Skip to main content
Every machine takes a plain SSH connection, and that is all a phone needs. The phone page in the console shows a machine with the SSH apps on your phone as icons. Tap one: boxd creates an SSH token for that machine, copies it, and opens the app on the machine with the token as the password. Nothing from boxd to install on the phone, and no key to carry around.

Open → Mobile on a computer, scan the code, tap your SSH app.

​
Open it

  • From a computer. On the Machines page, open a machine’s Open menu and choose Mobile. It shows a QR code. Scan it with your phone. The code is only a link to the machine’s phone page: nothing secret is on the screen or in the code.
  • On the phone. https://app.boxd.sh/mobile lists your machines. Pick one, or go straight to https://app.boxd.sh/mobile/<machine>.
Sign in on the phone with the GitHub or Google account you use for boxd. The phone page signs in an existing account only, so create your account on a computer first. If you are in more than one organization, the machine list has an organization picker at the top.

​
Tap your SSH app

The page shows the apps it can open on your phone. A tap creates the token, copies it to the clipboard and opens the app, so you can always paste the token if the app asks for a password.

​
Any other SSH client

It is a normal SSH connection, so any client works, on a phone, a tablet or anywhere else. Open Another SSH app on the phone page for the fields every “new host” form asks for, and tap Create token for the password. The same fields are under Connection details in the Mobile dialog on a computer. In a terminal app it is one command, with the token at the password prompt:
The token is shown only while the page is open. Save it in the app or in your password manager; leaving the page and coming back means creating a new one.

​
Tokens

A token is the password for one machine, and it lives for a year. You can hold up to 10 live tokens per machine, about one per device. Every token is listed under Tokens, on the phone page and in the Mobile dialog on a computer, with Revoke. Lost your phone? Revoke its token from a computer. Access is checked at connect time, so a token for a machine you can no longer reach, such as one that was unshared, opens nothing.
The phone page connects you to a machine. Creating machines, and features that need the boxd CLI, such as pasting images into a coding agent, work from a computer.