====== SSH Access ======

===== Warning! =====

  * As this is the Linux superuser account, you are strongly encouraged to [[https://remarkablewiki.com/tech/file_transfer#making_local_backups|make backups]].
  * Firmware updates and [[https://remarkablewiki.com/trouble/factory-reset|factory reset]] will change your SSH password. **Writing down your password is recommended, but not enough! It is strongly recommended that you set up a [[#Passwordless_Login_with_SSH_Keys|passwordless login with SSH keys]].**
  * If your operating system is using OpenSSH 8.8 or later, you will need to [[#OpenSSH_8.8_and_later|manually enable ssh-rsa keys]].

This guide will teach you how to log into your reMarkable from your computer. There is a separate article on [[https://remarkablewiki.com/tech/file_transfer|how to transfer files]].

===== Finding your Password and IP Address =====

Connect your reMarkable to Wi-Fi or via USB (or both), and you will find your SSH password and IP address (or addresses) in the settings menu.

  * Settings > Help > Copyrights and licenses > General information (scroll down)

===== Connecting via SSH =====

On Windows, you have to first enable the official [[https://docs.microsoft.com/en-us/windows-server/administration/openssh/openssh_install_firstuse#install-openssh-using-windows-settings|OpenSSH client]]. Then open a command line prompt (Windows Key + R, type 'cmd', press Enter).

On MacOS and Linux, you already have an SSH client, so just open Terminal.

If you connected your reMarkable via USB, enter the following command:

<code>
ssh root@10.11.99.1
</code>

If you connected your reMarkable via Wi-Fi, the IP will be assigned by your router and can vary greatly depending on your network configuration. Usually it takes the form below. Replace ''x'' with the appropriate number.

<code>
ssh root@192.168.0.x
</code>

Then enter your reMarkable password. The password will not be shown as you type it.

===== Tips =====

==== SSH Config File ====

You can set up an alias that is easier to remember by adding the following lines to the ''~/.ssh/config'' file on your computer:

<code>
host rem
    Hostname 10.11.99.1
    User root
    Port 22
    IdentityFile ~/.ssh/id_rsa
</code>

The file above will allow you to login by entering ''ssh rem'' (instead of ''ssh root@10.11.99.1'') and [[https://remarkablewiki.com/tech/file_transfer|transfer files]] with ''scp <source> rem:<destination>''. You can replace the word "rem" with an alias of your choice.

==== Passwordless Login with SSH Keys ====

The reMarkable uses [[https://matt.ucc.asn.au/dropbear/dropbear.html|dropbear]] (via [[https://www.busybox.net/|BusyBox]]) for its SSH server and supports ssh-rsa keys. Keys save you from having to enter the randomly generated password repeatedly.

On your computer, generate a public and private SSH key pair with

<code>
ssh-keygen
</code>

You can leave the location blank to use the default and leave the passphrase blank.

=== With ssh-copy-id ===
ssh-copy-id may not work on newer reMarkable releases as ssh-copy-id places the keys in ''/etc/dropbear/authorized_keysNeeded'' instead of  ''~/.ssh/authorized_keys''. Use the **Without ssh-copy-id** instructions below if you have issues.

To send the public key ''id_rsa.pub'' from your computer to the reMarkable use

<code>
ssh-copy-id root@10.11.99.1
</code>

=== Without ssh-copy-id ===

On your reMarkable, create an ''.ssh'' directory 

<code>
mkdir -m 700 ~/.ssh
</code>

Exit the SSH session and send the host key from your computer to the reMarkable
<code>
scp ~/.ssh/id_rsa.pub root@10.11.99.1:~/.ssh/authorized_keys
</code>

On your reMarkable again, set the permissions of ''authorized_keys'' to owner read and write
<code>
chmod 600 ~/.ssh/authorized_keys
</code>

==== OpenSSH 8.8 and later ====

Starting with OpenSSH 8.8 ssh-rsa keys are [[https://www.openssh.com/txt/release-8.7|disabled by default]], so you will get the following error when trying to log into your reMarkable.

<code>
Unable to negotiate with 10.11.99.1 port 22: no matching host key type found. Their offer: ssh-rsa
</code>

You can check your OpenSSH version with ''ssh -V''

Some Linux distros like Fedora 33 have also disabled weaker ssh-rsa keys independently of OpenSSH. That means you could face the same issue on OpenSSH versions lower than 8.8, depending on the distro you are on.

To allow ssh-rsa keys, add the following lines to your [[#SSH_Config_File|SSH Config file]].

<code>
  PubkeyAcceptedKeyTypes +ssh-rsa
  HostKeyAlgorithms +ssh-rsa
</code>