Port 5540Matter

Matter smart-home devices use TCP and UDP port 5540 for IPv6 operational communication on local networks.

transport
tcp · udp

2 transports registered

in transit
encrypted

payload protected on the wire

assignment
official

registered with iana

risk
3/10

caution

lookups
0

rank 993 of 5,503 · top 18%

also known as Matter Operational Discovery and Communication

Technical Details

what runs on :5540

Matter uses IPv6 and assigns port 5540 for operational communication over both UDP and TCP; UDP is the usual transport, while TCP is available for supported Matter traffic. Messages use Matter's own framing and secure-session mechanisms rather than TLS: commissioning can establish a PASE session, and normal fabric operation typically uses CASE. Operational discovery is separate and commonly uses DNS-SD/mDNS on UDP 5353.

Security Information

exposure of :5540

risk score

3/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

network services averages 2.6 across 1,650 ports — this one sits 0.4 above.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

Matter operational messages are protected by Matter secure sessions, but that does not make an exposed device safe to reach from the public internet. These endpoints are intended for trusted local networks; restrict access to the relevant LAN or fabric and avoid port forwarding. Discovery metadata may be visible on the local link even though session traffic is encrypted.

the 8 most looked-up other ports in network services — 1,650 ports carry that label.

risk mix of the 8 listed

  • caution100%

0 of 8 encrypted