Remote access

Remote access is what lets your phone see and steer the agents running on your Mac — the live mirror, replies, the widget, and Live Activities all ride on it. There is no server in the middle: your phone talks directly to your Mac, always gated by a paired device token.

Three ways to reach your Mac

• Same Wi-Fi — the phone finds your Mac on the local network automatically. Nothing to set up.
• Secure tunnel — one tap opens a public HTTPS tunnel. No account, no port-forwarding, works from anywhere.
• Tailscale — install once for the lowest-latency private link between your devices.
• Token-gated — every request carries a device token your Mac minted. No token, no access.

Pair a phone

1. On the Mac, open Settings → Phone access and show the pairing code.
2. In the iPhone app, tap Pair and scan the QR code (or type the six digits).
3. The Mac mints a token, the phone stores it in its Keychain, and you're connected. The code expires in three minutes.

One phone can pair with every Mac you own and watch them all at once — the Terminals tab shows a section per Mac.

Turning on off-network access

On the same Wi-Fi it just works. To reach your Mac from the cellular network or a different Wi-Fi, flip Remote access on — from the Mac's Phone access settings, or right from the phone's connection menu.

Remote access is a single, predictable transport at a time: when it's on, the Mac routes everything through the tunnel (which the widget needs, since app extensions can't use the local network); when it's off, you're LAN-only.

What crosses the wire

Only the terminal stream and your input. Your code, your shells, and your agents never leave the Mac — the tunnel forwards to a loopback bridge and nothing more. You can hit the Disconnect kill-switch from the phone at any time, which drops the fleet and closes every live mirror.

Remote access is a Termary Pro feature. Read the deeper security model on the security page.