logo elektroda
logo elektroda
X
logo elektroda
Advanced Search
logo elektroda

[ECR6600 ] Teardown and OpenBeken Conversion of TNCE TUYA Smart Plug WiFi from AliExpress

djbios 1956 11
ADVERTISEMENT
Reply Cool? Ranking DIY | New topic
Notify about new articles
  • Laboratory power supply and prototype board on a glass desk.
    Hi all! Let me share my teardown of TNCE TUYA Smart Plug WiFi I recently bought on AliExpress for 5 euros. The original Tuya firmware was pretty unstable and I decided to covert it to OpenBeken. Luckily, OpenBeken supports ECR6600 platform so it was possible to flash it via UART. I'll show the flashing process here step by step.

    Here is the look of the device
    A person holding a white electrical adapter with a Schuko socket on a dark background.
    Electrical adapter held in a hand.
    Smart electric socket in gray with a visible power button.
    Travel adapter with two pins on a dark background.

    To open up the device without much damage I used a vice: slightly squeezing from both sides till the little crack sound allows to crack the glue and split the plastic into 2 parts

    Electrical socket adapter with an on/off switch.

    Then removing one little screw allows to extract the PCB


    Open plug with visible interior.
    A circuit board held in hand with various electronic components.
    Close-up of a blue printed circuit board with visible electronic components.
    Close-up photo of a blue circuit board with electronic components and the inscription ESWIN.
    A printed circuit board with electronic components held in a hand.
    Blue circuit board with a mounted relay.
    Blue circuit board with a lever switch on a black background.

    We can see that the socket is built on the basis of ECR6600, which OpenBeken recently supported. To measure the voltage/current they use BL0937CF.

    On the back of the PCB, there are convenient pads to solder the USB-UART adapter

    Electronic circuit with JIEYING relay and connected wires.

    Then we need an external 3.3V power source, I used an adjustable lab one

    Laboratory power supply and prototype board on a glass desk.

    I used this guide https://www.elektroda.com/rtvforum/topic4111822.html to flash the firmware, in a nutshell you need to:
    1) Download ESWIN_ECR6600_RDTool_v1.0.21.zip from here https://github.com/openshwprojects/FlashTools/tree/main/TransaSemi-ESWIN and use RDTool.exe
    2) In RDTool you double click "develop tool" tab, select the COM port, and on "all-in-one file path" select the firmware from latest release https://github.com/openshwprojects/OpenBK7231T_App/releases/ (ECR6600 UART Flash) - I used OpenECR6600_1.18.62.bin
    3) Then you need to click start and enable the power source of a device. You might not get in sync from the first attempt (there is some very specific timing, smth like 0.5 sec to power device after start clicked) - that's okay, you will succeed eventually.
    4) After the program finishes the flashing - you all set, the device runs free firmware now.

    Now you can unsolder the wires, put PCB back in a case and try to put it in the socket. WiFi hotspot should be running now.

    The pins configuration is:

    Code: JSON
    Log in, to see the code


    UPD: Attached the original firmware

    Enjoy!
    AI: Did you encounter any specific issues or challenges during the teardown or firmware conversion process?
    No, just needed to collect the info from different sources
    AI: How familiar are you with similar teardown and firmware flashing processes?
    A bit
    Attachments:

    Cool? Ranking DIY
    About Author
    djbios
    Level 2  
    Offline 
    djbios wrote 2 posts with rating 6. Been with us since 2025 year.
  • ADVERTISEMENT
  • #2 21486307
    p.kaczmarek2
    Moderator Smart Home  
    Thank you for sharing! It's good to see that ECR6600 support is being useful for our users. Did you see that, @divadiow @insmod ? You did good job with research and porting.

    Did you try some other drivers as well, like NTP or SSDP?

    I think we also may need to look into powersave feature for such plugs, I've already seen one with broken capacitor due to the too high current consumption.

    Interestingly enough, I've received a very similar plug just yesterday, but it was T34-based and not ECR6600: https://www.elektroda.com/rtvforum/topic4112776.html
    Helpful post? Buy me a coffee.
  • #3 21486425
    divadiow
    Level 34  
    p.kaczmarek2 wrote:
    Did you see that, @divadiow @insmod ? You did good job with research and porting.

    😁😁

    are you finding wifi is OK @djbios?

    what's your RSSI shown in OBK? what's the distance from device to router/AP? what speed has it connected (if your router tells you)?

    Added after 14 [minutes]:

    I thought I'd submitted the previous one of these for the device list. I guess not. https://www.elektroda.com/rtvforum/topic4111822.html#21480857

    Also, did you miss the LED @djbios - P22?

    https://github.com/OpenBekenIOT/webapp/pull/187
  • ADVERTISEMENT
  • #4 21486794
    p.kaczmarek2
    Moderator Smart Home  
    @divadiow how many ECRs did you have with WiFi problems?
    Helpful post? Buy me a coffee.
  • #5 21486822
    divadiow
    Level 34  
    only the WG236 modules in testing. Same as @insmod. I don't have a real ECR6600 device yet.
  • ADVERTISEMENT
  • #6 21486846
    p.kaczmarek2
    Moderator Smart Home  
    Did they come blank by default or with AT firmware? Is there a RF-calibration utility in the SDK?
    Helpful post? Buy me a coffee.
  • ADVERTISEMENT
  • #7 21486856
    divadiow
    Level 34  
    They come with something on. It feels more likely it's a calib issue with the WG236 modules specifically, yes. I'll take a fresh look this evening. I have already transplanted RF nv partition from Tuya firmware to module to no effect.
  • #8 21503392
    jannie_doedel
    Level 3  
    works like a charme !!
    Tried to load NTP and worksfine too.
    Only chip temp is 0.0. Without config it showed 44 degrees.
    Display showing energy consumption data and parameters of the OpenECR6600 device.
    What is the pin for wifiled ?
  • #9 21503405
    divadiow
    Level 34  
    divadiow wrote:
    Also, did you miss the LED @djbios - P22?

    this one maybe?

    Added after 52 [seconds]:

    template in device list is

    Code: JSON
    Log in, to see the code
  • #10 21503446
    jannie_doedel
    Level 3  
    >>21503405
    Yes thats the one.
    Thx !

    Added after 2 [minutes]:

    >>21503392
    The temperature indication must have been a glitch as it is working now
  • #11 21503467
    insmod
    Level 22  
    >>21503446 Not a glitch, on your screenshot there are 2 incomplete boots. If more than one - internal temperature readout is disabled.
Reply Cool? Ranking DIY | New topic
Notify about new articles
Report a violation of the law

Topic summary

A teardown and firmware conversion of the TNCE TUYA Smart Plug WiFi purchased from AliExpress was performed, replacing the unstable original Tuya firmware with OpenBeken firmware. The device is based on the ECR6600 platform, which supports flashing via UART. The opening process involved carefully cracking glued plastic parts and removing a screw. Discussion highlighted the usefulness of ECR6600 support in OpenBeken and compared it to a similar T34-based plug. Users explored additional driver support such as NTP and SSDP, and considered power-saving features due to concerns about high current consumption damaging components like capacitors. WiFi performance was discussed, including RSSI, connection speed, and LED pin assignments (notably P22 for WiFi LED). Some issues with chip temperature readings were noted, attributed to incomplete boots disabling internal temperature readout. WG236 modules were mentioned as having potential RF calibration issues, with attempts to transplant RF calibration data from Tuya firmware proving ineffective. The device template includes pins for BL0937CF, BL0937SEL, WiFi LED, button, and relay.
Summary generated by the language model.
Popular Topics
ADVERTISEMENT