# How to access remote systems over Meshnet using SSH ## Introduction With the advancement of technology, remote system management has become crucial in today's digital landscape. [Secure Shell](https://en.wikipedia.org/wiki/Secure_Shell) (SSH) is a popular choice when it comes to accessing remote servers, desktop computers, and devices like Raspberry Pi due to its flexibility and efficiency. While the client-server architecture of SSH makes communication between devices secure, it is not completely risk free, especially if you rely on password authentication. Used in conjunction with [Meshnet](https://nordvpn.com/meshnet/), the SSH method can be as safe as physically accessing the server. Not only does Meshnet save time and travel costs, allowing you to connect directly to your remote device, but it also protects your SSH connection. Using an SSH key pair to authenticate your identity provides an additional layer of security by reducing the risk of password-based attacks. This article explains what an SSH connection is, how it can be established via Meshnet, and how you can generate an SSH key pair to additionally protect the connection. ## What is SSH? SSH is a command-line access method that lets you log in to another computer, execute commands, and transfer files between computers. Being a lightweight protocol, SSH is typically used for remote server administration and is especially prevalent in the Linux infrastructure. ## Using SSH on Linux, Windows, and macOS While SSH is mostly used for controlling Linux machines, both Windows and macOS can also be accessed using this method. All three operating systems employ an open-source implementation of SSH tools called [OpenSSH server](https://www.ssh.com/academy/ssh/openssh). ### Enable SSH access To make your device accessible via SSH, you need to install and enable the OpenSSH server software. {% tabs %} {% tab title="Linux" %} {% hint style="info" %} **Note** In this guide, Ubuntu 22.04.1 LTS serves as the example for the provided instructions. {% endhint %} To install SSH server on Linux: 1. Open the terminal and install the SSH server by running this command: 
sudo apt update && sudo apt install openssh-server
2. Once the installation is complete, confirm that the SSH service is running by checking its status. The output should tell you that the service is active. Run the following command:\ 
sudo systemctl status ssh
3. To prevent the firewall from blocking your remote connection, open the SSH port by typing: 
sudo ufw allow ssh
You can now connect to your Linux system via SSH from any remote device over Meshnet. {% endtab %} {% tab title="Windows" %} To enable SSH on Windows, complete the following steps: 1. Open **Settings** and select **System** > **Optional features**. 2. Click **View features**. 3. In the search field, type in `OpenSSH`, select the **OpenSSH Server** checkbox, and click **Next**.
OpenSSH Server feature.
4. Click **Add**. 5. Once the installation is finished, open PowerShell as an administrator by pressing the **Windows** key + **R**, typing in `powershell`, and pressing **Ctrl** + **Shift** + **Enter**. 6. Run the following command to start the OpenSSH server process: 
Start-Service sshd
7. Ensure the SSH service is enabled each time you reboot your computer using this command:\ 
Set-Service -Name sshd -StartupType 'Automatic'
You can now connect to your Windows machine via SSH from any remote device over Meshnet. {% endtab %} {% tab title="macOS" %} To connect to your Mac using SSH, you need to enable remote login in your system settings. 1. Choose the Apple menu > **System settings** > **General**, and click **Sharing**. 2. Under **Advanced**, turn on the **Remote login** toggle.
Remote login option
3. If needed, select the Info and turn on the **Allow full disk access for remote users** option. 4. Optionally, specify which users can log in. You can now connect to your Mac via SSH from any remote device over Meshnet. {% endtab %} {% endtabs %} ### Connect to your remote computer through SSH Before attempting to connect, ensure you have the correct username for the remote computer account. {% hint style="success" %} **Tip** To view your username, run the following command in **Command Prompt** (on Windows) or **Terminal** (on Linux or macOS): ``` whoami ``` {% endhint %} {% tabs %} {% tab title="Windows, macOS, and Linux" %} To access your remote system via SSH from a desktop device: 1. Open **Command Prompt** (on Windows) or **Terminal** (on Linux or macOS). 2. Enter the following command, where `` is your remote PC account name and `` is the Nord name or Meshnet IP of the computer you want to access: 
ssh <username>@<server>
\ **Example** 
ssh ubuntu@100.105.90.201
or 
ssh ubuntu@secret.meerkat-altai.nord
3. The first time you connect, you will be asked to verify the authenticity of the server. This message is displayed to make sure you’re connecting to the correct remote server. Type `yes` to continue, as shown:
SSH key fingerprint confirmation
4. Enter the password for the specified username. You should now be connected to your remote device using SSH. {% endtab %} {% tab title="Android" %} To access your remote system via SSH from an Android device: 1. Download and install the [ConnectBot](https://play.google.com/store/apps/details?id=org.connectbot) SSH client from the Google Play Store. 2. Open **ConnectBot**. 3. Tap the plus (+) button to add a host device. 4. Under **Protocol**, enter the following information, where `` is your remote PC account name and `` is the Nord name or Meshnet IP of the computer you want to access.\ 
<username>@<server>
\ **Example**
Remote device's username and hostname
5. Tap the plus (+) button in the upper-right corner. 6. Select the newly added host device to initiate a connection. 7. Enter the password for the specified username. You should now be connected to your remote device using SSH.
Terminal of the remote device.
{% endtab %} {% tab title="iPhone/iPad" %} To access your remote system via SSH from an iOS device: 1. Download and install the [WebSSH](https://apps.apple.com/us/app/webssh-sysadmin-tools/id497714887) application from the Apple App Store. 2. Open **WebSSH**. 3. To add a new host device, tap the empty area of the main screen or the plus button in the upper-right corner. 4. Specify the following information: * In the **Host** field, enter the Nord name or Meshnet IP of the remote PC. * In the **User** field, enter the account name of the remote computer. * In the **Password** field, enter the authentication password of the user account. \ **Example**
Remote device's details for SSH connection.
5. Tap the check mark button in the upper-right corner. 6. From the main application screen, tap the newly added device to initiate a connection. 7. Tap **Continue** to confirm the host key fingerprint.
SSH fingerprint confirmation.
You should now be connected to your remote device using SSH.
Terminal of the remote device
{% endtab %} {% endtabs %} ## Configuring SSH keys An [SSH key](https://www.ssh.com/academy/ssh-keys) is a cryptographic key that is used for user authentication while establishing an SSH connection. It increases the security of SSH connections and allows for efficient automation, as it doesn't require human intervention for authentication. ### Generate an SSH key To use key-based authentication, you first need to generate a key pair on the device from which you will be making an SSH connection. 1. Run the following command in **Command Prompt** (on Windows) or **Terminal** (on Linux or macOS): 
ssh-keygen
2. Press **Enter** to keep the default file location. 3. For additional security, you can choose a custom password. Otherwise, press **Enter**. A pair of keys (private and public) will be generated with the same `id_rsa` name. However, the public key can be distinguished from the private key by its file extension, which is `.pub`.
SSH keys generated
### Copy your public SSH key to a remote device To use SSH keys for authentication, you need to copy the public key of your device to the device you will be accessing. For example, if you are using Windows and want to connect to a Linux server, you need to copy the public SSH key of the Windows device to the Linux machine. When establishing an SSH connection, the public key is matched with the private key to authorize the connection.
Allow SSH key authentication on Windows To connect to a Windows device using an SSH key, you must first enable public key authentication. Otherwise, you will be asked to enter the SSH password even after sharing the public key. On the remote device that you will be accessing, take the following steps: 1. Open **PowerShell** as an administrator. 2. Navigate to the `ssh` folder by using the `cd` command:\ 
cd C:\ProgramData\ssh
3. Run the following command to create a new `administrators_authorized_keys` file which will store the public keys of the connecting devices:\ 
New-Item -ItemType File -Name administrators_authorized_keys
4. Update the permissions to the newly created file with the following command:\ 
icacls administrators_authorized_keys /inheritance:r /grant "Administrators:F" /grant "SYSTEM:F"
5. Run the command below to open the `sshd_config` file:\ 
notepad sshd_config
6. Locate and uncomment the `PubkeyAuthentication yes` line by removing the hash (`#`) symbol at the start.
"PubkeyAuthentication yes" line highlighted in Notepad.
7. Press **Ctrl** + **S** to save changes and exit **Notepad**.
{% tabs %} {% tab title="From Windows" %} To exchange the SSH public key, follow these steps on the device from which you want to establish an SSH connection: 1. Open **PowerShell**. 2. Depending on the device that you will be accessing, run the following appropriate commands, where `` is the username of the remote device's account and `` is the remote device’s Nord name or Meshnet IP. * If you're copying your SSH key to a Linux or a macOS device, use this command:\ 
type $env:userprofile\.ssh\id_rsa.pub | ssh <username>@<server> "cat >> .ssh/authorized_keys"
\ **Example** 
type $env:userprofile\.ssh\id_rsa.pub | ssh ubuntu@secret.meerkat-altai.nord "cat >> .ssh/authorized_keys"
* If you're copying your SSH key to a Windows device, use the following three commands:\ 
$PublicKey = Get-Content "$env:userprofile\.ssh\id_rsa.pub"
     $CopyKey= "echo $PublicKey >> %programdata%\ssh\administrators_authorized_keys"
     ssh <username>@<server> $CopyKey
\ **Example** 
$PublicKey = Get-Content "$env:userprofile\.ssh\id_rsa.pub"
     $CopyKey = "echo $PublicKey >> %programdata%\.ssh\administrators_authorized_keys"
     ssh meshnet@secret.meerkat-andes.nord $CopyKey
3. If prompted, type in yes and press **Enter** to confirm the key fingerprint.
SSH key fingerprint confirmation
4. Enter the remote device’s account password and press **Enter**. {% endtab %} {% tab title="From Linux and macOS" %} To exchange the SSH public key, follow these steps on the device from which you want to establish an SSH connection: 1. Open **Terminal**. 2. Run the following command, where `` is the username of the remote device's account and `` is the remote device’s Nord name or Meshnet IP: 
ssh-copy-id <username>@<server>
\ **Example** 
ssh-copy-id ubuntu@secret.meerkat-altai.nord
3. If prompted, type in `yes` and press **Enter** to confirm the key fingerprint.
SSH key fingerprint confirmation
4. Enter the remote device’s account password and press **Enter**. You will see a message that the key has been added.
SSH key added
{% endtab %} {% endtabs %} Once the SSH key exchange is complete, you can use the same format to establish an SSH connection to the remote device: {% code overflow="wrap" %} ```bash ssh @ ``` {% endcode %} However, you will not be prompted to enter a password unless you choose a passphrase while generating the SSH key. And now you can securely access your remote device via SSH over Meshnet. ## (Showcase) SSH connection using Visual Studio Code A tool that is often used by beginners and novices alike for SSH connection is Visual Studio Code (VS Code). At its core, VS Code is an integrated development environment (IDE). However, with the help of a vast marketplace, it can be used as a powerful tool for remote server management. ### Install VS Code You can download VS Code for Windows, macOS, and Linux from the [VS Code downloads page](https://code.visualstudio.com/download). Choose the file appropriate for your operating system and install the app. ### Install the SSH extension Once you have installed VS Code, you need to install an extension that will allow you to establish SSH connections to remote devices. 1. Launch **VS Code**. 2. From the left sidebar, select **Extensions**. 3. In the search field, type in `Remote - SSH` and select the corresponding option.
Selecting the "Remote - SSH" extension from the marketplace.
4. Click **Install**.
"Install" button highlighted.
### Add a new SSH host device Next, create a new entry in your system's SSH configuration file for the remote device you want to access directly from the VS Code app. This saved information enables VS Code to display all configured host devices, allowing you to quickly connect to any of them. 1. From the left sidebar, select the **Remote explorer** tab. 2. Next to **SSH**, click **New remote**.
Arrow pointing to the "New remote" button next to SSH.
3. In the text field, type in the command to access the remote device using SSH. \ \ **Example**
SSH command entered in the provided text field.
\ See the [Connect to your remote computer through SSH](#connect-to-your-remote-computer) section above for more details. 4. Select in which SSH configuration file the connection should be saved. VS Code should prompt a notification that the host has been added. ### Establish the SSH connection Finally, you can connect to the added host device using the Remote - SSH extension. 1. In the **Remote explorer** tab, under **SSH**, locate your newly added connection. 2. Click **Connect in current window**.
Arrow pointing to the "Connect in current window" button.
3. Select the operating system of the remote device and, if prompted, click **Continue** to confirm the device fingerprint. 4. Enter the password of the remote user account and press **Enter**. The first connection may take some time, while the relevant packages are installed. After that, you can control the remote device's CLI and navigate its directories using VS Code. {% hint style="info" %} **Note** If the remote device is not visible under the **SSH** section, click the **Refresh** button next to **Remotes (tunnels/SSH)**. {% endhint %} --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://meshnet.nordvpn.com/how-to/remote-access/access-remote-systems-over-ssh.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.