Written 24 Aug 2026. This is a how-to, not a product card. Buy links are not tagged yet.
SSH from the couch
Type commands on the leftover box from your laptop, on the house network. Password login first. Do not open this to the internet.
You installed the OS on the leftover box. The next job is to reach it without sitting in front of it. That is SSH. The short version is already in your first weekend. This page is for when that connect step is fussy.
What this is
SSH, a way to type commands on that box from your normal computer, over the house network. Same idea as sitting at the leftover box keyboard, minus the closet.
This assumes Debian or Ubuntu Server, the OS from what OS to put on the leftover box, installed as in your first weekend, with the SSH server checkbox on. Ubuntu Server offers that checkbox. If you skipped it, plug a screen in once and run:
sudo apt install openssh-server
The command
On Windows, use Windows Terminal or PowerShell. On a Mac or Linux, use Terminal. The command is the same:
ssh you@that-address
Swap you for the leftover-box username, and that-address for the number from the first weekend. That number is on the router device list, or from hostname -I on the box.
Trust the box, then the password
The first time, it asks to trust the box. That is the host key, a fingerprint of this machine. That is normal on a house network. Say yes. Next time it will not ask, unless you reinstalled the OS.
Then it asks for the leftover-box password. Type it. Nothing will show as you type. That is normal. Press Enter.
You should see a prompt on the leftover box. You are in. Try hostname so you can see it is the right machine. Type exit to leave.
Two usual failures
| What you see | What it usually means |
|---|---|
| Connection refused, or timed out | The leftover box is off, the address is wrong, or openssh-server is not installed. |
| Permission denied | Wrong user or wrong password. The user is the one you created at install, not Administrator, not pi unless you named it pi. |
For connection refused, confirm the address. Ping is optional. Plug in a screen if you have to, install openssh-server, try again. Ubuntu has a firewall called ufw. If ufw is on, allow SSH with sudo ufw allow OpenSSH.
Keep it on the house network
Do not forward port 22 on the router. SSH is for the house network. If you need this from a coffee shop, that is a later VPN note, not a hole in the firewall.
SSH keys, a file instead of a password, can wait until password login works for a week.
What next
The first useful thing on this box is still Pi-hole, then a file share. That is the first useful thing on the leftover box.
Skip
Skip exposing port 22 to the internet. Skip changing the SSH port on day one. Skip fail2ban on day one. Skip Tailscale or WireGuard until you actually leave the house. Skip buying a KVM for this. Skip root login over SSH.
Sources
Ubuntu Server: OpenSSH server. Debian: ssh man page. Official pages only. For the leftover box install, see your first weekend. For the OS choice, see what OS to put on the leftover box. Next job: the first useful thing on the leftover box.