Smart Plugs and Aquarium Automation Basics
Which aquarium loads can safely run on a smart plug (lights, CO2 solenoid), which must keep their own control (heaters, filter pumps), fail states on power or network loss, and RCD/GFCI protection.
What a smart plug is
Wikipedia defines a smart plug as a power plug fitted between an appliance cord and the wall socket that works as a remote-controlled power switch, turning an ordinary appliance into a network-connected device. Control runs over Wi-Fi, Bluetooth, Zigbee or Z-Wave through a phone application, a home-automation hub or a voice assistant, and most units offer schedules and a built-in ammeter that logs consumption in kilowatt-hours. In an aquarium that energy log is itself a sensor: a heater or pump drawing no current while it should be running is an equipment failure that can be alarmed on. Devices that add probes and control logic on top of plain switching are covered in aquarium-controller-guide.
Loads that are safe to schedule
Lighting
Tropical Fish Hobbyist recommends running aquarium lights on timers for consistency and notes that many fixtures now include built-in timers with gradual sunrise and sunset ramps. Lighting is the textbook case for a schedule: a failed plug leaves the light off or on, and neither state is a danger.
CO2 solenoid valve
A CO2 solenoid is a valve that opens only while powered; Wikipedia's fail-safe article lists solenoid valves that close by spring force on power loss as a standard fail-safe element. The reason to switch it at all comes from the pond chemistry described by Texas A&M AgriLife Extension: plants remove carbon dioxide during the light period and pH rises, while at night CO2 accumulates and pH falls. Running the solenoid on the same schedule as the lights, so that gas flows only while plants can use it, follows that logic. If the plug, the network or the mains fails, the valve closes, which is the safe direction.
Pumps
Pump schedules are the hardest case. UF/IFAS lists water-pump and air-pump failure among the emergencies for which a recirculating system needs a written protocol, because a stopped pump means a stopped oxygen supply. A pump on a smart plug inherits every failure mode of the plug. Any pump that keeps fish or the biofilter oxygenated should therefore not be switched by schedule at all, and a pump that is switched must have running as its default state.
Loads that must keep their own control
Heaters
Every aquarium heater on the market is thermostatically controlled (TFH). A thermostat is an on-off controller with built-in hysteresis, so the water oscillates by roughly 1–2 °C around the setpoint rather than sitting exactly on it (Wikipedia). A smart plug or an external temperature controller can add a second, independent cut-off above the heater's own switching point, an arrangement described in temperature-controller-guide, but the heater's internal thermostat must stay in place. A plug that switches a heater from a single probe has no protection against its own failure or against a schedule running while the probe is out of the water. TFH adds that two smaller heaters slow overheating if one sticks on, and recommends keeping a spare heater for outright failures.
Filters and biofilter pumps
A biological filter is a living oxygen consumer. UF/IFAS states that when oxygen becomes insufficient the nitrifying bacteria stop functioning or die, and ammonia and nitrite rise. Filter and aeration pumps should therefore never sit on a schedule that switches them off, and their plugs should default to on. UF/IFAS asks recirculating farms to design redundancy for filters and pumps; at home that means a second pump or air source that does not share the same plug or smart switch.
Fail states on power and network loss
Automation adds two new failure paths to a tank: the mains can fail, and the network can fail while the mains stays up. For each automated load the question is what the plug does in both cases. Wikipedia's fail-safe principle is that a failure should inherently leave the system in the least harmful state: a de-energised solenoid closes, a de-energised heater cools, a de-energised pump stops, and only the first two are acceptable outcomes. Schedules should run locally on the device rather than depend on a cloud connection, and a load with a dangerous off state should not be automated at all.
Wikipedia's watchdog-timer article shows the pattern used in embedded controllers: a timer that the control software must reset periodically, and that on timeout forces outputs into a fail-safe state, shutting down heaters, or reboots the controller. The same logic applies to monitoring: a controller that stops hearing from a sensor or plug must alarm on silence, mirroring the normally closed alarm circuit in which a broken wire triggers the alert. Response to a failure of the mains itself is covered in power-outage-aquarium-guide.
GFCI and RCD protection
A residual-current device (RCD, called a GFCI in North America) compares the current leaving through the line conductor with the current returning through the neutral; when the two no longer balance, current is leaking to earth, possibly through a person, and the device trips (Wikipedia). Devices for personal protection trip at 30 mA in IEC countries and at 5 mA in the United States and Canada, and are designed to disconnect within 25–40 ms, fast enough to prevent ventricular fibrillation. An RCD does not protect against overload or a short circuit between line and neutral; that remains the job of the fuse or circuit breaker, and a combined RCBO does both. Every device has a test button that simulates a leak, and Wikipedia notes that regular testing keeps the mechanism from sticking. Repeated tripping is diagnostic: deteriorating insulation is a documented cause, so the fault is usually in a device, not in the RCD.
TFH's practical rules complete the picture: all aquarium electrics on GFCI protection, a drip loop on every cord so that water runs down the cable and drips off below the socket, power strips mounted vertically on the back of the stand and never on the floor or stand base where drips land, and weekly cleaning of salt creep around connections because salt water and electricity do not mix. A smart plug is itself an electronic device near water, so the same drip-loop and mounting rules apply to it.