Cloud Sync

Sync your connections across all your devices with a Thermal account. Your connection settings are encrypted and stored securely in the cloud.

Creating an Account

  1. Click Sign In in the top-right corner of Thermal
  2. Click Create Account
  3. Enter your email and password
  4. Verify your email address

Your password is never sent to our servers. We use client-side encryption to protect your data.

Signing In

  1. Click Sign In in Thermal
  2. Enter your email and password
  3. Your connections will sync automatically

You can sign in on multiple devices. Changes sync within seconds.

How Sync Works

Thermal uses zero-knowledge encryption to sync your connections. This means your data is encrypted on your device before it ever reaches our servers, and only you can decrypt it.

The Encryption Process

When you create or modify a connection:

  1. Your connection data (including passwords and private keys) is encrypted locally using a key derived from your account password
  2. Only the encrypted blob is sent to Thermal's servers
  3. Other signed-in devices download the encrypted data
  4. Each device decrypts the data locally using your password

What We See

Our servers never see your actual connection data. Here's what a synced connection looks like in our database:

{
  "id": "519f2360-fd98-4cee-a013-be71bbed053a",
  "encryptedPayload": "pOifj2tQn331YkJPwUNVvhpsOuD...",
  "nonce": "SoCnBC6lKfSJMgLur3Mp7YOC8YkBTJhK",
  "version": 1
}

We cannot see your hostnames, usernames, passwords, or private keys. The encryption key never leaves your device.

Everything syncs securely - connection names, hosts, ports, usernames, passwords, and private keys are all encrypted and synced across your devices.

What doesn't sync:

  • Terminal history (stored locally only)

Managing Devices

View and manage your signed-in devices:

  1. Go to thermal.app/dashboard/devices
  2. See all devices where you're signed in
  3. Click Sign Out to remove a device

Signing Out

Click your profile icon and select Sign Out. Your local connections remain on the device but will no longer sync until you sign in again.