Skip to content
Tunnelero

Get your first device online

This is the fastest path from a fresh Raspberry Pi (or any Linux box) to a device you can watch, command, and SSH into from anywhere. Five short steps, about five minutes.

Step 1 — Create your account

Create an account (or sign in if you already have one). Every new account starts on the Trial: one device, every feature, no time limit and no credit card. You land straight in the dashboard.

Step 2 — Create an enrollment token

In the dashboard go to Devices → Enroll device and click Generate enrollment token. You get a single-use token that is shown only once and expires 15 minutes after you create it. Keep the page open for the next step; if it expires, just generate another.

Step 3 — Run one command on the Pi

On the device, open a terminal (on a Raspberry Pi that is Raspberry Pi OS; any Linux distro works the same way) and paste the command the dashboard shows. It looks like this:

curl -fsSL "https://app.tunnelero.com/install.sh" \
  | sudo TUNNELERO_AGENT_ENROLL_TOKEN="<your-token>" \
    TUNNELERO_AGENT_SERVER_URL="https://app.tunnelero.com" \
    sh -s -- --download-base "https://app.tunnelero.com"

You do not have to understand every flag. The installer detects your architecture (arm64, armv7, or amd64), downloads and verifies the agent, and starts it as a background service. The device generates its own private key locally; the key never leaves the device.

Step 4 — Watch it come online

Go back to Devices in the dashboard. Your new device appears in the list and its status flips from registered to online within a few seconds of the agent starting. The list and the device page update on their own while you watch, so you do not need to refresh. If it stays registered, confirm the device has internet access and that the token had not already expired when you ran the command.

Step 5 — Open a tunnel and SSH in

Open the device, find Reverse SSH tunnel, and enable it. Pick a short alias (3 to 24 characters, lowercase letters, digits, and hyphens, for example pi-livingroom) or leave it blank to let us choose one. Once the status is established, the dashboard shows a ready-to-copy command:

ssh -p 22451 [email protected]

Here pi is the device's own login user (use whatever user you log in as on that device), and 22451 is the port shown for the tunnel. You authenticate with your own SSH key, which must already be in that user's authorized_keys on the device.

Run that from your laptop and you are logged into the Pi, even though it sits behind your home router with no port forwarding. That is it: your device is enrolled, live, and reachable.

Where to next