SKL/Device Onboarding
FAMILY DEVICE SETUP ANDROID · LAPTOPS NEXT
Portrait of Shawn Lewis YOUR TRUSTED HELPERThis is Shawn.If you know this face, you’re in the right place.
A SIMPLE GUIDE · SHAWN CAN HELP

Help is closer when
you need it.

Set up this Android device once, then Shawn will be able to help with it securely when needed. You do not need to understand the technical commands—the page gives you exactly what to tap and paste.

Start onboarding ↓
0 of 4 completeSaved on this device
01

Secure network

Join the tailnet

Install Tailscale from Google Play. On its login page, choose the QR-code option. Leave that code on this device while Shawn scans it with a separate trusted phone.

Tailscale app icon GOOGLE PLAYTailscaleTailscale Inc. Install ↗ Official Tailscale QR instructions ↗

Where the QR code is

Look at the very bottom of the Tailscale login page.

  1. 1

    On this device open Tailscale and start login.

  2. 2

    Tap the underlined QR code link shown in the red box.

  3. 3

    Shawn uses another trusted phone to scan the code and approve this device.

Two devices are easiest: the code stays visible here while Shawn scans it. If Shawn is not beside you, take a screenshot of the real QR code and send the picture to him on WhatsApp. He can open the picture and scan it; if it has expired, make a fresh code and send that one.
Automatic isolation: New phones can be reached by trusted computers, but cannot initiate connections to other tailnet devices.
02

Terminal

Install Termux

Install the Google Play version shown below. It requires Android 11 or newer, and its restart support is already built into the main app—there is no separate Termux:Boot app to install.

Termux app icon GOOGLE PLAYTermuxFredrik Fornwall Install ↗ About the Google Play build ↗
  1. Check that the listing says Termux and uses the black >_ icon shown above.
  2. Tap Install, then open Termux once.
  3. Allow notifications if Android asks; this helps the SSH service stay visible while it runs.
03

Key-only access

Configure SSH

Paste this entire block into Termux. It installs OpenSSH, trusts the fleet public key, disables password login, and starts port 8022.

TERMUX · SETUP
Key fingerprintSHA256:AkCAUMSwRNh2u8fc6YH9N6Zv6pEts+j/KAb5r78iUPg
Send Shawn the username: when the command finishes, find the line beneath TERMUX USERNAME:. It will look like u0_a109, but it is different on each installation. Send that exact line to Shawn on WhatsApp.
04

Phone settings

Allow background access

Android may stop Tailscale or Termux to save power. Set both apps to Unrestricted so Shawn can reach the device when help is needed.

This part must be done on the phone. Shawn will handle restart automation later after he connects.

Open Termux settings Open Tailscale settings

Android only. After the app information screen opens, tap Battery → Unrestricted. If nothing opens, use the written route below.

1

Android Settings → Apps → Termux → BatteryChoose Unrestricted

2

Repeat for TailscaleAllow background operation

Finished: Send Shawn the Termux username from Step 3 and tell him both battery settings are Unrestricted. He can find the new device in Tailscale and take it from there.

Ready when help is needed

One device. Four steps.
No password left behind.

Shawn can securely connect from an approved computer to help with this device. The private key stays on newhorizons and its Proton Drive backup; only the harmless public key is placed here.

Also planned

Laptops are next.

This same page will grow to include Windows and other laptop setup. For now, the Android steps above are complete.

Tailscale downloads ↗
Copied