logo elektroda
logo elektroda
X
logo elektroda
Dostępna jest polska wersja

Czy wolisz polską wersję strony elektroda?

Nie, dziękuję Przekieruj mnie tam

Tapo P105 teardown, RTL8720CF smart plug internals, relay and power supply

User question

tapo p105 teardown

Artificial Intelligence Response

Direct answer to the question

The closest verifiable Tapo P105 teardown I found is the FCC internal-photo filing for the US model. From those photos, the P105 is a compact smart plug built around one mains power/switching PCB plus a small RF daughterboard/module. The RF module uses a Realtek RTL8720C-family Wi‑Fi/BLE SoC; the chip marking in the FCC photo appears to read RTL8720CF. The main board contains a relay, electrolytic capacitors, an inductor, LED/button hardware, and the AC‑to‑DC supply section. (device.report)

For the US version, TP-Link currently specifies the P105 as 100–125 V AC, 15 A, 1800 W, 1/6 HP, with 2.4 GHz Wi‑Fi and Bluetooth used for setup only. TP-Link also lists FCC, RoHS, and UL certifications and a flame-retardant PC (UL94 V-0) enclosure material. (tp-link.com)

Detailed problem analysis

1) What the internal construction shows

From the FCC internal photos, the device is organized like this: (device.report)

  • Main power/switching board
    • AC input prongs and output socket contacts
    • A blue electromechanical relay
    • Several electrolytic capacitors
    • A power inductor
    • Low-voltage supply circuitry
  • Small RF daughterboard/module
    • Realtek combo wireless SoC
    • Printed PCB antenna
  • User interface hardware
    • Status LED
    • Power/reset button mechanism

A useful engineering takeaway is that this is not an ESP8266-era design. The FCC close-up strongly indicates a Realtek RTL8720CF, and TP-Link’s official spec listing of Bluetooth for setup only is consistent with a Wi‑Fi/BLE combo SoC rather than a plain Wi‑Fi-only ESP8266-class part. (device.report)

2) Likely power-supply topology

The internal photos do not show an obvious mains isolation transformer. Based on that, the P105’s low-voltage supply appears to be a non-isolated off-line converter rather than an isolated flyback supply. That is an inference from the published photos, not an official TP-Link service statement, but it is the safest assumption for bench work. In practice, you should treat the logic side as potentially mains-referenced until proven otherwise. (device.report)

That matters because:

  • a normal grounded oscilloscope can short mains-referenced circuitry,
  • USB-UART adapters can become hazardous if clipped directly to the board,
  • live debugging should be done only with proper isolation methods. (device.report)

3) Relay and switching arrangement

TP-Link’s current FAQ states that most regions, including the United States, use single-pole smart plugs, and the P105 is explicitly included in the FAQ’s applicability list. That means the plug likely switches only one conductor—normally the line/hot—rather than both line and neutral. (tp-link.com)

So, from a teardown perspective, expect:

  • one relay handling the load path,
  • line interruption rather than full disconnection of both conductors,
  • behavior typical of a cost-optimized compact smart plug. (tp-link.com)

4) Mechanical opening

The external photos show a smooth plastic shell with no user-accessible screws and a visible perimeter seam. From that, the enclosure is likely opened by prying the seam, and it may be clip-fit and/or ultrasonically joined. That last point is an inference from the product photos rather than official disassembly guidance. (device.report)

Practically, this means:

  • opening it cleanly is difficult,
  • cosmetic damage is likely,
  • the enclosure’s original safety integrity can be compromised. (device.report)

5) What is not visible

I do not see obvious dedicated energy-metering hardware in the FCC photos, and TP-Link markets the P105 as a basic on/off smart plug rather than an energy-monitoring model. So if your goal is power measurement, this is probably the wrong Tapo plug family member to start with. (device.report)

6) Revision / current identification status

There was an original FCC grant for the P105 under FCC ID 2AXJ4P105 on August 18, 2022. A later filing under FCC ID 2BH7FP105 on January 19, 2025 is listed as a change in identification, and the filing explicitly references the original FCC ID. That suggests the later US-labeled product remains fundamentally the same approved RF design, even if labeling/commercial ownership details changed. (device.report)

Current information and trends

As of the current TP-Link US product page, the P105 is still positioned as a compact 15 A / 1800 W smart plug with 2.4 GHz Wi‑Fi and Bluetooth onboarding, not as a Matter or energy-monitoring flagship model. TP-Link’s support content also still treats the P105 as part of the mainstream US single-pole smart-plug lineup. (tp-link.com)

For firmware hackers, the significant trend is that these newer compact plugs are often Realtek/Beken-based rather than Espressif-based. The open-source LibreTiny project currently lists RTL8720CF / RTL8720C support and its tooling explicitly supports RTL8720C devices, so custom firmware work is possible in principle, but it is a different workflow from classic ESP8266/ESP32 flashing. (github.com)

Supporting explanations and details

A concise architecture summary:

Section What is visible Engineering implication
RF board Realtek RTL8720CF-looking SoC, PCB antenna Wi‑Fi + BLE combo platform, not ESP8266-style
Main board Relay, electrolytics, inductor, supply parts Mains switching + local low-voltage generation
UI LED and pushbutton hardware Local control and pairing/reset
Switching Single-pole behavior in US lineup Likely opens hot/line only (device.report)

If you are reverse-engineering it, the daughterboard is the highest-value area:

  • identify UART/test pads,
  • confirm boot-mode pins,
  • dump flash before modifying anything,
  • document the relay driver transistor and supply rails on the main board.
    Those steps are not stated in TP-Link documentation, but they are the normal engineering path for analyzing a device built like this. (device.report)

Ethical and legal aspects

Because the P105 is sold as a UL/FCC/RoHS-certified consumer mains device, opening or modifying it can undermine the assumptions behind that certification in real-world use. Once opened, you should no longer assume the assembly retains its original fire, insulation, or creepage/clearance safety margin. (tp-link.com)

Safety is the main issue here:

  • mains voltage is lethal,
  • the supply appears non-isolated,
  • an opened plug should not be returned to service unless you can verify safe reassembly and insulation integrity. (device.report)

Practical guidelines

If your goal is teardown for identification, this is what to look for first: (device.report)

  1. RF module marking
    • likely Realtek RTL8720CF
  2. Relay marking
    • exact part number is not legible in the public FCC photos
  3. Power supply section
    • identify rectification, HV capacitor, buck inductor, and low-voltage rail
  4. Switching path
    • trace hot/line through the relay to the socket output

If your goal is custom firmware or local control, plan around a Realtek toolchain, not stock ESP binaries. LibreTiny/ltchiptool are the relevant ecosystem starting points, but this is an advanced job requiring soldering, serial access, and recovery planning. (github.com)

If your goal is repair, the most likely high-stress areas from the visible construction are:

  • relay,
  • supply electrolytics,
  • off-line supply section,
  • solder joints around mains-current paths.
    That last list is engineering judgment based on the observed architecture rather than an official failure bulletin. (device.report)

Possible disclaimers or additional notes

  • The details above are tied primarily to the US FCC-documented hardware. Regional versions and later hardware revisions can differ internally even if the retail name remains “Tapo P105.” (device.report)
  • Some exact component numbers on the public photos are simply not readable, so a full BOM-level teardown is not possible from the FCC images alone. (device.report)

Suggestions for further research

If you want, I can do any of these next:

  • create an annotated teardown map of the P105 from the FCC photos,
  • infer the power-supply topology in more detail,
  • help identify likely UART / flashing pads,
  • compare P105 vs P115/P125 internal architecture,
  • give a safe disassembly procedure for opening your own unit.

Brief summary

The Tapo P105 teardown picture is: compact single mains PCB + separate RF module, Realtek RTL8720CF-class Wi‑Fi/BLE silicon, electromechanical relay, likely non-isolated off-line power supply, single-pole switching in the US family, and no obvious energy-metering hardware. For hacking or repair, the main practical cautions are mains safety and the fact that this is Realtek-based, not ESP-based. (device.report)

If you want, I can next give you a photo-by-photo annotated teardown of the FCC internal images.

Ask additional question

Wait...(2min)
Disclaimer: The responses provided by artificial intelligence (language model) may be inaccurate and misleading. Elektroda is not responsible for the accuracy, reliability, or completeness of the presented information. All responses should be verified by the user.