A 13-person company sits between you and a locksmith
It is 2026, and somewhere a renter is sticking a small black box onto the inside of a door she does not own. No drill. No landlord email. No locksmith invoice. Ten minutes of 3M tape and a phone app later, she can let the dog-walker in from three time zones away. That box is a Sesame, and the company behind it is CANDY HOUSE, Inc. - a small, stubbornly global hardware outfit headquartered in Palo Alto with engineers scattered across Tokyo, Shenzhen and Taiwan.
CANDY HOUSE is not a giant. It is roughly a dozen people and an estimated $2.4M in annual revenue. What it has instead of scale is a clear idea: the smartest thing a lock can do is not replace your door, but quietly upgrade it. The whole company is an argument that keyless entry should be cheap, removable, and yours.
Smart locks asked you to rip out your door
Here is the inconvenient truth the first wave of smart locks tried to talk you out of: replacing a deadbolt is a project. You need tools, a free afternoon, and ideally a door you own. For the millions of people who rent, that ruled them out entirely. The early smart-lock market quietly addressed homeowners with screwdrivers and ignored everyone else.
CANDY HOUSE saw the gap and refused to pretend it wasn't there. The bet was almost rude in its simplicity: don't replace the lock - ride on top of it. Mount a motor over the existing thumb-turn, sync the exact angle the bolt travels, and let software do the rest. Keep your keys. Keep your deposit. Add a brain.
It started with cash, coffee, and a 3D printer
The origin story is almost too tidy. In 2014, a Taiwanese Stanford engineering student named Jerming Gu got tired of fumbling for cash at a campus Starbucks while everyone around him tapped cards. If a wallet could collapse into a phone, he reasoned, why not a keyring? He bought a 3D printer with two fellow Stanford engineers - Gary Chang and Sungjune Jang - and printed the first prototype in a dorm room.
They named the lock Sesame, after the "Open Sesame" of Ali Baba and the Forty Thieves. It is the kind of name that sounds like a gimmick until you realize it is also the entire product spec in two words. In February 2015 they put it on Kickstarter. The campaign hit its goal in about nine hours and finished near $1.4 million from 7,493 backers. A student project had become a company.
A Decade of Sticking to It
One lock, five different ways in
What CANDY HOUSE actually sells is an ecosystem with a tape backing. At its center is the Sesame lock, but the more interesting move was admitting that not everyone carries a smartphone. Kids don't. Many grandparents don't. So the lineup grew sideways: a Touch reader for cards, fingerprints and PINs; a Face module that does 3D facial recognition and palm-vein authentication; and a Hub the size of a coin that adds Wi-Fi, infrared and Matter so the whole thing speaks the smart-home lingua franca.
Sesame 5 / 5 USA
The retrofit lock. Tapes over your deadbolt, auto-locks, and tracks the exact turn angle of the bolt.
Sesame 5 Pro
Brushless motor rated for 1M+ cycles. Built for Airbnbs and doors that never get a day off.
SESAME Touch / Pro
Card, fingerprint and PIN reader for everyone who doesn't want to fish out a phone.
SESAME Face / Pro
3D facial recognition and palm-vein unlock - the sci-fi end of the catalog.
Hub 3
Coin-sized hub with Bluetooth, Wi-Fi, IR and Matter for remote control.
SesameOS 3
The platform underneath, with a free Bluetooth API and an open-source app.
That last item is the quiet radical one. Most lock makers guard their firmware like, well, a vault. CANDY HOUSE ships a free Bluetooth API and an open-source app, which is why Sesame turns up in Home Assistant threads and hobbyist projects. The company gave away the keys to its keys.
The numbers that back the pitch
A good story is cheap. CANDY HOUSE has a few figures that aren't. The funding ladder climbs from crowdfunding strangers to corporate Japan, and the hardware specs read like a company that took durability personally.
From the crowd to the boardroom
Then there are the partners. The 2022 Series A pulled in ITOCHU, APAMAN, Wiz and Asterisk - names that matter in Japanese real estate and distribution, which is exactly where a retrofit lock wants friends. In 2025 the company signed a roughly 350M yen partnership with MIWA Lock, a heavyweight in physical door hardware. A tape-on startup shaking hands with a legacy lockmaker is the sort of detail that tells you the idea graduated.
Make the upgrade small enough to say yes to
Strip away the face scanners and the Matter logos and CANDY HOUSE's mission is almost old-fashioned: spend money on what matters, and make the good thing affordable. The company frames its work as building "simple yet innovative lifestyles filled with surprises and joy" - the small delight of a candy house. In practice that means lowering every barrier between a person and a smarter door: no tools, no commitment, no premium tax, no closed firmware.
It is a B2C and B2B hardware business that behaves a little like an open-source project. That tension - polished consumer product on one side, free developer API on the other - is the company's whole personality. They want you to buy the lock. They also seem genuinely fine if you tinker with it.
The case for not owning your hardware future
The smart-home world is consolidating around Matter, aging populations need doors that open without fumbling for keys, and renting is becoming the default rather than the exception for a generation. A removable, affordable, standards-friendly lock is not a niche - it is increasingly the obvious shape of the category. CANDY HOUSE has been building exactly that since before the rest of the market admitted renters existed.
Back to that renter and her door. She moves out next year. The Sesame peels off, the keys still work, the deposit is safe, and the box goes in a moving carton to the next apartment. Nothing was drilled. Nothing was lost. The door she didn't own got smarter for a while, and then it forgot - which, when you think about it, is exactly what a good guest does.