Techniques are described for reducing false alarms related to security and automation systems. One method includes receiving a request to activate a security function associated with a automation system, initiating a first security duration after a predetermined time associated with the received request, detecting an occurrence of an event associated with the automation system during the first security duration, initiating a second security duration based on the detecting, and broadcasting a message requesting authentication credentials at a location of the automation system during the second security duration.