Skip to content

First connection ​

1. Create the vault ​

On first launch you can set a vault master password (or run passwordless). The vault encrypts saved account passwords, key passphrases, secret Snippet values, and sync credentials.

WARNING

The master password cannot be recovered. It is not the sync encryption key, and may differ on each device.

2. Find or create a host ​

Concrete Host aliases from an existing ~/.ssh/config appear immediately. Quick Connect searches names, groups, tags, and user@host:port.

While there is no connection, Home and Connections show the tiles Add connection, Open SSH Config, and Receive by sync. To begin without a connection, press Open a local shell below them.

To add one, open Connections → Add connection, then enter an alias, host, user, and port. Add a key, password, or ProxyJump only when needed.

3. Check before connecting ​

  • Check reachability verifies name resolution, TCP, and host key.
  • Check authentication with saved settings continues through authentication.
  • Resolved values shows effective values and their source, including Include and Match.

Confirm unknown host key fingerprints before saving them. sshc rejects a changed saved key.

4. Open it ​

Use Connect, tap a Quick Connect panel, double-click it on desktop, or run:

sh
sshc ssh <alias>

The progress view distinguishes resolution, jump hosts, host key checks, authentication, and shell startup. On failure, use the displayed error code and cause.

Home displays an OS icon for each connection. Detection runs after a normal SSH connection opens; unknown systems use a generic server icon. Use Operating system icon on the Display & terminal tab of the connection details to choose an override. Failed detection does not interrupt the terminal.