Pair each computer separately. The phone must be able to reach the computer over Tailscale or an explicitly configured trusted local network.
Prepare the connection
The default loopback listener is reachable only from the computer itself. A pairing QR code cannot make it reachable from a phone.
Guided setup offers network choices. For Tailscale, use devices in the same tailnet. For a trusted LAN, configure the companion’s listen address and allow_lan, then restart it. Follow the Linux instructions for the configuration. Do not expose Ophio directly to the public internet or forward its port through a router.
Pair
Use the phone step in ophio setup. For manual pairing, leave Ophio running and open another terminal:
ophio pair- Scan the computer’s pairing code with the Android app.
- Compare the six-digit code on both devices. Check that the computer shows the expected phone name.
- Confirm at the computer by typing
y, or runophio pair confirm <code>. - In guided setup, review what the phone may do before allowing it.
If anything differs, refuse and start again. Never confirm a code someone else sent you. Treat the pairing offer as a password. Do not include it in screenshots, issues or chat messages.
What pairing establishes
The offer contains addresses, the computer’s certificate fingerprint and a one-time secret. The phone creates its own device key. It is enrolled only after confirmation at the computer. Later connections authenticate with that key and pin the computer’s TLS certificate.
Pairing grants specific device permissions. It does not enable every capability or make every task ask for approval. Coding Work defaults to skipping native permission prompts.
Under Settings → Connections and devices, Devices with access lists paired devices where this phone has management permission. For a sample phone named travel-phone, Permissions for travel-phone opens its grants and Save permissions applies changes. Account access can only be granted at the computer.
Several computers
Open Settings → Connections and devices → Paired computers to switch saved computers or change a Computer name label. Renaming a label does not change the paired identity.
Each computer has its own pairing and certificate. Switching computers does not merge their projects, files, accounts or task history. Check which computer is selected before sending work or changing access.
Certificate or access problems
Do not accept an unfamiliar certificate just because the address looks familiar. Another machine can occupy the same address. Check the computer and the reason its identity changed before pairing again.
Forget this computer on this device removes the phone’s saved connection, not its authorization at the computer. Forget on this device only leaves that access record in place. Where permitted, Revoke this device, then forget removes access first. Previously downloaded files remain on the phone.
To cut off a lost phone, revoke it from the computer.
Next
Run ophio doctor to check available capabilities. Desktop sharing is enabled separately. Set up notifications if you want alerts while the app is closed.