groceries. But the reason I would recommend the Tapo DL130 to most families is duller and more useful than that: it gives you seven independent ways through the door, so there is no single thing you can forget, lose or run out of battery on. A kid with no phone and no key gets in with a palm or a code. You get a notification when they do. The biometric data stays encrypted on the lock rather than going to a server, which is the right answer and not the universal one. It is BHMA Grade 2 and IP65, the main battery is rated for about a year, and the install was the easiest I have done on a smart deadbolt. What it does not have is a camera, and the palm sensor draws more power than the fingerprint reader does. At around $195 it is priced as a flagship, and it behaves like one.
There are two situations that sell a smart lock, and neither of them is about technology. The first is standing at your own front door with both hands full of grocery bags, digging for keys you cannot reach. The second is a kid who needs to get into the house after school and has no key, no phone, and no reliable way of holding on to either. This TP-Link Tapo DL130 palm access smart lock review is about a deadbolt that solves both, and the way it solves the first one is genuinely strange the first time you see it.
You hold your hand a few inches in front of the lock. Nothing touches anything. The deadbolt turns and the door opens.
Seven ways into your house
Before the palm scanning, this is the thing worth understanding, because it is the part that actually changes how a household works. Most locks give you one way in and one way to fail. This one gives you seven, and they fail independently.
✦ Palm vein scan. Hold your hand up, walk in. Nothing to touch, nothing to carry.
✦ Fingerprint. A thumb on the reader locks or unlocks it. This is the one I reach for most out of habit.
✦ Keypad PIN. The code your kids remember and your dog walker gets for one afternoon.
✦ The Tapo app. Press and hold on your phone from anywhere with a signal.
✦ Voice. Alexa, Google Assistant and SmartThings are all supported.
✦ Physical key. Still in the box, still works, still the thing you want when everything else has had a bad day.
✦ Backup power. A built-in reserve battery and a Type-C port, so a flat main battery is an inconvenience rather than a lockout.
That last one matters more than it reads. The standard nightmare with any battery-powered smart lock is being locked out by a dead cell, and TP-Link has answered it twice over.
How the palm scan actually works
This is not a photograph of your hand. The DL130 uses near-infrared to read the pattern of veins underneath your skin, which is why it is not confused by a palm that is wet, dirty or scraped up, and why a picture of your hand is no use to anyone. TP-Link rates recognition at 99% accuracy in under half a second, and half a second is about right — the door is open before you have finished the gesture.
There is a working distance to learn. The manual asks for roughly 2.6 to 6 inches from the sensor at about a 20 degree tilt, which sounds fussier on paper than it is in practice. After a day you stop thinking about it and just put your hand up.
When I was a kid, scanning your palm to get into your own house was something that happened in films. It is now a $195 deadbolt you fit with a screwdriver.
Your palm never leaves the lock
This is the specification I would check first on any biometric lock, and it is the one the DL130 gets right. The palm and fingerprint data is encrypted and stored locally on the lock itself, not uploaded to a server. There is no cloud copy of your family's biometrics to be leaked, subpoenaed or sold. TP-Link quotes 128-bit AES with SSL/TLS on the connection.
Capacity is generous enough that you will never think about it: 50 palm profiles, 100 fingerprints and 200 access codes. That covers a family, the grandparents, a house sitter and a decade of one-time codes for visitors.
The easiest smart lock install I've done
I have fitted a number of these now, and this was the least painful of them. It replaces a standard deadbolt, it comes with a paper template and a ruler in the box, and both halves have rubber facing so they do not chew up the door. The whole thing is a screwdriver job.
1. Charge the battery while you install. It arrives flat. Put it on the charger before you take the old lock off and you will not be waiting around at the end.
2. Take the old deadbolt out and fit this one. Exterior unit through the door, interior plate on the back, screws in.
3. Add it in the Tapo app. Choose door lock, hold the reset button for five seconds, and the app finds it.
4. Join it to Wi-Fi and name it. Built-in dual-band Wi-Fi, so there is no hub to buy or find a socket for.
5. Calibrate the door sensor. Open the door, close the door. That is the whole calibration.
6. Register your palm and fingerprint, then let it pull the firmware update before you start using it.
The one setting worth thinking about rather than accepting is the auto-lock timer. The idea is good — the door locks itself if you forget — but the shortest options are aggressive enough to lock you out while you are carrying the second load in from the car. I set mine to 15 minutes.
What the app adds that the lock can't
The Tapo app is one of the better smart home apps and this is the same one that runs their cameras and plugs, so if you already have Tapo gear the lock simply appears alongside it. Press and hold the tile to unlock, press again to lock.
Knowing when everyone got home
This turned out to be the feature I use daily rather than the palm scan. Every lock and unlock throws a notification, and the event log keeps a timestamped history by user. If you are at work, you know the moment your kid is through the door — no phone required at their end, no check-in text, no wondering. For a household with kids who are old enough to be home alone and not old enough to be reliable with keys, that is the actual product.
The rest of the settings
One-time PIN codes for visitors. Per-user management, so each family member gets their own palm and fingerprint enrolment and shows up under their own name in the log. Device sharing. A separate emergency code. Door jam and left-open alarms. Voice prompts, lock calibration, log backup, and voice assistant setup. Battery state for both the main cell and the reserve.
Power, and the part where it doesn't lock you out
The main battery is a 7,800 mAh rechargeable pack that TP-Link rates at up to a year in Wi-Fi mode, based on their lab figure of 20 unlocks a day. Behind it sits a 500 mAh built-in backup, and there is a Type-C port for emergency power if you somehow run both down. You charge a lock now, which is the trade you are making, but you charge it about as often as you change the clocks.
Build, rating and the doorbell nobody mentions
It is BHMA Grade 2 certified for residential security and IP65 rated, with the exterior half specified from -30°C to 70°C. It is a heavy piece of hardware in the hand, in the way good locks are.
There is also a doorbell built into the keypad. Press it and an indoor chime sounds. It is not advertised loudly and it is not why you would buy this, but if you have been meaning to sort out a doorbell as well, that is one fewer thing on the wall.
Model TP-Link Tapo DL130 Palm Access Smart Lock Wi-Fi Deadbolt
Price at testing $194.99 at the Tapo store
Unlock methods Palm vein, fingerprint, keypad code, Tapo app, voice assistant, Bluetooth, physical key
Palm recognition Near-infrared vein scan, 99% accuracy, under 0.5 s (manufacturer figures)
Working distance About 2.6–6 in at roughly 20° tilt
Biometric storage Encrypted and stored locally on the lock
Encryption 128-bit AES with SSL/TLS
Capacity 50 palms, 100 fingerprints, 200 access codes
Security rating BHMA Grade 2
Weather rating IP65
Main battery 7,800 mAh rechargeable, rated up to 1 year in Wi-Fi mode
Backup battery 500 mAh built in, plus Type-C emergency power
Connectivity Dual-band 2.4/5 GHz Wi-Fi, no hub required, Bluetooth 5.0
Voice assistants Amazon Alexa, Google Assistant, SmartThings
Extras Door sensor with auto-lock, built-in doorbell, event log, one-time codes
Operating temperature Exterior -30°C to 70°C, interior -10°C to 55°C
What I'd keep
✦ Seven ways in. Not a gimmick list — it means no single point of failure between your family and the house.
✦ Biometrics stay on the lock. Local, encrypted, no cloud copy. This should be standard and it isn't.
✦ Built-in dual-band Wi-Fi. No hub to buy, no extra box to find a socket for.
✦ The event log and notifications. The feature that quietly justifies the whole thing if you have kids.
✦ Dual battery with Type-C backup. A flat battery is an annoyance, not a lockout.
✦ BHMA Grade 2 and IP65. Rated hardware, not just a smart gadget bolted to a door.
What I'd change
✦ No camera. At this price and with a doorbell already built in, a lot of people will expect to see who is at the door, and you can't.
✦ The palm sensor is the hungriest way in. Near-infrared scanning draws more power than the fingerprint reader or the keypad, so the feature you bought it for is the one that shortens the charge interval.
✦ It's priced like a flagship. Around $195 buys a lot of keypad deadbolt if you don't want the biometrics.
Should you buy the Tapo DL130?
Buy it if you want the house to work without keys
Families with kids too young for keys or phones, anyone who arrives home with their hands full, and anyone already running Tapo cameras or plugs who wants the lock in the same app. The palm scan is the fun part; the notifications and the seven-way redundancy are the parts you will still care about in a year. You can check the current price here: TP-Link Tapo DL130 on Amazon (affiliate link, commission at no extra cost to you), or direct from TP-Link with code 10TAPODL for 10% off.
Look elsewhere if you want to see who's at the door
If the thing you actually want is video, this is not it, and no amount of palm scanning will change that. Pair it with a doorbell camera or buy a lock with one built in. And if nobody in the house is losing keys, a plain keypad deadbolt does the boring part of this job for a lot less money.