Remote access

Remote access lets you use the Hub from a browser on another computer, a tablet or a phone, with the same pages as the app. It is off until you switch it on, and it is part of the Pro and Team plans.

Use it over a VPN (such as Tailscale or WireGuard) or your own network. Never forward its port to the internet.

Switch it on

Open Settings → Remote access:

1. Security: how browsers trust the Hub.
   • Hub certificate: the Hub makes its own certificate authority. Download its certificate and install it once on each device that connects.
   • My certificate: your own certificate files.
   • Behind a proxy: a reverse proxy in front of the Hub handles TLS.
2. Listen on and Port: the network and port to listen on (47890 unless you change it), and the names and addresses browsers will use.
3. Live video: pictures only for slow links, and whether the phone in focus gets full quality.
4. Save, then Switch on.

Signing in

People sign in with their username and password, set on the Security page or under My account, and a second factor (an authenticator app) is recommended. Repeated wrong passwords are slowed down and locked out for a while.

What a remote session cannot do

A session from another device cannot run shell commands, manage secrets, or change system settings such as remote access itself. Those stay on the computer the Hub runs on.

Related: Privacy and security.