EVERYDAY · HOSTS
Manage hosts and credentials.
Host model
| Field | Purpose |
|---|---|
| Connection type | Choose Astra for astrad; choose SSH only for a regular SSH server |
| Name | Identification and sorting on your device |
| Address and port | A hostname/IP reachable from this device and the Astra UDP port, without a URL scheme |
| Username | The daemon's Unix user in Rootless mode; the target system account in Managed mode |
| Key | An OpenSSH-format Ed25519 or RSA private key for challenge-response authentication |
Astra Hosts and standalone SSH/SFTP Hosts are distinct connection modes. SSH/SFTP is not an automatic fallback when the Astra protocol fails.
Credential storage
You do not need to generate a key in Terminal first. Key Management can create an Ed25519 key and Copy Public Key lets you add its public half to the server. You can also import an existing unencrypted OpenSSH Ed25519 or RSA private key. Host settings and private keys are stored in the system Keychain. If iCloud Keychain is enabled, Apple's end-to-end encryption can sync them to your devices. The website never receives them.
Host trust
Verify the certificate fingerprint through a trusted channel on first connection. If a trusted host's certificate changes, confirm whether the server was reinstalled or its certificate was intentionally rotated before updating the record.