Secure access for
every device.

Follow the five steps. The page remembers your progress on this device and generates the exact commands you need.

Start onboarding ↓

0 of 5 completeSaved on this device

Secure network

Join the tailnet

Done

Install Tailscale, sign in with Shawn's account, approve the VPN configuration, and leave Tailscale connected.

Automatic isolation: New phones can be reached by trusted computers, but cannot initiate connections to other tailnet devices.

Terminal

Done

Use the F-Droid builds for Termux and Termux:Boot. Both apps must come from the same source.

Key-only access

Done

Paste this entire block into Termux. It installs OpenSSH, trusts the fleet public key, disables password login, and starts port 8022.

TERMUX · SETUP

Key fingerprintSHA256:AkCAUMSwRNh2u8fc6YH9N6Zv6pEts+j/KAb5r78iUPg

Persistence

Done

Close and reopen Termux, then paste the service block. It enables SSH now and creates the boot script.

TERMUX · AUTOSTART

Android Settings → Apps → Termux → BatteryChoose Unrestricted

Repeat for Tailscale and Termux:BootAllow background operation

Connection

Done

Enter the phone's Tailscale machine name and the username printed by the setup block.

Phone name Termux username

Complete both fields to generate a command.

Taildrop a file to this phone

Enter a phone name and file name.

Ready for remote work

The private SSH key remains on newhorizons and is backed up in Proton Drive. Only the public key is installed on phones.