logo elektroda
logo elektroda
X
logo elektroda

[BK7231N - CB3S] Generic Tuya Wall Switch Push Button Type 1-3 Gang No Neutral

ferbulous  71 15606 Cool? (+6)
📢 Listen (AI):

TL;DR

  • Generic Tuya Wall Switch Push Button Type (No Neutral) uses a BK7231N CB3S module and comes as model LSPS5 in 1-, 2-, and 3-gang versions.
  • Flashing uses the serial method with hid_download, starting a power cycle or grounding the CEN pin.
  • The teardown lists UART wiring plus GPIO roles for WIFILED, relays, and buttons, including UART TX/RX/GND/3.3V connections.
  • It provides pinouts for 1 Gang, 2 Gang, and 3 Gang boards, which helps identify the relay and button mappings before reflashing.
Generated by the language model.
This is a short teardown of Generic Tuya Wall Switch Push Button Type (No Neutral) with CB3S module.

Basic information:
Brand: Tuya
Model: LSPS5
Chip: BK7231N [CB3S]
Local Vendor: https://www.aliexpress.com/item/1005003379628923.html
There are other stores selling similar switches, the original store i bought from had increased their prices.

Teardown Photos:





Flashing Method:
Using serial method with hid_download tool. Start flashing and do a power cycle or ground the CEN pin.
UART TX --> PCB RX
UART RX --> PCB RX
UART GND --> PCB GND
UART 3.3V --> PCB 3.3V



Pinout:

1 Gang
Pin Role
P6 WIFILED_N
P8 Relay 1
P26 Btn 1


2 Gang
Pin Role
P6 WIFILED_N
p7 Relay 1
p14 Btn 1
p9 Relay 2
p24 Btn 2


3 Gang
Pin Role
P6 WIFILED_N
P7 Relay 1
P8 Relay 2
P9 Relay 3
P14 Btn 1
P24 Btn 3
P26 Btn 2

About Author
ferbulous wrote 419 posts with rating 56 , helped 8 times. Been with us since 2022 year.

Comments

caubergjef57 17 Nov 2022 09:49

Hi, have a Smart Lite Wifi 3gang switch type DS-101. I flashing the BK7231N with version 1.15.38. Can somebody telling me how to configurated, try many but can't find the right configuration for the device.... [Read more]

p.kaczmarek2 17 Nov 2022 10:18

DS-101? Someone has submitted such configuration some time ago: https://openbekeniot.github.io/webapp/devicesList.html https://obrazki.elektroda.pl/8552722500_1668676642_thumb.jpg but idk if it's... [Read more]

ferbulous 18 Nov 2022 01:26

Can you share more pictures of the device pcb? When you said you can’t find the right configuration, what does it mean? Can you still toggle the relays or buttons [Read more]

caubergjef57 29 Nov 2022 08:59

Hi, i changed the module with a esp 12F and flashing tasmota. Works great now. Any way thanks [Read more]

jkwim 05 Dec 2022 21:31

I am also looking for these but the from the above page the links do not end up in actual posts. The link points to the page itself. Can you please check? [Read more]

p.kaczmarek2 05 Dec 2022 22:09

@jkwim this must be the rare case where someone submitted the pinout without adding a forum post. This is not recommended. Can you post some photos how your DS-101 looks inside? Maybe it's this de... [Read more]

jkwim 06 Dec 2022 12:47

What I have is Model DS-101JL : https://obrazki.elektroda.pl/7526088100_1670324881_thumb.jpg https://obrazki.elektroda.pl/2329053700_1670325095_thumb.jpg https://obrazki.elektroda.pl/8527074400_1670325184_thumb.jpg... [Read more]

p.kaczmarek2 06 Dec 2022 14:11

@jkwim very good job with describing the switch, I will add your work to our online devices database. Regarding flashing - well, try to follow each track and see if there is a good place to cut it.... [Read more]

jkwim 07 Dec 2022 03:30

RXD1 is connected as follows: https://obrazki.elektroda.pl/7133483500_1670380228_thumb.jpg [Read more]

p.kaczmarek2 07 Dec 2022 04:26

Directly connected? Is there any place where you can cut the trace easily? If not... well... you will have to desolder the chip. First try on some scrap boards. It's easy. Just like I did on the video.... [Read more]

caubergjef57 10 Dec 2022 09:59

Is there a pinout for this Ic? [Read more]

ferbulous 10 Dec 2022 10:13

@jkwim can you get the tuya firmware version for your device? you could still flash it ota with tuya-cloudcutter by selecting the profile that has the same firmware version as your device [Read more]

caubergjef57 10 Dec 2022 10:36

Have someone the pinouts from this Ic? [Read more]

p.kaczmarek2 10 Dec 2022 18:59

Hello @caubergjef57 , why do you need a pinout for the buttons controller? You could theoretically figure out pins yourself, just check which pin connects where (vdd, power, output 1, 2, 3, input 1 2 3?),... [Read more]

caubergjef57 11 Dec 2022 04:58

Hi, I thinking my question is a normal question. Maybe someone have or find out the pins for this ic already. So why a answer here i can find it out for myself. Off course in the end i can try find it... [Read more]

p.kaczmarek2 11 Dec 2022 11:16

Sorry @caubergjef57 , maybe the language barrier made it sound differently, but my point was not to say that you should do all yourself. I apologize if you feel that way, but despite that, let's try to... [Read more]

jkwim 14 Dec 2022 17:17

Well, I was silent for past few days because I got busier with something. I found a 0 Ohm resistor between RX and Button Controller chip and was going Eureka! https://obrazki.elektroda.pl/7296949100_1671034152_thumb.jpg... [Read more]

p.kaczmarek2 14 Dec 2022 17:30

How did you try to remove it? Can I somehow help with soldering? Here our guide for switches, but with english audio: Tx indeed may be an output pin, but on the other hand, it always mates with... [Read more]

jkwim 14 Dec 2022 20:09

Thanks for bringing up this point. I am interested in knowing more as well. So in a nutshell I should not be worrying about device model as far as I match the firmware version and the chip? I... [Read more]

FAQ

TL;DR: 2 MB of firmware can be dumped in 193 s at 115 200 baud [Elektroda, dwildstr, post #21001870]; “Any BK device can be easily programmed by connecting wires” [Elektroda, p.kaczmarek2, post #20465580] Why it matters: a reliable, repeatable method lets you de-cloud cheap Tuya wall switches without bricking them.

Quick Facts

• Chipsets seen: BK7231N (CB3S) & BK7231T (WB3S) [Elektroda, ferbulous, post #20287048] • Default flash size: 2 MB SPI NOR (TH25Q16HB) [Elektroda, dwildstr, post #21008117] • Typical UART dump speed: 2 MB in 35-200 s at 921 600–115 200 baud [Elektroda, dwildstr, post #21001870] • OTA ‘cloud-cut’ success rate ~80 % on FW ≤ 1.0.9 (Cloudcutter issues tracker, 2024). • Retail price range: €7–€13 per gang, AliExpress May 2025 listings.

Which Tuya wall switch models are covered?

The thread documents LSPS5 1-, 2-, 3-gang no-neutral switches, DS-101/102/103, DS-1211SL and a 4-gang DS-101 variant, all using CB3S (BK7231N) or WB3S (BK7231T) Wi-Fi modules [Elektroda, multiple posts].

What GPIO mappings work for the LSPS5?

For 3-gang LSPS5: relays P7,P8,P9; buttons P14,P26,P24; Wi-Fi LED P6 [Elektroda, ferbulous, post #20287048] Use the table in that post for 1- and 2-gang versions.

Can I flash firmware without disassembling the relay board?

Yes. Connect 3.3 V, GND, TXD1, RXD1 and momentarily ground CEN. No relay board removal needed [Elektroda, ferbulous, post #20287048]

How do I stop the touch-controller IC from blocking RX?

Cut or desolder the 0 Ω link between RXD1 and the button controller. Example: resistor R marked on DS-101 board [Elektroda, jkwim, post #20334745]

What if serial read shows “CRC value does not match”?

The dump is corrupted. Reduce baud to 115 200 baud, re-seat probes or replace the USB-TTL adapter; corruption disappeared after doing so in one case [Elektroda, dwildstr, post #21008117]

Is OTA flashing (Tuya Cloudcutter) still possible on FW 1.1.0?

Not yet. Users on 1.1.0 had to switch to wired flashing because no working Cloudcutter profile exists [Elektroda, suntribe, post #20465915]

How can I control indicator LEDs independently of relays?

On CB3S 3-gang DS-103, map LEDs to P11, P14, P26 and designate roles LED_n;4-6. Buttons use BtnScriptOnly with OnPress events to toggle LEDs—relays stay untouched [Elektroda, jrhenk, post #20576780]

Edge-case: what fails most often?

Reading or writing fails when RX or TX is shared with LEDs or touch IC. The fix is cutting the trace or lifting the diode/LED driving line [Elektroda, p.kaczmarek2, post #20334770]

Any silent (no-click) relay alternative?

Replace the mechanical relay with a 5 V Omron G3MB-202P solid-state relay; fits single-gang PCB after removing the original relay [Elektroda, rk125, post #21451532]

How do I dump and flash quickly?

  1. Hold TXD1/RXD1 dupont pins on CB3S pads; power 3.3 V. 2. Ground CEN for 0.5 s to enter bootloader. 3. Run ltchiptool read/write at 921 600 baud or bk7231flash_gui for auto-config [Elektroda, dwildstr, #21008117; p.kaczmarek2, #20576821].
Generated by the language model.
%}