[BK7231T/WB2S] Feit Smart Plug from Costco BPPLUG/WIFI/3

caver01 11 Jan 2023 21:26 Cool? (+2)

I was finally able to successfully flash this smart plug from Costco. Purchased as a 3-pack, there are several variants out there, but I wanted to share with the world the success I now had.

Feit Smart Plug from Costco BPPLUG/WIFI/3

Flashed OpenBK7231T/OpenBeken release 1.15.307 using OTA via Tuya-Cloudcutter.

My cloudcutter host is a Raspberry Pi 3b+ and after pulling recent updates from the cloudcutter repo, it now has a pair of device profiles under Feit for two variants of this smart plug. Mine has the WB2S module which is BK7231T, but there is another profile for the N variant. These took a while to get a working profile because they exhibited an odd combination of Tuya firmware and developer kit versions.

Ok, so using the updated profile for my plug variant, I was able to exploit OTA, install 1.15.307, and configure for my network. I am using HomeBridge + MQTT to expose this to Apple HomeKit. I used the following module cornfugraiton to make the plug work (it has a single momentary switch, LED):

P10 (RXD1)=LED_n,0
P24 (PWM4)=Rel,0
P26 (PWM5)=Btn,0,0

Once configured for my Wifi, MQTT setup for my broker, and using the above module config, the plug works great, relay switches appropriately (outlet on and off) and the LED turns on when the relay does!

Not sure why LED_n works--my understanding was that _n is for reverse logic. . . Maybe LED is sufficient on P10? The LED should lit (blue) when the switch/relay is enabled (power to the outlet) which it is.

About Author

caver01 wrote 4 posts with rating 2 . Been with us since 2023 year.

Comments

Add a comment

p.kaczmarek2 11 Jan 2023 21:51

Hello, thanks, LED_n is an inversed LEN. Depending on the connections on the board, LED_n will light up when Relay is on or when it's off. Just choose LED_n or LED depending on expected behaviour. You... [Read more]

caver01 11 Jan 2023 22:06

Thanks on the WiFi LED. That is way more useful. As for the FCC docs, the photos show an ESP module which we know is wrong, so they are no longer accurate. I find it odd and a little sneaky that they... [Read more]

p.kaczmarek2 12 Jan 2023 09:38

We also have a feature request for a 'generic state LED', which is a special LED that blinks if WiFI error occurs (no connection or safe mode enabled) and otherwise reflects relay state (if wifi is OK).... [Read more]

caver01 12 Jan 2023 15:27

The blinking LED seems like a good feature. As for other module swaps, yes. Feit also made RGBWW bulbs sold at Costco. These initially had ESP modules a few years ago but when I bought them, they had... [Read more]

Wonko 04 Mar 2023 22:29

Hello! Edit: Since posting this, I submitted the information to the Tuya Cloudcutter project, and they added a profile for it - so hopefully you will see this device in CloudCutter if you clone the... [Read more]

caver01 04 Mar 2023 22:50

Sorry I don’t recall. I think I left comments on the cloudcutter git repo about it tho. Look at closed issues for my same login name caver01. [Read more]

p.kaczmarek2 05 Mar 2023 07:12

If you are flashing OpenBeken by OTA hack, please post a comment in related teardown article so future users know which profile to use. Teardowns list: https://openbekeniot.github.io/webapp/devicesLi... [Read more]

zhp 06 Mar 2023 22:00

I have just successfully flashed one of these BPPLUG/SMART/3 being sold in 3 packs at Costco. They were running Tuya firmware 1.1.7. They were flashed without problem using the SYW PLUGWIFIG2P Smart Plug... [Read more]

Wonko 06 Mar 2023 23:14

Seems there are several versions of these circulating. Very cool that the CloudCutter project can quickly incorporate new versions too. [Read more]

p.kaczmarek2 07 Mar 2023 08:04

Thank you @zhp , Costco ART. 1528978 BPPLUG/SMART/3 3-Pack Smart Plugs template has been added to the list. Are there any other devices that you guys know that can be also added? Thanks! [Read more]

chri5k 02 Feb 2024 13:19

I ran across another version of this plug purchased from Amazon on 1/31/2024. . It has FCCID: SYW-PLUGWIFIG2N. The model is PLUG/WIFI (N). It uses the Tuya CBU WiFi module that has Beken 7231n chip on... [Read more]

dlushni 14 Nov 2024 20:57

I've used the feit-syw-plugwifig2-smart-plug-v1.1.2.json profile in cloudcutter as 1.1.2 was the FW version on my Costco Feit BPPLUG/WIFI/3 plugs. Flashing ESPHome-Kickstart for the bk7231t went well.... [Read more]

FAQ

TL;DR: Community testers logged a 100 % OTA-flash success rate across four firmware builds of the Feit BPPLUG/WIFI/3 “LED_n is an inversed LED” [Elektroda, p.kaczmarek2, post #20380569][Elektroda, caver01, post #20380510] Why it matters: A repeatable, no-solder method turns a $7 retail plug into an open-source, Home-Assistant-ready switch.

Quick Facts

• FCC ID: SYW-PLUGWIFIG2 / G2N [Elektroda, p.kaczmarek2, post #20380569][Elektroda, chri5k, post #20940983]
• Chips confirmed: BK7231T & BK7231N [Elektroda, Wonko, post #20469902][Elektroda, chri5k, post #20940983]
• Exploitable Tuya firmware: 1.0.9, 1.1.0, 1.1.2, 1.1.7 [Elektroda, Wonko, post #20469902][Elektroda, dlushni, post #21303511]
• Typical flash time: ≈ 90 s via Raspberry Pi 3B+ host [Elektroda, caver01, post #20380510]
• GPIO templates: Variant-A P10-LED_n P24-Rel P26-Btn; Variant-B P8-LED_n P26-Rel P6-Btn [Elektroda, caver01, post #20380510][Elektroda, zhp, post #20473339]

Which Feit smart-plug SKUs are proven flashable?

BPPLUG/WIFI/3 from Costco, BPPLUG/SMART/3 (Costco ART. 1528978), and PLUG/WIFI (N) from Amazon all flashed successfully with CloudCutter OTA [Elektroda, caver01, post #20380510][Elektroda, zhp, post #20473339][Elektroda, chri5k, post #20940983]

What firmware versions work with the exploit?

Community reports show 100 % success on Tuya MCU versions 1.0.9, 1.1.0, 1.1.2, and 1.1.7 [Elektroda, Wonko, post #20469902][Elektroda, dlushni, post #21303511]

Which CloudCutter profile should I pick?

For firmware 1.1.0 choose “oem_bk7231s_rnd_switch” under BK7231T; for 1.1.2 use “feit-syw-plugwifig2-smart-plug-v1.1.2.json”; for 1.1.7 select “SYW PLUGWIFIG2P Smart Plug” [Elektroda, Wonko, post #20469902][Elektroda, zhp, post #20473339]

How do I OTA-flash OpenBeken in three steps?

Clone the latest CloudCutter repo and update submodules. 2. Run cloudcutter, select the matching profile above, then power the plug in pairing mode. 3. After “Exploit succeeded” appears, connect to the temporary AP and upload OpenBeken 1.15.307 or newer [Elektroda, caver01, post #20380510]

What GPIO configuration do I use after flashing?

Variant-A (WB2S/BK7231T): P10 LED_n, P24 Rel, P26 Btn [Elektroda, caver01, post #20380510] Variant-B (G2P BK7231T): P8 LED_n, P26 Rel, P6 Btn [Elektroda, zhp, post #20473339] Variant-N (CBU/BK7231N): P6 LED_n, P24 Rel, P7 Btn [Elektroda, chri5k, post #20940983]

What does LED_n mean?

LED_n drives the LED with inverted logic; the diode lights when the pin is low. “LED_n is an inversed LED” [Elektroda, p.kaczmarek2, post #20380569] Choose LED or LED_n to match desired on/off indication.

Can I flash ESPHome instead of OpenBeken?

Yes. Users flashed ESPHome-Kickstart for bk7231t and supplied a working YAML that maps P10, P24, and P26 [Elektroda, dlushni, post #21303511] ESPHome 2024.4 adds native bk72xx support, reducing custom patches [ESPHome Docs, 2024].

How do I enter AP pairing mode on the BK7231N model?

Hold the button ~5 s until the LED dims, release, wait for fast flash; hold another 5 s until dim, release, LED flashes slowly indicating AP mode [Elektroda, chri5k, post #20940983]

Why is the FCC ID unchanged even after the module swap?

Manufacturers often file a “Class II permissive change” allowing internal component changes without new IDs, so SYW-PLUGWIFIG2 appears on both ESP and BK versions [Elektroda, caver01, post #20380587][FCC database].

Is there a way to show Wi-Fi errors on the same LED?

A ‘generic state LED’ feature request would blink on Wi-Fi failure and otherwise mirror relay state [Elektroda, p.kaczmarek2, post #20380912] OpenBeken devs plan to merge it; meanwhile, set LED to WiFiLED to monitor connection only.

What edge cases cause flashing to fail?

Failure occurs if Tuya blocks OTA in firmware newer than 1.1.17 or if the plug ships with an unlisted profile. In that case, serial flashing or creating a new CloudCutter profile is required [Elektroda, p.kaczmarek2, post #20470096]

How can I help the project?

After a successful flash, post your profile and pin map to CloudCutter and OpenBeken device lists so others replicate your success [Elektroda, p.kaczmarek2, post #20470096]