ONE-TIME SETUP

Stop typing your root password.

Set up any device once and you get passwordless ssh vps, an agent session that survives disconnects, and your authenticator + passwords in your pocket. Nothing secret ever leaves your device — only your public key is uploaded.

1 · Passwordless VPS + agent

Pick your device — paste one line

🐧 Linux

Paste into a terminal. Generates a key, sets up ssh vps / ssh claude, asks the root password once.

curl -fsSL https://download.hankelsner.tech/downloads/access/linux/setup.sh | bash

🪟 Windows

Paste into PowerShell (uses the built-in OpenSSH client).

irm https://download.hankelsner.tech/downloads/access/windows/setup.ps1 | iex

No OpenSSH? Settings → Apps → Optional Features → add OpenSSH Client, then re-run.

🤖 Android (Termux)

Install the Termux terminal app on the phone, open it, paste:

pkg install -y openssh mosh curl && curl -fsSL https://download.hankelsner.tech/downloads/access/android/termux-setup.sh | bash

Prefer a tap-to-connect SSH app? Generate a key inside the app, then run vps-access isn't needed — just paste the app's public key into ~/.ssh/authorized_keys on the VPS (or ask the agent to add it). Set host = 2.25.212.168, user = root.

🔑 Hank: skip the password entirely — grab your pre-authorized one-tap terminal setup (Software → Android, signed in as hank).

2 · Never lose the agent session again

🔁 `ssh claude` — a session that can't be dropped

After setup, connect with ssh claude instead of ssh vps. It drops you straight into your persistent tmux session main — the same one you work in now. If your signal dies, just run ssh claude again and you land back exactly where you left off. Run claude --continue inside to resume the assistant if it stopped.

On mobile, mosh vps is even better — it rides through Wi-Fi↔LTE switches, sleep, and dead zones without dropping. Best combo: mosh vps -- tmux new -A -s main.

The server also now pings every 30s to hold idle connections open (already applied).

3 · Your authenticator + passwords (hankelsner.tech)

🔐 The Keys app — vault & authenticator

Your 2FA codes and account passwords live in your vault. The Keys app unlocks them on your phone: log in once, it saves a device key, and after that it opens without a password — online or off.

Download Keys APK Open in browser (PWA)

On desktop, just open keys.hankelsner.tech and “Install app”. Same vault, same one-time login.

4 · Cancel a key whenever you want

🧹 Revoke a device

Every device you add is one line you can pull at any time. From a VPS shell (ssh vps):

vps-access list                 # see every device that can log in
vps-access revoke <label|#>      # cancel one instantly (e.g. vps-access revoke old-phone)
vps-access status               # password-login + keepalive state

Once your keys work on the devices you keep, you can turn off password login entirely: vps-access password off. (Leave it on until you've confirmed a key works — so you can't lock yourself out.)

Lost your phone and worried about the Keys app? Ask the agent to rotate the app device-key, or change your hank@ password — that invalidates the app on the lost device.

Verify (optional)

🔎 VPS host key fingerprint

The setup scripts pin this automatically. If you ever set up a device by hand, confirm the fingerprint matches:

SHA256:T2g8cYjawsfiTVqO/jpNUswXg0GMw7gJx/M6i9nUQSg (ed25519)
host: 2.25.212.168 · srv1768390.hstgr.cloud · [2a02:4780:75:b197::1] · user: root · port 22